SOLVED
Home

What proxy setting is Teams using?

%3CLINGO-SUB%20id%3D%22lingo-sub-259728%22%20slang%3D%22en-US%22%3EWhat%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-259728%22%20slang%3D%22en-US%22%3E%3CP%3EDoes%20anybody%20know%20what%20proxy%20setting%20Teams%20is%20using%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20in%20corporate%20environment%2C%20behind%20a%20web%20proxy%2C%20and%20Teams%20works%20fine%20up%20to%20the%20point%20I%20want%20to%20attend%20an%20audio%20meeting.%20I%20figured%20out%20that%20at%20the%20time%20I%20am%20attempting%20to%20join%2C%20there%20are%20requests%20to%20*.relay.teams.microsoft.com%20and%20*.tr.teams.microsoft.com%20that%20are%20going%20through%20our%20proxy%20and%20this%20fails.%3C%2FP%3E%3CP%3EI%20figured%20out%20that%20if%20the%20connection%20goes%20through%20hosts%20in%20these%20domains%20directly%20(bypassing%20the%20proxy)%2C%20audio%20meetings%20work%20fine.%3C%2FP%3E%3CP%3EAs%20I%20don't%20have%20control%20over%20this%20corporate%20proxy%20and%20proxy%20auto%20configuration%20(PAC)%20file%2C%20I%20configured%20my%20Internet%20proxy%20settings%20to%20a%20specific%20web%20proxy%2C%20bypassing%20these%20domains%2C%20and%20I%20validated%20that%20my%20web%20browser%20is%20well%20taking%20into%20account%20such%20bypass%20configurations.%3C%2FP%3E%3CP%3EHowever%2C%20Teams%20persists%20in%20connecting%20through%20our%20web%20proxy%20for%20such%20domains%2C%20and%20even%20after%20restarting%2C%20rebooting...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETherefore%2C%20what%20proxy%20settings%20is%20Teams%20using%3F%20How%20can%20I%20configure%20it%20to%20bypass%20our%20web%20proxy%20for%20these%20domains%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-259728%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eproxy%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ETeams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-294057%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-294057%22%20slang%3D%22en-US%22%3E%3CP%3EI%20figured%20out%20that%2C%20if%20an%20environment%20variable%20HTTPS_PROXY%20is%20defined%2C%20MS%20Teams%20seems%20to%20use%20it%2C%20instead%20of%20the%20Windows%20%22Internet%20Settings%22.%20Its%20format%20must%20be%20like%20http%3A%2F%2Fuser%3Apassword%40proxy.domain.com%3Aport%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-268864%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-268864%22%20slang%3D%22en-US%22%3E%3CP%3EUpdate%20-%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20we%20reconfigured%20to%20test%20a%20URL%20served%26nbsp%3B%20PAC%20file%2C%20IIS%20was%20set%20to%20serve%20it%20as%20Javascript%2C%20when%20changed%20to%26nbsp%3B%3CSPAN%3Eapplication%2Fx-ns-proxy-autoconfig%20sure%20enough%2C%20all%20was%20good%20with%20the%20world%3A%20Teams%20opens%20in%2030s.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3Ethanks%20for%20the%20help%20all%20and%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F178440%22%20target%3D%22_blank%22%3E%40Steven%20Collier%3C%2FA%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3Echeers%2C%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EMarc%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-268150%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-268150%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20staging%20via%20GPO%20UNC%20share%20to%20local%20folder%2C%20then%20proxy%20settings%20set%20via%20GPO%26nbsp%3Buse%20defined%20path%20locally%2C%20not%20a%20web%20address.%26nbsp%3B%20(We%20do%20it%20that%20way%20as%20W10%2FEdge%20had%20issues%20with%20PAC%20files%20from%20a%20web%20share)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'll%20have%20a%20read%20of%20the%20second.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMarc%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-268147%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-268147%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F110832%22%20target%3D%22_blank%22%3E%40Marc%20Panton%3C%2FA%3E%26nbsp%3BWhat%20mime%20type%20i%20your%20.pac%20file%20being%20served%20as%3F%20Is%20it%26nbsp%3B%3CSPAN%3Eapplication%2Fx-ns-proxy-autoconfig%20%3F%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EI've%20seen%20that%20the%20updater%20process%20used%20by%20Teams%20(%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FSquirrel%2FSquirrel.Windows%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FSquirrel%2FSquirrel.Windows%3C%2FA%3E)%20can%20have%20issues%20if%20the%20.pac%20isn%3Bt%20served%20with%20the%20right%20mime%20type.