Proxy auto-configuration (PAC) files

After some advice on how to create and serve proxy auto-configuration (PAC) files..?
How to set one up. Syntax, etc.
Thanks in advance,
Tim.

Proxy auto config files are Javascripts that parse the requested URL and return a response to the browser telling it where to go to get the content.
More info is available in multiple formats

Similar Messages

Java proxy auto-configuration and Microsoft PAC script extensions

Hi,
Within our proxy auto-configuration PAC script, we have to use the Microsoft IPv6 PAC script extensions such as myIPAddressEx rather than the old myIPAddress. This is required in order to get the PC's internal 10.0.0.0/8 IPv4 address rather than the IPv6 or wi-fi card addresses that are often returned when using myIPAddress.
However, as soon as we change from myIPAddress to myIPAddressEx, Java seems to be unable to process the PAC script.
Here are the extensions (introduced many years ago:
IPv6-Aware Proxy Helper API Definitions (Windows)
Question - does Java support these extensions or have plans to?
Thanks,
Kev.

Proxy auto config files are Javascripts that parse the requested URL and return a response to the browser telling it where to go to get the content.
More info is available in multiple formats

Proxy auto-config (PAC) impacts ssh, scp, sftp

Dear all,
I have this problem I am trying to find leads on how to understand and eventually solve it.
I am doing a lot of development under Unix. I'm spending most of my time at work on X11 (XQuartz) logged in on remote Unix servers using all "S" versions of standard protocols. I'm under Snow Leopard because Lion is no good to my workflow (sorry to say this).
Since my employer has contracted an external company to filter all outgoing HTTPS traffic - and has updated the legacy proxy PAC file accordingly - I encounter huge latency problems with my ssh, scp and sftp traffic with my remote Unix servers : all "S" protocols are routed through the external company HTTPS filter.
I have created one Network Location (network sys prefs) that uses "Automatic Proxy Configuration" to point to the PAC file server (a).
I have create another Network Location that activates a distinct proxy setting for HTTP and the same for HTTPS protocols. I've set up as Web Proxy server the one defined as PROXY in the PAC file (b).
Using (a) Network preference, all my ssh and scp traffic initiated under X11 is slow as a drag (10kb/s on a 100baseT full duplex to the server in the same building) because it gets piped through the external https traffic filter.
Using (b) Network preference, no problem at all with ssh and scp, and Safari can browse both http and https sites as per company rules.
My question is how can this setting of Network preference - combined with a PAC file - can influence a traffic that is secured through ssl but is not HTTP nor HTTPS !
I am looking for some documentation that would help me understand how Proxy auto-config is implemented in the network layer and if there are any recommendations I can do to my network team to fix their PAC file, perhaps, to restrict the proxy configuration to only http and https.
Any lead will help.
Thanks,
Thierry
The PAC file (stripped of restricted info). Note: The remote servers I'm working on are in the 10/24 IP range and a segment of a Class B my company owns.
function FindProxyForURL(url, host)
          var proxy = "PROXY XXX.YYY.ZZZ.1:80; PROXY XXX.YYY.ZZZ.2:80" ;
if (
          shExpMatch(host, "10.*.*.*") ||
          shExpMatch(host, "192.168.*.*")
          return "DIRECT";
else
          return proxy;

Ooops. Sorry, I meant "10/8", not "10/24" IP range.

Save login/password with Proxy HTTP "Auto" preset (.pac file)

Hi,
I'm behind an Internet proxy. I have configured my iPhone with the following parameters :
Proxy HTTP : Auto + the right URL to get my enterprise .pac file.
What bothers me : I have to re-enter my login/password frequently.
Do you have the same problem ?
Note : The Proxy HTTP "Manual" preset let me enter these login and password, why not the "Auto" preset ?

Hello,
Were you able to successfully build your AIR app? It is possible to bypass the timestamp but there are caveats. Here's what the docs have to say:
If ADT cannot connect to the time-stamp server, then signing is canceled and no package is produced. Specify -tsa none to disable time-stamping. However, an AIR application packaged without a timestamp ceases to be installable after the signing certificate expires.
Chris

