How to Connect

Every subscription publishes its own endpoints. Open the subscription in the dashboard and copy the host and port from the Your endpoints table — there is no shared gateway host to memorise, and the values are specific to your subscription.

Your endpoints

Each subscription is served on one hostname with a port per protocol:

Protocol	Dashboard label	Encrypted to the proxy
HTTP / CONNECT over TLS	https	Yes
SOCKS5 over TLS	socks5+tls	Yes
HTTP / CONNECT	http	No
SOCKS5	socks5	No

All four carry the same traffic to the same exits. The difference is only the hop between you and us.

Tip

The encrypted variants are worth using where your client supports them. HTTPS to the destination site is end-to-end either way, but on the plain ports your proxy username — including any targeting — travels in clear text on the network you are connecting from.

HTTP

curl -x http://YOUR_HOST:YOUR_HTTP_PORT \
  -U "YOUR_USERNAME:YOUR_PASSWORD" \
  https://httpbin.org/ip

HTTPS

curl -x https://YOUR_HOST:YOUR_HTTPS_PORT \
  --proxy-user "YOUR_USERNAME:YOUR_PASSWORD" \
  https://httpbin.org/ip

SOCKS5

curl --socks5-hostname YOUR_HOST:YOUR_SOCKS_PORT \
  --proxy-user "YOUR_USERNAME:YOUR_PASSWORD" \
  https://httpbin.org/ip

Use --socks5-hostname (or the socks5h:// scheme) rather than socks5://, so hostnames are resolved at the exit rather than on your own machine.

Residential IPv4 exits cannot reach IPv6-only destinations. Use an IPv6 product when the target has no reachable IPv4 address.

Targeting

Targeting rides on the credential. Two forms are accepted and both mean the same thing — use whichever your tooling makes easier:

• On the password, separated by underscores: YOUR_PASSWORD_country-de
• On the username, separated by hyphens: YOUR_USERNAME-country-de

Combine as many as you need. Where a parameter appears in both, the password wins.

curl -x http://YOUR_HOST:YOUR_HTTP_PORT \
  -U "YOUR_USERNAME:YOUR_PASSWORD_country-de_city-Berlin_session-ab12cd" \
  https://httpbin.org/ip

Options

Option	Also accepted as	Value
country	cc	Two-letter ISO 3166-1 code, e.g. de
city	ct	City name, ASCII, no spaces. Send country with it
region	st	ISO 3166-2 subdivision code, e.g. NY — not the name
continent	co	One of af, an, as, eu, na, oc, sa
asn	—	AS7922 or 7922
zip	pc	Postal code, letters and digits only
isp	—	ISP name, letters and digits only
session	s, sessid	1–32 letters or digits. Same value = same exit IP
lifetime	ttl	How long a session holds its IP, in seconds (max 86400, default 2400)
sesstime	—	The same, in minutes — for tooling migrating from a vendor that uses minutes
rotate	—	Asks for a new IP per connection. This is the default, so it is accepted and changes nothing

hardsession is accepted as a synonym for session. On this product the two produce identical requests.

Rotating and sticky

Send no session and each new connection exits from a new IP. This is per connection, not per request — a client reusing a keep-alive connection or a connection pool keeps the same IP for every request on it.

Send a session and requests carrying that value exit from the same IP until the lifetime expires:

# Same IP for up to ten minutes
curl -x http://YOUR_HOST:YOUR_HTTP_PORT \
  -U "YOUR_USERNAME:YOUR_PASSWORD_session-ab12cd_lifetime-600" \
  https://httpbin.org/ip

Sessions are held on a best-effort basis. A held IP can drop early if the underlying residential connection goes away.

Options this product does not accept

latency, fraudscore, device, activesince, http3, localdns, udp and extended are not available on Residential IPv4. Sending one is refused with a message naming the option, so it cannot be mistaken for a targeting problem. Remove it and the request works.

Caution

Wrong values are refused rather than ignored. country-usa is not a country code and returns an error naming the field — it does not quietly fall back to an untargeted exit, so a typo can never bill you for traffic from somewhere you did not ask for.

Generating a list

The subscription page has a list generator: pick rotation or a session, targeting, quantity, and an output format (host:port:user:pass, user:pass@host:port, a URL, a curl command, or your own template), then copy or download it.

IP allowlisting

A subscription can authenticate by source address instead of by password. See IP Whitelisting.