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-268141%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-268141%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EProgress%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETeams%20vs%20proxy%20does%20NOT%20seem%20to%20be%20the%20issue.%26nbsp%3B%20the%20autoupdate%20aspects%20of%20the%20default%20Teams%20install%20does%20though%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDefault%20%2F%20current%20install%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETask%20bar%20shortcut%20target%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3EC%3A%5CUsers%5C%25username%25%5CAppData%5CLocal%5CMicrosoft%5CTeams%5CUpdate.exe%20--processStart%20%22Teams.exe%22%3C%2FEM%3E%3C%2FP%3E%3CP%3EStart%20in%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3EC%3A%5CUsers%5Cmarc.panton%5CAppData%5CLocal%5CMicrosoft%5CTeams%5Ccurrent%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EChange%20to%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3EC%3A%5CUsers%5C%25username%25%5CAppData%5CLocal%5CMicrosoft%5CTeams%5Ccurrent%5Cteams.exe%20--no-proxy-server%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EStart%20in%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3EC%3A%5CUsers%5Cmarc.panton%5CAppData%5CLocal%5CMicrosoft%5CTeams%5Ccurrent%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%2C%20when%20you%20use%20the%20task%20bar%20icon%20to%20open%20Teams%2C%20it%20opens%20in%20normal%20time.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3En.b.%20This%20only%20impacts%20the%20TASK%20BAR%20icon%20for%20Teams.%26nbsp%3B%20You%20will%20also%20need%20to%20stop%20Teams%20automatically%20opening%20on%20login%20(settings%20of%20teams%2C%20un-tick%20Auto%20login)%2FStartupTab%20of%20Task%20manager%2C%20disable%20Teams).%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20still%20want%20Teams%20to%20auto%20start%2C%20but%20use%20the%20new%20settings%20above%2C%20you%20will%20need%20to%20create%20a%20shortcut%20and%20drop%20into%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3EC%3A%5CProgramData%5CMicrosoft%5CWindows%5CStart%20Menu%5CPrograms%5CStartUp%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EObviously%2C%20this%20has%20other%20impacts%3A%20your%20Teams%20app%20will%20cease%20to%20update.%26nbsp%3B%20You%20will%20need%20to%20come%20up%20with%20a%20process%20to%20update%20it%20by%20other%20means.%26nbsp%3B%20Use%20at%20your%20own%20risk!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-266318%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266318%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F110832%22%20target%3D%22_blank%22%3E%40Marc%20Panton%3C%2FA%3E%26nbsp%3Ba%20pac%20file%20only%20defines%20what%20happens%20to%20HTTP%20traffic%2C%20it's%20not%20at%20all%20relevant%20or%20considered%20by%20UDP%2C%20so%20by%20definition%20you%20can't%20get%20teams%20UDP%20media%20to%20bypass%20your%20proxy%20through%20a%20pac.%20It%20relies%20on%20your%20network%20edge%20firewalls%20and%20DNS%20allowing%20traffic%20to%20resolve.%20Anyway%2C%20that%20was%20more%20an%20answer%20toyour%20comment%20about%20unreliable%20calls.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYour%20specific%20startup%20scenario%20sounds%20different%2C%20HTTPS%20traffic%20is%20used%20for%20authentication%20from%20the%20Teams%20client%20and%20should%20be%20ok%20to%20follow%20your%20proxy%20route.%20I've%20used%20the%20same%20setup%20in%20previous%20organisations%20without%20issue.%20I%20would%20suggest%20using%20a%20tool%20like%20Fiddler%20to%20see%20what%20happens.%20My%20complete%20guess%20would%20be%20that%20a%20proxy%20is%20refusing%20to%20respond%20until%20a%20timeout%20is%20reached.%20It's%20certainly%20not%20something%20I've%20seen%20before%20here%2C%20and%20is%20different%20to%20the%20other%20issue.