Transparent Proxy : Detect, Expose & Explain
Transparent Proxy : The Risks
Please refer to the illustration above, as you can see you are sending your HTTP web traffic to any given website, your traffic is intercepted by your ISP “a.k.a Internet Provider” and redirected to an ISP server which runs a proxy “a.k.a middleman” this ISP Proxy can and probably does log all your traffic, what you visited when you did visit and so on. More importantly, all of your unencrypted clear text traffic can easily be read by anyone who has access to that server, that includes passwords, emails, private messages and so on. Essentially, your ISP is pulling a MITM “Man In The Middle” attack on you using the ISP Proxy. It is probably bad enough that governments do this, but having an ISP employee looking at your traffic in a rather un-monitored environment is a different story.
Transparent Proxy – How to Detect
Depending on your ISP’s configuration of the transparent proxy it might be anywhere from easy to close to impossible to detect a transparent proxy. If the tests below show you do not have a transparent proxy, you might still be behind one. If you are on the paranoid side, see the protection mechanisms in the next section.
- Visit whatismyip.network/proxy-check if it says you are behind a proxy or you are probably behind a proxy, then you are behind one.
- If whatismyip.network/proxy-check does say “No Proxies Detected” go to whatismyip.network. If the two IPs reported by these two sites differ, you are certainly behind a transparent proxy.
- There are more advanced ways that would require above average technical expertise and access to tools that can give a more confirmed result. However, keep in mind that the first two steps above are not 100% accurate.
- One more way to detect you are behind a transparent proxy follows: If you try to use a Smart DNS Proxy such as Unlocator to unblock Netflix, Hulu, Amazon Instant Player or BBC IPlayer from within or outside the USA, it probably won’t work. The reason being that a transparent proxy breaks the Smart DNS logic.
Transparent Proxy – Protect your Privacy
The best way to protect your traffic from interception, tampering, and spying is by using a VPN. A VPN or Virtual Private Network creates an encrypted virtual tunnel between yourself and the VPN server, this encrypted tunnel is like a stealth shield for your traffic. A VPN will protect your traffic and thus your privacy. As a result, the ISP cannot intercept or decrypt your traffic and your traffic will NOT go through the ISP Transparent Proxy. Please have a look at the illustration above, once you have a VPN tunnel setup your traffic goes encrypted to the VPN server, and from there on it goes like normal to the website, the ISP can see that you are generating traffic but it does not know what it is, or what the final destination is. The best part is yet to come, all you need is a VPN subscription and a few minutes of your time and you can have VPN running on all supported devices you own “PC, Ipad, iPod, iPhone, Android, Supported routers and many more“. I personally use a VPN service called ExpressVPN, at the time of writing they encrypt the traffic using the highest available commercial standards, it takes a few minutes from signup to being protected from spying and tampering.ExpressVPN does provide applications for IOS – Android – Windows and Macs.
You can use any of the VPN providers beneath to bypass transparent proxies.
- Best for streaming and privacy
- High speed servers in 160 VPN locations
- Works for Netflix, BBC iPlayer, Amazon Prime Video, and Hulu
- 24/7/ live chat support
- 3 extra months free on annual plan
- UltraHD streaming
- Free Smart DNS proxy
- Unblocks all major streaming services
- Limited Time 72% Discount
- Unlimited VPN connections
- Over 1000 servers
- Ad-blocking feature available
- User-friendly application
- Exclusive Smart VPN feature
- Standalone Smart DNS subscription available
- Extra security features
- Extensions for Firefox and Chrome
- Split-tunneling available
Transparent Proxies – Solutions
Before you leave this post, I’d like to throw in one more bonus of using VPN. A VPN server can allow you to appear be coming from a lot of different locations, so you can get US content while not in the USA “Netflix, Hulu Plus, Pandora, US discounts for buying online” or content outside of the USA while in the USA such as “BBC Iplayer, NHL blackouts bypassing “. So if you decide to give VPN a try, please post updates on how it went.
I use tunnelbear and am unable to access Netflix from Italy. Do I need to change my VPN?
Hi Edward. If none of Tunnelbear’s American VPN servers are allowing you to watch American Netflix outside USA, it’s probably time to change your VPN service provider. ExpressVPN work exceptionally well with Netflix.
Hi Dan,
Thanks for your article on avoiding sports blackouts with VPN. I setup ExpressVPN and it worked great for a couple of NBA League Pass games but then it failed and continues to fail to block the blackouts. What should I do next ?
I mean Hello Ali,
Thanks for your article on avoiding sports blackouts with VPN. I setup ExpressVPN and it worked great for a couple of NBA League Pass games but then it failed and continues to fail to block the blackouts. What should I do next ?
Jeff, clearly you have a DNS leak. Either your VPN client (e.g. OpenVPN) is improperly configured, or your VPN provider has done something wrong. (VPNs are not all created equal…) To address the problem, start with the “How to fix DNS leaks” link on DNSleaktest.com . If that doesn’t work, then change VPN providers entirely.
Hello,
What is the difference between Unlocator and ExpressVPN? Are they not both VPN suppliers? Just bought Unlocator as they said it would work from Dubai. Turns out it does NOT because of Etisalats transparent proxy. Now I can read from your site I need to buy yet another VPN supplier to make it work?
Thanks!
ISPs in UAE use transparent proxies which seriously hinder Smart DNS services like Unlocator. ExpressVPN on the other hand, is a VPN service which is not affected by transparent proxies or DNS hijacking. ExpressVPN should work for you in UAE.
Thank you for your answer! But will it not slow down my internet speed a lot? Thanks again :)
Hey. It depends on which VPN service you use. ExpressVPN, for example, only slow down your Internet speed by about 15%.
I use OpenVPN, but my DNS requests are still captured and routed to my ISP’s DNS servers, no matter what I set in my DNS settings. found out by starting my VPN, and then going to DNSleaktest.com. Is there a way to bypass my ISP’s transparent DNS proxy?
If you are using VPN then your ISP should not be able to catch your DNS
You didn’t answer Mr. Sullivan’s question.
You can bypass transparent proxies by using VPN instead of Smart DNS.
I use a VPN Router on my unlimited fiber connection. I flashed a Netgear with DD-WRT. No problems convincing my ROKU that its located in the UK
Yep DD-WRT was always a good router to rely on. And I wish all of us had unlimited fiber :D
If I’m in Canada, using a VPN I have access to US content, UK content, other global content, but not Canadian content? My main issue is sports, so I’d like to be able to watch my home team play. How does one get around local blackouts?
Dear Dan
It really depends on the sports at hand, you need to see what the blackout rules are, if they are city based you need to find a VPN server not in the blacked out city, if country based, you need to find a VPN server in a country not blacked out.