Windows 8.1 Apps and Proxy Auto Configuration files

We have installed an app on a number of Surface Pro devices for my client. After installation, the app is unable to connect to the backend service. The following details the configuration:
The apps are installed on Surface Pro 2 devices running Windows 8.1 Professional with an Enterprise Sideloading License
The devices are connected to the company's corporate domain wifi network.
The service is hosted on the same domain network
The network has a proxy configured via the following PAC file:
function FindProxyForURL(url, host) {
　　　　　　// URLs within this network are accessed through
　　　　　 if (shExpMatch(url,"*checklistapp.uhs-pruitt.com/*"))　　　　　 {return "DIRECT";}
　　　　　 if (shExpMatch(url,"*asgs01.uhs-pruitt.com/*"))　　　　　 {return "DIRECT";}
　　　　　 // All other requests go through port 8080 of proxy.example.com.
　　　　　 // should that fail to respond, go directly to the WWW:
　　　　　 return "PROXY wsas360-01.uhs-pruitt.com:80; DIRECT";
The proxy requires authentication when not using a DIRECT connection
When using this PAC file, the app cannot connect to the service (which is at
https://checklistapp.uhs-pruitt.com/Service ), despite the fact that netsh shows that the app is using a direct (no-proxy) connection.
The app connot connect if last line of the PAC file is changed to
DIRECT; PROXY wsas360-01.uhs-pruitt.com:80
When hard coding the proxy (The url below is hosted at 10.100.255.250), the app is able to connect

Hi Ryan,
If you use an Internet proxy server that requires authentication, you may encounter problems when you use apps that connect to the Internet.
Please refer to following article to configure your settings:
Using authenticated proxy servers together with Windows 8
http://support.microsoft.com/kb/2778122/en-us
Kate Li
TechNet Community Support

How to configure Network proxy to use PAC file on Multiple machines ?

Hello all,
If I've posted in the wrong Forum let me know and I'll move ...
I have been asked by my Network team to change the proxy setting to use a .pac file on all our Macs.
I use ARD a lot and know I can change a lot settings using the networksetup command line tool inside the ARD package and that's great! But I can't see a command listing for changing to use a PAC file.
Any suggestions here people ?
Regards
Mitch

I think you have the right Forum personaly!
With no experiemce or knowledge of .pac files, do either one of these help you?
http://www.byteclub.net/blog/cwoodward/category/macos-x/
Scroll to... Wrong proxy settings? Write your own .pac!
http://www.macosxhints.com/article.php?story=20040101095553265
Says Panther, but perhaps Tiger is the same.

Cannot set Proxy Auto Config in iPhone/iPad Configuration Profile

Hi, All.
Our enterprise uses internal and external DNS, and we leverage Proxy Auto Config (PAC) files to determine how to resolve hostnames.
I can create a VPN Configuration Profile with the URL for the PAC file, so that when the VPN is enabled, it will start using the PAC file to resolve.
However, there is no such option in the WiFi Configuration Profile.
Any idea if there is a way to automate this, or if Apple intends to include this in a future version of iOS or iPCU?
Thanks,
David

Ooops. Sorry, I meant "10/8", not "10/24" IP range.

Parse JavaScript '.pac' file and get proxy details using C# code

Hi,
I have PAC file --> (A proxy auto-config (PAC) file defines how web browsers and other user agents can automatically choose the appropriate proxy server (access method) for a given URL (inbound request)).
This PAC file contains a JavaScript function “FindProxyForURL(url, host)”. This function returns a string with one or more access method specifications. These specifications cause the user agent to use a particular proxy server or to connect directly.
Eg:
function FindProxyForURL(url, host)
                // declare variable strings
                //incorrect proxy value
                var use_proxy_yes = "PROXY MyWrongServerAddress:8080";
                //correct proxy value
                //var use_proxy_yes = "PROXY MyCorrectServerAddress:8080";
                var use_proxy_no = "DIRECT";
                //we can keep adding all the url here for which we do not want proxy
                if (shExpMatch(url, "*.MyWebsite.com*")) { return use_proxy_no; }
                // Proxy anything else
                return use_proxy_yes;
} This method will be saved as 'proxy.pac' file.
From C# code i have to parse the above 'proxy.pac' file and get the proxy value that it returns based some condition specified in above method.
Please someone help me know how i can achieve the above requirement. Thanks in advance.
Chetan Rajakumar

Hi,
    HTTP Connection created in ECC is used for retrieving the SWC components of IR....but it cannot be used by PI for psoting the data to Proxy...
so in this need to provide the needed details at XI adapter level ...
chk the below blog which can give u an idea...
/people/siva.maranani/blog/2005/04/03/abap-server-proxies
Also for the above error check below threads
SLD_NO_OWN_BS
error: SLD_NO_OWN_BS, proxy scenario
HTH
Rajesh
Edited by: Rajesh on Apr 15, 2010 12:04 PM

Reading pac file

How to read the proxy auto config(pac) file from java
regards
Rathnapandi

There is any way to read the pac url

PAC file support for Proxy Servers

When will AIR support PAC files for proxy servers?
In our network, we can't point to a PAC file because the AIR app simply ignores it, and we experience comms issues because of it. The workaround is to configure the network settings to point directly at the proxy, bypassing the PAC file.
This is a big problem as pointing directly at the proxy means a lot of manual configuration for each user that requires the use of the AIR app.
Any clues or suggestions?

