Network

What is Endpoint?

A proxy endpoint is the address a client dials to reach a proxy, a hostname or IP plus a port, usually with credentials attached. Written as host:port, it is the single string you paste into a browser, scraper or antidetect profile. One endpoint can map to one fixed device or to a whole rotating pool.

An endpoint is normally written as a URL: scheme://username:password@host:port. The scheme decides which protocol the client speaks, http:// for an HTTP proxy and socks5:// or socks5h:// for SOCKS. That trailing h is worth knowing, because in curl and in Python's requests it tells the client to hand the hostname to the proxy for resolution instead of resolving locally, which is the difference between a clean exit and a DNS leak. Some tools want the same parts in separate fields rather than one string.

Endpoints come in two shapes. A dedicated endpoint points at one device or one fixed exit and keeps that address until you rotate it. A backconnect gateway endpoint is a single hostname and port fronting an entire pool, where each connection can leave from a different address and you steer country, carrier or session length with parameters embedded in the username. The string you configure never changes while the exit IP behind it does, which is what makes gateway credentials easy to hardcode and hard to audit.

Treat an endpoint as a credential. It carries a username and password that work from anywhere unless the provider also restricts by source IP, so it belongs in an environment variable or a secret store rather than in committed code, and rotating a password should never require a code change. Where a provider bills per endpoint, the count becomes a budget question; PROXIES.SX does not charge for endpoints and bills bandwidth alone, so how many you create is an operational choice rather than a line item.

Errors point at specific layers. A 407 response with a Proxy-Authenticate header means the endpoint was reached and the credentials were refused or missing. A refused connection means the port is wrong or the listener is down. A connection that opens and then stalls on the first request usually means the client spoke the wrong protocol to that port, HTTP to a SOCKS listener or the reverse. If everything connects but the exit lands in the wrong country, check the parameters in the username.

Where you meet it

You copy an endpoint out of a dashboard and paste it into Scrapy settings, a Puppeteer launch flag, an antidetect browser profile or a curl command. The choice it forces is between one gateway endpoint that rotates on every request and a set of fixed endpoints you can pin a logged-in session to. Getting that wrong shows up weeks later as accounts that keep being logged out.

Common questions

What is the difference between a proxy endpoint and a proxy IP?

The endpoint is the address you connect to; the proxy IP is the address the destination site sees. With a single fixed proxy they can be the same machine. With a rotating gateway, one endpoint hostname stays constant while the exit IP changes on every request or every session.

How many proxy endpoints do I need?

Count concurrent identities rather than requests. Every browser profile or logged-in account that must keep a stable address needs its own sticky endpoint or session token. Stateless scraping can push thousands of requests through a single rotating gateway endpoint, because the pool behind it supplies the addresses.

Why does my proxy endpoint return 407?

HTTP 407 with a Proxy-Authenticate header means the proxy was reached and rejected your credentials. Common causes are a password that was not URL-encoded inside the endpoint string, a client that strips credentials when following a redirect, or IP authentication set for an address you are no longer connecting from.

Related terms

Port
A port is a 16-bit number that identifies one network service on a host, so a single IP address can run many services at once. TCP and UDP each have their own range from 0 to 65535. Proxy endpoints are written host:port, and the port decides which listener answers you.
Proxy Server
A proxy server is an intermediary that accepts your connection, makes its own request to the destination, and relays the response back. The destination logs the proxy's IP address instead of yours. Proxies are used for anonymity, geographic routing, access control, caching, and spreading a workload across many addresses so no single one is rate limited.
IP Address
An IP address is the numeric identifier a device presents on an IP network so packets can be routed to and from it. IPv4 writes 32 bits as four decimal octets, such as 203.0.113.7. IPv6 writes 128 bits as hexadecimal groups, such as 2001:db8::1. Every request a server logs is tied to one.
IPv4
IPv4 is version 4 of the Internet Protocol, addressing hosts with 32 bits written as four dot-separated octets, which gives roughly 4.3 billion addresses. The top-level pool ran dry in 2011, pushing providers toward private addressing, carrier-grade NAT and a paid transfer market. Nearly all proxy traffic still runs over IPv4 because that is what target sites accept.
IPv6
IPv6 is version 6 of the Internet Protocol, addressing hosts with 128 bits written as eight hexadecimal groups, such as 2001:db8::1. The space is large enough that carriers assign each subscriber a whole subnet, usually a /64 or wider, so reputation systems score prefixes instead of single addresses. Adoption is broad but far from universal.
CGNAT
Carrier-grade NAT is address translation performed by an ISP rather than in the customer's router, putting many subscribers behind one public IPv4 address. Mobile networks depend on it. Each customer holds a private or shared-range address, usually from 100.64.0.0/10, and the carrier rewrites the source address and port on every outbound flow.
NAT
Network Address Translation rewrites the address and port fields of packets as they cross a router, letting many private hosts share one public IP. The router keeps a translation table, mapping each outbound flow to a free public port and reversing the rewrite on replies. Home routers do this for a household; carriers do it for whole regions.
ASN
An Autonomous System Number identifies a network that announces its own IP address ranges to the rest of the internet through BGP. Every routable address sits inside a prefix announced by some AS, so the ASN behind an IP tells you who operates it - a mobile carrier, a hosting provider, a home ISP or a corporate network.

Real 4G/5G mobile and residential IPs

PROXIES.SX runs carrier IPs in 100+ countries with HTTP and SOCKS5 on every endpoint. $4/GB down to $2.40/GB at volume, free endpoints and rotation, and your GB never expire.