%20I%20would%20also%20suggest%20raising%20a%20support%20case%20as%20the%20engineers%20there%20can%20help%20you%20diagnose%20more%20about%20what's%20happening%20in%20your%20environment.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-266146%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266146%22%20slang%3D%22en-US%22%3E%3CP%3EBy%20the%20way%2C%20I%20am%20surprised%20that%20somebody%20from%20Microsoft%20(%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F16300%22%20target%3D%22_blank%22%3E%40Alexander%20Ivanov%3C%2FA%3E)%20marks%20an%20answer%20as%20%22Solution%22.%20Shouldn't%20this%20come%20from%20the%20original%20poster%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-266142%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266142%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Steven%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20fully%20aware%20of%20the%20recommendation%20to%20NOT%20use%20a%20proxy%20%2F%20bypass%20a%20proxy%20for%20the%20365%20et%20al%20IPs%2FURLs.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20point%20is%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1.%20if%20I%20use%20a%20PAC%20file%20to%20control%20the%20bypass%2C%20TEAMs%20breaks.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E2.%20if%20I%20use%20set%20a%20proxy%20in%20the%20browser's%20proxy%20settings%20fields%20(and%20then%20bypass%20at%20the%20proxy%20level%20itsself)%2C%20TEAMs%20works.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethe%20result%20is%3A%26nbsp%3B%20TEAMs%20does%20not%20function%20as%20expected%20when%20a%20PAC%20file%20is%20in%20use.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBackground%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20running%20Symantec%20SmartConnect%20(SSC)%20locally%20on%20the%20end%20points.%26nbsp%3B%20I%20can%20(successfully)%20dictate%20the%20bypasses%20directly%20to%20SSC%2C%20so%20traffic%20IS%20bypassed%20before%20it%20leaves%20the%20device.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20even%20with%20the%20SSC%20level%20Bypass%20set%2C%20if%20there%20is%20ANY%20form%20of%20PAC%20in%20use%2C%20TEAMs%20is%20troublesome.%26nbsp%3B%20I%20have%20tested%20with%20a%20single%20item%20in%20the%20PAC%20file...%20still%20takes%205%20mins%20for%20TEAMs%20to%20open%2Flogin.%26nbsp%3B%20Calls%20still%20drop.%26nbsp%3B%20If%20I%20remove%20the%20PAC%20file%20entry%20and%20set%20localhost%20in%20the%20Proxy%20settings%20field%20(SSC%20listens%20locally)%2C%20the%20bypass%20works%20correctly%20(based%20on%20it%20being%20done%20by%20SSC%2C%20rather%20than%20the%20browser).%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%2C%20the%20issue%20here%20is%20that%20TEAMs%20does%20not%20consistently%2Fcorrectly%20use%20the%20OS%2FBrowser%20configured%20proxy%20settings%20if%20a%20PAC%20file%20is%20configured.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMarc%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-266140%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266140%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20your%20answer.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEven%20if%20I%20understand%20that%20it%20would%20be%20better%20if%20traffic%20isn't%20converted%20to%20use%20HTTPS%2C%20in%20case%20it%20does%20because%20ports%20aren't%20open%2C%20it%20would%20be%20good%20if%20we%20could%20control%20how%20proxy%20settings%20are%20used%20(or%20not)%2C%20as%20traffic%20may%20be%20allowed%20to%20go%20through%20directly%20on%20port%20443%2C%20without%20going%20through%20a%20web%20proxy%20(what%20adds%20another%20layer%20of%20quality%20degradation).%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-265967%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-265967%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20really%20shouldn't%20be%20sending%20teams%20calls%20via%20a%20proxy%2C%20the%20ip%20addresses%20listed%20as%20optimize%20in%20this%20list%20need%20to%20have%20directly%2C%20unrestricted%20connection%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fenterprise%2Furls-and-ip-address-ranges%23skype-for-business-online-and-microsoft-teams%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fenterprise%2Furls-and-ip-address-ranges%23skype-for-business-online-and-microsoft-teams%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFor%20a%20quality%20experience%20with%20audio%20calls%20Teams%20needs%20to%20be%20sending%20UDP%2FSTUN%20traffic%20directly%2C%20as%20it's%20not%20HTTP%20it%20has%20nothing%20to%20do%20with%20proxy%20settings%20or%20pac.