Windows

The Flows flow runtime (being .NET) reads Windows system environment variables: http_proxy, https_proxy, and no_proxy. Use no_proxy to bypass the proxy for local/intranet hosts. On Windows, there are different methods to configure the proxy configuration.

Option 1: Set system environment variables (GUI)

• Open System Properties - Advanced - Environment Variables…

• Under System variables, add or edit:

• http_proxy: http://proxy.example.com:3128

• https_proxy: http://proxy.example.com:3128

• no_proxy: localhost,127.0.0.1,*.local,host.docker.internal,db,influxdb,mosquitto,my-internal-api.corp.local

• Restart the flow runtime service (or reboot) so it picks up the changes.

Option 2: Set using PowerShell (as Admin)

Powershell

[System.Environment]::SetEnvironmentVariable('http_proxy', 'http://proxy.example.com:3128', 'Machine')

[System.Environment]::SetEnvironmentVariable('https_proxy', 'http://proxy.example.com:3128', 'Machine')

[System.Environment]::SetEnvironmentVariable('no_proxy', 'localhost,127.0.0.1,*.local,host.docker.internal,db,influxdb,mosquitto,my-internal-api.corp.local', 'Machine')

# Restart the Flows flow runtime Windows service afterwards.

Option 3. Set in flow runtime's configuration file

Use this when users receive proxy configuration when logging in to Windows (group policy, login-script, ...) but the flow runtime is not aware of that proxy, since it is executed as a service. In this case, set the proxy settings in the local configuration file ./data/endpoints.json accordingly:

"httpProxy": {

"host": "http://proxy.example.com:3128",

"user": "",

"password": ""

},

"httpsProxy": {

"certificate": "",

"useTls": false,

"host": "http://proxy.example.com:3128",

"user": "",

"password": ""

}

Once entered and saved, restart the flow runtime service.

2. Trust the proxy certificate

If the proxy uses a private/root CA, import it so the flow runtime trusts outbound TLS through the proxy.

GUI (MMC):

CertificatesComputer accountLocal computer.

Under, Import… your proxy root CA (.cer/.crt).

(If applicable) import intermediates under Intermediate Certification Authorities.

Powershell:

Import-Certificate -FilePath "C:\certs\proxy-root.cer" -CertStoreLocation "Cert:\LocalMachine\Root"

Notes:

Make sure the variables are set at the Machine scope if the flow runtime runs as a Windows Service (for example, LocalSystem). Then restart the service.