Configure the network and proxy
Proxy configuration is global to S3Client. It controls the network route for requests; the endpoint, signing Region, and S3 credentials remain account settings. Proxy credentials do not replace S3 account credentials.
Before setting up a manual proxy, obtain its host, port, and any required authentication details from your network administrator.
Choose a mode on Windows
Open Tools > Options… > Network and select Connection mode:.
| Mode | Effect |
|---|---|
| Use Windows proxy settings (recommended) | The default. Uses Windows proxy configuration, including automatic configuration when provided by the system. |
| Direct connection (no proxy) | Connects without a proxy. Proxy authentication settings are hidden. |
| Manual proxy | Shows the fields for an HTTP proxy configured in S3Client. Only one proxy is accepted per protocol. |
To use multiple proxies with failover, use Windows proxy settings. S3Client does not support SOCKS proxies on Windows.
Set up a manual proxy on Windows
- In Tools > Options… > Network, choose Manual proxy.
- In HTTP proxy:, enter only the proxy’s host name or IP address. Do not include
http://, a path, or a port in this field. Valid IPv6 addresses are accepted with or without brackets. - Set Port: to a value from 1 to 65,535. The initial value is 8,080.
- Keep Use the same proxy for HTTP and HTTPS enabled to use one proxy for both protocols. Otherwise, complete the HTTPS proxy: and Port: fields that appear.
- Enable Do not use the proxy for local addresses to connect directly to host names without a dot, such as
server. This is disabled by default. For an IP address or fully qualified name, add an explicit entry in Additional exceptions:. - In Additional exceptions:, enter hosts to reach directly, separated by semicolons, for example
localhost;127.0.0.1;*.example.com. Wildcards are supported. - Choose the authentication method described below.
- Click OK.
These exceptions apply to manual mode; Windows mode uses the system’s exceptions. An invalid address produces Invalid proxy settings and prevents saving.
If Invalid proxy settings reports The saved proxy configuration is invalid. Windows proxy settings will be used instead., S3Client uses Windows settings for the session. Reopen Tools > Options… > Network, correct the configuration, and click OK.
Choose authentication on Windows
The Authentication group is available in Windows and manual modes.
| Value | Effect |
|---|---|
| Use my Windows account | The default. Allows integrated proxy authentication using your Windows account, with Negotiate or NTLM. Basic and Digest are not accepted in this mode. |
| Use specific credentials | Shows User: and Password:. A nonempty user name is required. Negotiate, NTLM, Digest, and Basic are supported. |
| No authentication | Supplies no proxy credentials. A proxy requiring authentication may reject the request. |
On Windows, the saved password is protected for your Windows user. When you confirm the settings, S3Client clears its stored explicit credentials if you selected a mode other than Use specific credentials or a direct connection.
Configure a proxy on other platforms
By default, Enable proxy is unchecked, Type: is HTTP, and Port: is 1,080.
In Tools > Options… > Network, enable Enable proxy, then complete Type: (HTTP or Socks5), Address:, Port:, User:, and Password:. Ports range from 1 to 65,535. Credentials are optional if the proxy does not require them. Click OK.
Disable Enable proxy to connect directly. Windows modes, separate proxies for each protocol, and their exceptions are not available in this dialog on other platforms.
Understand the scope and check the result
On Windows, network settings apply to S3 requests and HTTPS requests from AWS credential sources such as STS and SSO. Local credential metadata services are reached without a proxy, including loopback addresses and recognized EC2/ECS addresses. Remote HTTP endpoints for these sources are rejected to avoid sending tokens in clear text.
An external process used as a credential source uses its own network settings, without adopting those of S3Client. See credential sources.
To check the result:
- Open File > Accounts….
- Select an account and click Edit….
- Click Test connection.
- Read the result. A proxy error calls for checking the proxy or its credentials; AccessDenied is an S3 denial and must be addressed separately.
New settings apply to new requests. A request already in progress may continue with its original configuration. After an error, rerun the test or operation to check the new configuration. See troubleshooting for detailed messages and traces.