%20Only%20if%20these%20ports%20are%20being%20blocked%20Teams%20will%20attempt%20to%20use%20HTTPS%20but%20the%20reliability%20and%20latency%20suffer.%20I%20can't%20really%20explain%20the%20difference%20you%20see%2C%20but%20maybe%20you've%20got%20some%20elements%20in%20your%20pad%20which%20take%20a%20long%20time%20to%20respond%2C%20for%20example%20using%26nbsp%3B%3CEM%3EisInNet()%3C%2FEM%3E%3CSPAN%3E%2C%20%3C%2FSPAN%3E%3CEM%3EisResolvable()%3C%2FEM%3E%3CSPAN%3E%2C%20and%20%3C%2FSPAN%3E%3CEM%3EdnsResolve()%26nbsp%3B%3C%2FEM%3Eare%20generally%20unacceptably%20slow.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-265605%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-265605%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20seeing%20this%20too%20in%20our%20environment%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPAC%20file%20in%20use%2C%20Teams%20very%20slow%20to%20open%2C%20drops%20calls%20etc.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EProxy%20set%20in%20proxy%20options%2C%20Teams%20opens%20normally%2C%20but%20we%20are%20limited%20in%20the%20size%20of%20the%20bypass%20list%20so%20not%20a%20solution.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENeed%20to%20know%20how%20to%20pass%20proxy%20settings%20directly%20to%20Teams%20%2F%20electron%20app.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Emarc%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-260634%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-260634%22%20slang%3D%22en-US%22%3E%3CP%3ELet%20me%20ping%20some%20folks%20on%20that%2C%20hopefully%20it's%20documented%20somewhere.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-260245%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-260245%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%2C%20thanks%20for%20your%20answer.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEdge%2C%20MSIE%20and%20Chrome%20are%20all%20using%20my%20Windows%20system%20Internet%20settings.%20WinHTTP%20is%20configured%20for%20Direct%20access.%20It%20looks%20like%20that%20Teams%20is%20using%20some%20of%20the%20system%20proxy%20settings%2C%20e.g.%20use%20the%20configured%20proxy%20server%2C%20but%20not%20all%20of%20them%2C%20especially%20not%20settings%20about%20bypassing%20my%20proxy%20for%20specific%20domains.%20I%20also%20monitored%20Teams%20using%20SysInternals%20ProcMon%20and%20saw%20it%20reading%20system%20proxy%20setting%20from%20registry.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20I%20monitor%20all%20proxy%20accesses%20(WireShark%20configured%20to%20display%20%22CONNECT%22%20requests%20to%20my%20proxy%20server)%2C%20I%20can%20see%20my%20web%20browsers%20honoring%20proxy%20settings%20(bypass%20or%20not)%2C%20but%20not%20Teams.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-260234%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-260234%22%20slang%3D%22en-US%22%3E%3CP%3EWhich%20browser%20settings%20though%3F%20Being%20an%20electron%20app%2C%20I%20imagine%20Teams%20would%20look%20at%20the%20Chrome%20settings%2C%20if%20installed%2C%20but%20I%20haven't%20actually%20bothered%20to%20check.%20My%20point%20being%2C%20configure%20them%20in%20both%20Chrome%20and%20IE%2C%20and%20if%20that%20fails%2C%20also%20change%20the%20WinHTTP%20ones%20via%20netsh.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-734635%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-734635%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F197841%22%20target%3D%22_blank%22%3E%40Claude%20Villermain%3C%2FA%3E-%20Good%20find...%20however%2C%20I'm%20pretty%20sure%20my%20organization%20would%20not%20be%20happy%20with%20static%20plaintext-stored%20passwords%20anywhere.%20How%20would%20this%20play%20with%2C%20say%2C%20a%20kerberos-aware%20proxy%3F%3C%2FP%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3Ehttp%3A%2F%2Fuser%3Apassword%40proxy.domain.com%3Aport%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Claude Villermain
Occasional Contributor