Hi,
Additional configurations (DHCP and DNS) are required when you use Automatically detect settings.
For details, please refer to:
Automatic Detection and Configuration of Browser Settings
http://technet.microsoft.com/en-us/library/dd361887.aspx
Hope this helps.
Jeremy Wu
TechNet Community Support

Proxy Auto-Discovery

I am in need of having student laptops over the wireless automatically pointed towards a proxy. One option I know is a transparent proxy, but we'd like to be able to let certain users opt out by changing the settings if possible. I found this option in the bootpd manual page:
dhcpproxy_auto_discoveryurl
I added it to my bootpd server by using NetInfo Manager:
dhcpproxy_auto_discoveryurl -> http://192.168.1.99/test.pac
At first I didn't think it was working, but I booted my MacBook Pro into my windows partition and sure enough it all seemed to work. Both IE and Firefox auto-detected the .pac file and started directing their traffic there. I boot into Mac OS X again and it's still not working.
Has anyone had any success with this option to deploy proxy settings? Is there an easier way that doesn't require me manually pointing 200 workstations to a .pac file on the internet? Is this simply a feature that doesn't work in Mac OS X 10.4?
Shane

You may need to configure the clients to use an auto-discovered PAC file.
If you look in System Preferences -> Network -> (interface) -> Proxies you can tell the OS to either use a PAC or use manual settings. It's likely that if you're set to Manual (the default) it ignores the DHCP PAC setting (although that's only a theory).
You may be able to automate this using networksetup, if it's installed on your systems (part of ARD). If it is you can:
<pre class=command>sudo networksetup -setautoproxystate "Built-in Ethernet" on</pre>

Access proxy from terminal using proxy auto-config

I know about using ntlmaps to wrapper my proxy configurations e get access from Terminal, iTerm2, &c exporting http_proxy variable and others. But I don't want go on using this approach because it simply ***** (forgive me for this word...) for a lot of issues.
I would like simply setup my proxy environment on Network Preferences/Advanced/Automatic Proxy Configuration: (host: http://myproxy/proxy.pac) and using this setup for a whole system, including my terminals. Therefore, are there any way to reach it?
Another details, my proxy is authenticated and uses ntlm type and in browser I use internet without problems.
Thanks a lot for any help!
-Leo

I am not quite sure what you are looking for. Mac OS X has supported auto proxy configuration since 10.6 Snow Leopard was introduced (acutally in response to a request I made ). If you open System Preferences, click on Network, then go to the Advanced settings for your network interface, in the Proxies tab there is an option called Auto Proxy Discovery. This is different to Automatic Proxy Configuration which was also available in previous versions of OS X. Automatic Proxy Configuration uses a selected PAC file (Proxy Auto Configuration file) but Auto Proxy Discovery uses the WPAD method of finding your proxy server.
See this article for information about WPAD (Web Proxy Automatic Detection).
http://en.wikipedia.org/wiki/Web_Proxy_Autodiscovery_Protocol
WPAD uses either an option advertised from your DHCP server giving the address of your proxy server, or WPAD can use a standard URL based on your domain name to download a dat file containing your proxy server details.
I have seen reports saying the the DNS method is problematic with Mac OS X but also seen reports that the DHCP method does work with this option successfully. So my suggestion is to define the DHCP option code 252 to advertise your proxy server.
Note: Thanks to yet another request I made in the past the Mac OS X DHCP Server can be manually configured to define additional DHCP option codes including option 252. The ability to define DHCP option codes was added in Mac OS X 10.5 Server (Leopard).

