---
title: HTTPS proxy configuration not working
source: https://docs.newrelic.com/docs/infrastructure/infrastructure-troubleshooting/troubleshoot-infrastructure/https-proxy-configuration-missing
---

## Problem

The infrastructure agent's HTTP/HTTPS proxy configuration is not working.

For best proxy results, we recommend using the [most recent infrastructure agent](https://docs.newrelic.com/docs/infrastructure/install-configure-manage-infrastructure/update-or-uninstall/update-infrastructure-agent).

## Solution

If the proxy configuration for your infrastructure agent isn't working, the problem may be due to proxy precedence.

Review the section below for your infrastructure agent version:

**Version 1.3.1 or higher**

Infrastructure agent versions 1.3.1 or higher uses the following proxy precedence:

| Configuration                     | Precedence | Windows    | Linux      |
| --------------------------------- | ---------- | ---------- | ---------- |
| `NRIA_PROXY`                      | 1          | HTTP/HTTPS | HTTP/HTTPS |
| `proxy` (in `newrelic-infra.yml`) | 2          | HTTP/HTTPS | HTTP/HTTPS |
| `HTTPS_PROXY`                     | 3          | HTTPS      | HTTPS      |
| `HTTP_PROXY`                      | 4          | HTTP       | HTTP       |

The following options affect TLS certificate configuration:

-   If you use an HTTPS proxy, you probably need to set one of these:
    -   The configuration option `proxy_validate_certificates: true`
    -   The environment variable `NRIA_PROXY_VALIDATE_CERTIFICATES=true`

-   If you use your own self-signed certificates for the HTTPS proxy, keep the default value `proxy_validate_certificates: false`

    Here are some additional factors that affect proxy configuration:

-   The `NRIA_PROXY` and `proxy` configuration options enable HTTP or HTTPS depending on the URL scheme.

-   The `HTTP_PROXY` and `HTTPS_PROXY` environment variables are ignored if either of the these configuration options is set:
    -   NRIA_IGNORE_SYSTEM_PROXY=true
    -   ignore_system_proxy: true

-   The certificate validation won't work in Centos 5 systems.

**Version 1.0.1002 to 1.2.25**

For infrastructure agent versions 1.0.1002 to 1.2.25, review the section below based on your configuration:

-   [Ignore proxy is false](#false)
-   [Ignore proxy is true](#true)

    **Ignore proxy is false**

    If `NRIA_IGNORE_SYSTEM_PROXY=FALSE` or `ignore_system_proxy=FALSE`:

    | Configuration                     | Precedence | Windows | Linux  |
    | --------------------------------- | ---------- | ------- | ------ |
    | `HTTPS_PROXY`                     | 1          | HTTP 1  | HTTP 1 |
    | `NRIA_PROXY`                      | 2          | HTTP 1  | HTTP 1 |
    | `proxy` (in `newrelic-infra.yml`) | 3          | HTTP 1  | HTTP 1 |
    | `HTTP_PROXY`                      | 4          | HTTP    | HTTP   |

    1 HTTPS proxy not supported (redirected to HTTP)

    **Ignore proxy is true**

    If `NRIA_IGNORE_SYSTEM_PROXY=TRUE` or `ignore_system_proxy=TRUE`:

    | Configuration                     | Precedence | Windows | Linux  |
    | --------------------------------- | ---------- | ------- | ------ |
    | `NRIA_PROXY`                      | 1          | HTTP 1  | HTTP 1 |
    | `proxy` (in `newrelic-infra.yml`) | 2          | HTTP 1  | HTTP 1 |

    1 HTTPS proxy not supported (redirected to HTTP)

**Version 1.0.956 to 1.0.989**

Infrastructure agent versions 1.0.956 to 1.0.989 uses the following proxy precedence:

| Configuration                     | Precedence | Windows      | Linux  |
| --------------------------------- | ---------- | ------------ | ------ |
| `HTTPS_PROXY`                     | 1          | HTTPS        | HTTP 1 |
| `NRIA_PROXY`                      | 2          | HTTP/HTTPS 2 | HTTP 1 |
| `proxy` (in `newrelic-infra.yml`) | 3          | HTTP/HTTPS   | HTTP 1 |
| `HTTP_PROXY`                      | 4          | HTTP/HTTPS   | TTP    |

1 HTTPS proxy not supported (redirected to HTTP)

2 When using a HTTPS proxy with a custom TLS/SSL or self-signed certificate, provide either:

-   The certificate file location in `ca_bundle_file`
-   The certificates directory path in `ca_bundle_dir`

**Version 1.0.944 or lower**

Infrastructure agent versions 1.0.944 or lower uses the following proxy precedence:

| Configuration                     | Precedence | Windows | Linux  |
| --------------------------------- | ---------- | ------- | ------ |
| `HTTPS_PROXY`                     | 1          | HTTP 1  | HTTP 1 |
| `NRIA_PROXY`                      | 2          | HTTP 1  | HTTP 1 |
| `proxy` (in `newrelic-infra.yml`) | 3          | HTTP 1  | HTTP 1 |
| `HTTP_PROXY`                      | 4          | HTTP    | HTTP   |

1 HTTPS proxy not supported (redirected to HTTP)

2 When using a HTTPS proxy with a custom TLS/SSL or self-signed certificate, provide either:

-   The certificate file location in `ca_bundle_file`
-   The certificates directory path in `ca_bundle_dir`