Does anybody know what proxy setting Teams is using?

 

I am in corporate environment, behind a web proxy, and Teams works fine up to the point I want to attend an audio meeting. I figured out that at the time I am attempting to join, there are requests to *.relay.teams.microsoft.com and *.tr.teams.microsoft.com that are going through our proxy and this fails.

I figured out that if the connection goes through hosts in these domains directly (bypassing the proxy), audio meetings work fine.

As I don't have control over this corporate proxy and proxy auto configuration (PAC) file, I configured my Internet proxy settings to a specific web proxy, bypassing these domains, and I validated that my web browser is well taking into account such bypass configurations.

However, Teams persists in connecting through our web proxy for such domains, and even after restarting, rebooting...

 

Therefore, what proxy settings is Teams using? How can I configure it to bypass our web proxy for these domains?

 

Thanks

15 Replies

Which browser settings though? Being an electron app, I imagine Teams would look at the Chrome settings, if installed, but I haven't actually bothered to check. My point being, configure them in both Chrome and IE, and if that fails, also change the WinHTTP ones via netsh.

@Vasil Michev, thanks for your answer.

 

Edge, MSIE and Chrome are all using my Windows system Internet settings. WinHTTP is configured for Direct access. It looks like that Teams is using some of the system proxy settings, e.g. use the configured proxy server, but not all of them, especially not settings about bypassing my proxy for specific domains. I also monitored Teams using SysInternals ProcMon and saw it reading system proxy setting from registry.

 

When I monitor all proxy accesses (WireShark configured to display "CONNECT" requests to my proxy server), I can see my web browsers honoring proxy settings (bypass or not), but not Teams.

Let me ping some folks on that, hopefully it's documented somewhere.

 

We are seeing this too in our environment: 

 

PAC file in use, Teams very slow to open, drops calls etc. 

 

Proxy set in proxy options, Teams opens normally, but we are limited in the size of the bypass list so not a solution. 

 

Need to know how to pass proxy settings directly to Teams / electron app. 

 

marc 

Solution

You really shouldn't be sending teams calls via a proxy, the ip addresses listed as optimize in this list need to have directly, unrestricted connection

 

https://docs.microsoft.com/en-us/office365/enterprise/urls-and-ip-address-ranges#skype-for-business-...

 

For a quality experience with audio calls Teams needs to be sending UDP/STUN traffic directly, as it's not HTTP it has nothing to do with proxy settings or pac. Only if these ports are being blocked Teams will attempt to use HTTPS but the reliability and latency suffer. I can't really explain the difference you see, but maybe you've got some elements in your pad which take a long time to respond, for example using isInNet(), isResolvable(), and dnsResolve() are generally unacceptably slow.

Thanks for your answer.

 

Even if I understand that it would be better if traffic isn't converted to use HTTPS, in case it does because ports aren't open, it would be good if we could control how proxy settings are used (or not), as traffic may be allowed to go through directly on port 443, without going through a web proxy (what adds another layer of quality degradation).

Hi Steven, 

 

I am fully aware of the recommendation to NOT use a proxy / bypass a proxy for the 365 et al IPs/URLs.

 

My point is: 

 

1. if I use a PAC file to control the bypass, TEAMs breaks.  

2. if I use set a proxy in the browser's proxy settings fields (and then bypass at the proxy level itsself), TEAMs works. 

