better-https-proxy-agent

An agent for HTTPS through an HTTP(S) proxy server using the CONNECT method.

This is similar to https-proxy-agent but it leverages functionality available in the NodeJS http.Agent, https.Agent, http.request and/or https.request to provide:

• connection pooling
• timeout
• TLS session resumption
• authentication (basic or client certificate)
• TLS options
• potentially anything else the NodeJS modules support

All of the above apply both to connections to the proxy, as well as connections through the proxy.

It was partly inspired by this blog post and related gist.

Basic usage

npm install better-https-proxy-agent

const { Agent } = require('better-https-proxy-agent');
const fs = require('fs');
const https = require('https');

/*
 * Options suitable for `https.Agent`. These are applied to the HTTPS agent which
 * manages the proxied connections between the client and the final endpoint.
 */
const httpsAgentOptions = {
    keepAlive: true,
    timeout: 55000,
    maxSockets: 20,
    maxFreeSockets: 5,
    maxCachedSessions: 500
};

/*
 * Options suitable for `http(s).request`. These are used to make the request to
 * the proxy server.
 *
 * You should provide `host` here (unless you want the default `localhost`).
 *
 * `protocol` will default to `http:`. If you need to connect to the proxy over
 * HTTPS, set `protocol` to `https:`. `http.request` or `https.request` will be
 * used accordingly.
 *
 * You may include an `agent` here; if you do not, a default agent will be
 * constructed which will be reused for connections to the proxy. If you wish
 * to use the global agent, explicitly provide `http(s).globalAgent`.
 *
 * Using an agent for connection pooling will not work, because connections use
 * the HTTP CONNECT method; such connection cannot be reused, and furthermore
 * are removed from any agent as soon as a response is received. However, an
 * additional `maxSockets` option is provided directly in this options object
 * for the purpose of limiting the number of concurrent connections to a proxy.
 */
const proxyRequestOptions = {
    protocol: "https:", 
    host: "proxy.example.com",
    port: 3128,
    timeout: 123000,
    maxSockets: 100,
    cert: fs.readFileSync("proxy_auth_cert.pem"),
    key: fs.readFileSync("proxy_auth_key.pem"),
    passphrase: "secret"
};

const agent = new Agent(httpsAgentOptions, proxyRequestOptions);

https.request("https://api.example.com", {
    agent,
    cert: fs.readFileSync("api_auth_cert.pem"),
    key: fs.readFileSync("api_auth_key.pem"),
    passphrase: "secret"
});

Caveats

You can get yourself into a bit of trouble if you use maxSockets to limit the connections to the proxy, and also pool connections through the proxy. You can tie up all your proxy connections with connections through to a particular host, or few hosts (say api.example.com): the connections through the proxy will be pooled and remain open, holding the corresponding connections to the proxy open also. When you go to make a new connection to a different host (say to www.example.com) no connection through the proxy can be reused, and no new connection to the proxy can be opened either. This module isn't smart enough to close pooled connections through the proxy so that you can open a new connection to the proxy.

The timeout that is set on an HTTPS request that uses the proxy agent will be used to set the 'request timeout' (for requests through the proxy), including how long to wait for the proxy to connect to the target server, after the connection to the proxy has already been made. The timeout in the proxyRequestOptions (or agent provided in the proxyRequestOptions) controls how long to wait for a connection to be made to the proxy itself. Since it is a two-step process to connect to the proxy and then connect through the proxy, these two timeouts are cumulative, which may not be what the caller of https.request expects.

Furthermore, the timeout in the proxyRequestOptions (or agent provided in proxyRequestOptions) applies to inactivity on the proxy connection. This can occur during requests through the proxy, or between them if keepAlive is true in the httpsAgentOptions. More directly, the timeout for in-flight requests through the proxy is governed by any timeout option set on them, and the timeout for kept-alive connections is governed by timeout in the httpsAgentOptions. Consequently, timeout in proxyRequestOptions should be set higher than both of these other timeouts or it will gazump them, cutting them short.

Licence

MIT.