ProxyCap proxy setup
ProxyCap sends the programs you choose through a proxy, and over SOCKS5 it carries their UDP too. Add the gateway once, then write a rule for each program.
- Protocols
- SOCKS5 (recommended), HTTPS and HTTP, with username and password
- UDP
- Yes, over SOCKS5 only
- Where the setting is
- ProxyCap's configuration window: the proxies list and the rules list
- Works with
- Residential and mobile proxies
Before you start
- ProxyCap installed and licensed. Its developer has replaced it with NetDetour (proxycap.com now forwards there) and keeps fixing ProxyCap "for the time being". ProxyCap's help pages are offline, so the steps below describe each place in plain words.
- Your proxy login and password from the Residential or Mobile page of the dashboard.
- Traffic on the product you use: a login without traffic is refused.
- Host
gate.aeonproxy.com- Port (SOCKS5)
7001- Login
- your proxy login, with targeting keys if you need them:
LOGIN-cc-us-sid-abc123 - Password
- your proxy password
Copy the login and password from the Residential or Mobile page of the dashboard; the generator there also writes ready lines. Key syntax: targeting and sessions.
Add the proxy
- Open ProxyCap's configuration window from its icon in the system tray.
- In the proxies list, add a new proxy of type SOCKS5 with host
gate.aeonproxy.comand port7001. - Turn on authentication and enter your login (with keys, for example
LOGIN-cc-gb-sid-cap01-ttl-30) and your password. - Run ProxyCap's built-in proxy check on the new entry before you go on.
- In the rules list, add a rule: choose the programs, send them through the new proxy, and turn on remote name resolution so DNS lookups happen at the exit. For programs with calls, games or QUIC, let the rule cover UDP as well as TCP.
- Apply the settings and restart programs that were already open, so their new connections follow the rule.
Port 7000 also works: define it with the HTTPS type, which tunnels any connection through an HTTP proxy. The plain HTTP type carries only unencrypted web pages, and neither of them carries UDP.
Check the proxy
The built-in check should pass with your login. Then open /ip-checker in a browser covered by the rule: the IP and country should be the exit's. If the rule covers UDP, the WebRTC test should show the exit IP too, since ProxyCap sends UDP over SOCKS5 and port 7001 relays it (UDP ASSOCIATE).
Rotating or sticky
ProxyCap opens a separate connection to the gateway for every TCP connection and UDP association. With a rotating login they all get different IPs, so a voice app could send its call from one IP and its sign-in from another. Use a sticky login for anything interactive:
LOGIN-cc-gb-sid-cap01-ttl-30TCP connections and UDP associations with the key cap01 then use one sticky session for 30 minutes (60 at most). After that the key gets a new IP in the same country. A rotating login suits a scraper that makes one request per connection.
Moving to NetDetour
NetDetour (Windows only) accepts eligible ProxyCap license keys and has a tool that converts ProxyCap settings. Its proxy setup is close: double-click the tray icon, Proxifying Settings, pick the type, Add, enter the name, host, port and credentials. The Rules tab has Quick Add Program, and Resolve names remotely sits in the DNS settings.
NetDetour does not proxy UDP, it can only block it. Block UDP for proxified programs so they fall back to TCP; otherwise their UDP leaves from your own IP. If you need UDP through the proxy, stay on ProxyCap or use v2rayN in Tun mode.
If it does not work
| What you see | What to check |
|---|---|
| The built-in check fails, although the host answers | The login, the password, or a key in the login that is not in the lists. Also check that the product has traffic left. |
| The proxy check cannot connect | Host gate.aeonproxy.com, port 7001 for SOCKS5 (7000 for HTTPS), and that a firewall lets ProxyCap out. |
| The program still shows your IP | The rule does not match the program (another .exe does the networking), the program was not restarted, or the rule's action is direct. |
| Calls or games in the program fail | UDP is off for the rule, the network blocks outgoing UDP, or a rotating login splits TCP and UDP across two IPs. |
| A mail client or one site is always refused | Mail ports 25, 465, 587 and 2525, .gov / .mil sites and some banking and ticketing sites are blocked by default (limits, Acceptable Use Policy). |
Questions
Its developer says ProxyCap keeps getting technical support, compatibility updates and bug fixes for the time being, and recommends moving to NetDetour. New installs are pointed to NetDetour.
Only SOCKS5 carries UDP. Over HTTPS (port 7000) web pages and other TCP work, but calls, games and QUIC fall back to your own connection or fail.