 

the result is:  TEAMs does not function as expected when a PAC file is in use. 

 

Background: 

 

We are running Symantec SmartConnect (SSC) locally on the end points.  I can (successfully) dictate the bypasses directly to SSC, so traffic IS bypassed before it leaves the device.

 

However, even with the SSC level Bypass set, if there is ANY form of PAC in use, TEAMs is troublesome.  I have tested with a single item in the PAC file... still takes 5 mins for TEAMs to open/login.  Calls still drop.  If I remove the PAC file entry and set localhost in the Proxy settings field (SSC listens locally), the bypass works correctly (based on it being done by SSC, rather than the browser). 

 

So, the issue here is that TEAMs does not consistently/correctly use the OS/Browser configured proxy settings if a PAC file is configured. 

 

Marc

 

 

By the way, I am surprised that somebody from Microsoft ( @Alexander Ivanov) marks an answer as "Solution". Shouldn't this come from the original poster?

@Marc Panton a pac file only defines what happens to HTTP traffic, it's not at all relevant or considered by UDP, so by definition you can't get teams UDP media to bypass your proxy through a pac. It relies on your network edge firewalls and DNS allowing traffic to resolve. Anyway, that was more an answer toyour comment about unreliable calls.

 

Your specific startup scenario sounds different, HTTPS traffic is used for authentication from the Teams client and should be ok to follow your proxy route. I've used the same setup in previous organisations without issue. I would suggest using a tool like Fiddler to see what happens. My complete guess would be that a proxy is refusing to respond until a timeout is reached. It's certainly not something I've seen before here, and is different to the other issue. I would also suggest raising a support case as the engineers there can help you diagnose more about what's happening in your environment.

 

 

 

Progress: 

 

Teams vs proxy does NOT seem to be the issue.  the autoupdate aspects of the default Teams install does though:

 

Default / current install: 

 

Task bar shortcut target: 

C:\Users\%username%\AppData\Local\Microsoft\Teams\Update.exe --processStart "Teams.exe"

Start in: 

C:\Users\marc.panton\AppData\Local\Microsoft\Teams\current

 

 

Change to: 

C:\Users\%username%\AppData\Local\Microsoft\Teams\current\teams.exe --no-proxy-server

 

Start in: 

C:\Users\marc.panton\AppData\Local\Microsoft\Teams\current

 

Now, when you use the task bar icon to open Teams, it opens in normal time. 

 

n.b. This only impacts the TASK BAR icon for Teams.  You will also need to stop Teams automatically opening on login (settings of teams, un-tick Auto login)/StartupTab of Task manager, disable Teams). 

 

If you still want Teams to auto start, but use the new settings above, you will need to create a shortcut and drop into:

 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp

 

 

Obviously, this has other impacts: your Teams app will cease to update.  You will need to come up with a process to update it by other means.  Use at your own risk!

 

 

 

@Marc Panton What mime type i your .pac file being served as? Is it application/x-ns-proxy-autoconfig ?

 

I've seen that the updater process used by Teams (https://github.com/Squirrel/Squirrel.Windows) can have issues if the .pac isn;t served with the right mime type.

 

We are staging via GPO UNC share to local folder, then proxy settings set via GPO use defined path locally, not a web address.  (We do it that way as W10/Edge had issues with PAC files from a web share)

 

I'll have a read of the second.

 

Marc

Update - 

 

When we reconfigured to test a URL served  PAC file, IIS was set to serve it as Javascript, when changed to application/x-ns-proxy-autoconfig sure enough, all was good with the world: Teams opens in 30s. 

 

thanks for the help all and @Steven Collier 

 

cheers,

Marc

 

I figured out that, if an environment variable HTTPS_PROXY is defined, MS Teams seems to use it, instead of the Windows "Internet Settings". Its format must be like http://user:password@proxy.domain.com:port

@Claude Villermain- Good find... however, I'm pretty sure my organization would not be happy with static plaintext-stored passwords anywhere. How would this play with, say, a kerberos-aware proxy?


http://user:password@proxy.domain.com:port