Web Proxy Auto Discovery (WPAD) fails in Creative Cloud

The Creative Cloud desktop application has a problem with WPAD automatic proxy detection. When the computer is configured to "automatically detect settings", the Creative Cloud application will not load the Apps list, giving the error "Download Error. Unable to reach Adobe servers. Please check your internet connectivity, firewall settings, and then try again." All other elements of the Creative Cloud application (logging in, accepting terms of use, the "Home", "Files", "Fonts" and "Behance" tabs have no issues using the automatically detected settings). I can refresh a netstat on the command line and see that the Creative Cloud application tries to make direct calls to the EC2 servers when attempting to connect to the "Apps" list instead of using the proxy.
If I manually configure a PAC file or manually configure the proxy on the computer, the Creative Cloud can connect successfully. The failure only occurs with "automatic detect settings". I have tested different WPAD server configurations, to include Apache on Unix, IIS7 on Windows, text/plain and application/x-ns-proxy-autoconfig MIME types, and CNAME vs A record for 'wpad'. Creative Cloud continues to fail to operate correctly.
The old version of Adobe Application Manager can successfully connect and download updates using "automatic detect settings". It will update itself (and installed apps) successfully. After it updates itself, it will connect and update itself a second time, this time replacing itself with the Creative Cloud application, which fails to connect. This behaviour is new to the Adobe Application Manager once it becomes the Creative Cloud application.
It seems from what "official" documentation I can find that this is currently "broken as designed" (see Adobe references at bottom of post). Connecting directly from a client to the internet without a proxy is prohibited by our information security policy (the chat support agent tried to tell me 3 times that the "solution" was to disable the proxy and open ports 80 and 443 to the internet). Manually configuring the proxy through a PAC file or manually setting proxy information causes other issues and performance problems (I strongly disagree with Adobe staff member Jeff Wright's assertion that automatically detecting the settings is "a common issue with most applications"--see reference at bottom of post).
While I could technically open the firewall or manually configure the proxy to make the Creative Cloud function properly, these are unacceptable workarounds as already stated. Considering that the previous iteration (Adobe Application Manager) functioned just fine with automatically detected settings, and that the rest of the Creative Cloud application functions properly with automatically detected settings, it seems that this should be a minor issue to correct with the application, to ensure that the application cataloging and downloading respects the same configuration as the rest of the client. What is the official Adobe position on the current broken functionality of the Creative Cloud application, and what is the timeline in implementing a fix?
Pertinent Adobe articles:
Creative Cloud Help / Troubleshoot download and install issues (http://helpx.adobe.com/creative-cloud/kb/troubleshoot-cc-installation-download.html):
Corporate environments: Configure Hardware firewalls or proxies
Many organizations use a hardware firewall and proxy server that can prevent software from accessing an FTP server. A hardware solution applies to all computers within the corporate network. Most home networks do not use hardware firewall or proxy technology.
1. Contact your company's IT department to obtain firewall or proxy information.
2. Configure your browser with proxy or firewall information.
3. Configure your corporate firewall to by-pass the servers. The following servers are accessed:
             ccmdl.adobe.com:80
             swupmf.adobe.com:80
             swupdl.adobe.com:80
Post from Adobe staff member Jeff A Wright (Reply 14: http://forums.adobe.com/message/5620841):
Quote: "The automatic detection of settings or the automatic configuration script is not currently supported. Although to be honest when I worked regular in an environment, which utilized a proxy server, this seemed to be a common issue with most applications. The manual configuration was the most reliable method of utilizing a proxy server and allowing the applications to access the Internet."

Thx! that worked! now I can download Apps.
(using squid proxy)
Thx a lot

Proxy automatic configuration with PAC script file

Dears,
Regarding HTTP communications, I would like to auto-detect proxy settings based on system settings.
I can get information on manually configured proxy, using the following code:
import java.net.Proxy;
import java.net.ProxySelector;
import java.net.URI;
import java.net.URISyntaxException;
import java.util.List;
public class Test {
     public static void main(String[] args) {
          System.setProperty("java.net.useSystemProxies", "true");
          try {
               List<Proxy> list = ProxySelector.getDefault().select(new URI("http://www.google.be/"));
               for(int i=0; i<list.size(); i++){
                    System.out.println(list.get(i));
          } catch (URISyntaxException e) {
               e.printStackTrace();
}But ...
I haven't found a way yet to get proxy information from automatic proxy configuration script (pac files).
Has anyone encountered/solved this problem yet?
Many thanks for your help,
Eric

well the simple fact, as far as i know, is there just is no autoproxydetection out of the box library for standalone java apps.
there are some libraries out there, but none of which integrate all the functionality as the java plugin/webstart does. and i could not be able to integrate the webstart jar (javaws.jar, deploy.jar, etc.) into a standalone app. a promising project is the "proxy vole" project on kenai, but that's only beta and not all necessary stuff is there.
i noticed that the eclipse project has some proxy autodetection code and there are a few hints & tricks sites out on the web, explaining how you can do proxy autodetection yourself, like reading, at least for windows, registry keys and a dll to process a proxy pac file, but for instance, no support for windows WAPD through DNS/DHCP.
I've spent quite some hours to do research on all these things, and it's just missing for standalone apps. i was really surprised that sun does not provide the same stuff for standalone apps as they do for webstart apps, which in my opinion is really really dissapointing. maybe they plan to do that, but i wasn't able to find any information about that.
well, that's all i know so far.

Use System Proxy Settings - when this is selected in FF v3.6.6, does it adhere to the same local IE proxy setting? We use a pac file configured in "Use automatic configuration script."

Does anyone know what Firefox looks at locally on the PC when the "Use System Proxy Settings" setting is selected? It appears to be the default setting, recently changed from "No Proxy" of versions past...
Our company uses a pac file specified in IE under "Use automatic configuration script" - with this new default, does it adhere to the same setting in:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

I may be wrong but I think that the "Use System Proxy Settings" makes sense only on Linux and generally speaking "other OSes". As far as I know there is no generic proxy settings in Windows operating system.
The one I know is in the registry part of Internet Explorer.
So in my understanding in Windows, Use System Proxy Settings = No Proxy

Proxy auto-configuration (PAC) files

Similar Messages

Maybe you are looking for