SOLVED

What proxy setting is Teams using?

%3CLINGO-SUB%20id%3D%22lingo-sub-259728%22%20slang%3D%22en-US%22%3EWhat%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-259728%22%20slang%3D%22en-US%22%3E%3CP%3EDoes%20anybody%20know%20what%20proxy%20setting%20Teams%20is%20using%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20in%20corporate%20environment%2C%20behind%20a%20web%20proxy%2C%20and%20Teams%20works%20fine%20up%20to%20the%20point%20I%20want%20to%20attend%20an%20audio%20meeting.%20I%20figured%20out%20that%20at%20the%20time%20I%20am%20attempting%20to%20join%2C%20there%20are%20requests%20to%20*.relay.teams.microsoft.com%20and%20*.tr.teams.microsoft.com%20that%20are%20going%20through%20our%20proxy%20and%20this%20fails.%3C%2FP%3E%3CP%3EI%20figured%20out%20that%20if%20the%20connection%20goes%20through%20hosts%20in%20these%20domains%20directly%20(bypassing%20the%20proxy)%2C%20audio%20meetings%20work%20fine.%3C%2FP%3E%3CP%3EAs%20I%20don't%20have%20control%20over%20this%20corporate%20proxy%20and%20proxy%20auto%20configuration%20(PAC)%20file%2C%20I%20configured%20my%20Internet%20proxy%20settings%20to%20a%20specific%20web%20proxy%2C%20bypassing%20these%20domains%2C%20and%20I%20validated%20that%20my%20web%20browser%20is%20well%20taking%20into%20account%20such%20bypass%20configurations.%3C%2FP%3E%3CP%3EHowever%2C%20Teams%20persists%20in%20connecting%20through%20our%20web%20proxy%20for%20such%20domains%2C%20and%20even%20after%20restarting%2C%20rebooting...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETherefore%2C%20what%20proxy%20settings%20is%20Teams%20using%3F%20How%20can%20I%20configure%20it%20to%20bypass%20our%20web%20proxy%20for%20these%20domains%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-259728%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Eproxy%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ETeams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-294057%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-294057%22%20slang%3D%22en-US%22%3E%3CP%3EI%20figured%20out%20that%2C%20if%20an%20environment%20variable%20HTTPS_PROXY%20is%20defined%2C%20MS%20Teams%20seems%20to%20use%20it%2C%20instead%20of%20the%20Windows%20%22Internet%20Settings%22.%20Its%20format%20must%20be%20like%20http%3A%2F%2Fuser%3Apassword%40proxy.domain.com%3Aport%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-268864%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-268864%22%20slang%3D%22en-US%22%3E%3CP%3EUpdate%20-%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20we%20reconfigured%20to%20test%20a%20URL%20served%26nbsp%3B%20PAC%20file%2C%20IIS%20was%20set%20to%20serve%20it%20as%20Javascript%2C%20when%20changed%20to%26nbsp%3B%3CSPAN%3Eapplication%2Fx-ns-proxy-autoconfig%20sure%20enough%2C%20all%20was%20good%20with%20the%20world%3A%20Teams%20opens%20in%2030s.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3Ethanks%20for%20the%20help%20all%20and%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F178440%22%20target%3D%22_blank%22%3E%40Steven%20Collier%3C%2FA%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3Echeers%2C%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EMarc%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-268150%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-268150%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20staging%20via%20GPO%20UNC%20share%20to%20local%20folder%2C%20then%20proxy%20settings%20set%20via%20GPO%26nbsp%3Buse%20defined%20path%20locally%2C%20not%20a%20web%20address.%26nbsp%3B%20(We%20do%20it%20that%20way%20as%20W10%2FEdge%20had%20issues%20with%20PAC%20files%20from%20a%20web%20share)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'll%20have%20a%20read%20of%20the%20second.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMarc%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-268147%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-268147%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F110832%22%20target%3D%22_blank%22%3E%40Marc%20Panton%3C%2FA%3E%26nbsp%3BWhat%20mime%20type%20i%20your%20.pac%20file%20being%20served%20as%3F%20Is%20it%26nbsp%3B%3CSPAN%3Eapplication%2Fx-ns-proxy-autoconfig%20%3F%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EI've%20seen%20that%20the%20updater%20process%20used%20by%20Teams%20(%3CA%20href%3D%22https%3A%2F%2Fgithub.com%2FSquirrel%2FSquirrel.Windows%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fgithub.com%2FSquirrel%2FSquirrel.Windows%3C%2FA%3E)%20can%20have%20issues%20if%20the%20.pac%20isn%3Bt%20served%20with%20the%20right%20mime%20type.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-268141%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-268141%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EProgress%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETeams%20vs%20proxy%20does%20NOT%20seem%20to%20be%20the%20issue.%26nbsp%3B%20the%20autoupdate%20aspects%20of%20the%20default%20Teams%20install%20does%20though%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDefault%20%2F%20current%20install%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETask%20bar%20shortcut%20target%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3EC%3A%5CUsers%5C%25username%25%5CAppData%5CLocal%5CMicrosoft%5CTeams%5CUpdate.exe%20--processStart%20%22Teams.exe%22%3C%2FEM%3E%3C%2FP%3E%3CP%3EStart%20in%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3EC%3A%5CUsers%5Cmarc.panton%5CAppData%5CLocal%5CMicrosoft%5CTeams%5Ccurrent%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EChange%20to%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3EC%3A%5CUsers%5C%25username%25%5CAppData%5CLocal%5CMicrosoft%5CTeams%5Ccurrent%5Cteams.exe%20--no-proxy-server%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EStart%20in%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3EC%3A%5CUsers%5Cmarc.panton%5CAppData%5CLocal%5CMicrosoft%5CTeams%5Ccurrent%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENow%2C%20when%20you%20use%20the%20task%20bar%20icon%20to%20open%20Teams%2C%20it%20opens%20in%20normal%20time.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3En.b.%20This%20only%20impacts%20the%20TASK%20BAR%20icon%20for%20Teams.%26nbsp%3B%20You%20will%20also%20need%20to%20stop%20Teams%20automatically%20opening%20on%20login%20(settings%20of%20teams%2C%20un-tick%20Auto%20login)%2FStartupTab%20of%20Task%20manager%2C%20disable%20Teams).%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20still%20want%20Teams%20to%20auto%20start%2C%20but%20use%20the%20new%20settings%20above%2C%20you%20will%20need%20to%20create%20a%20shortcut%20and%20drop%20into%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3EC%3A%5CProgramData%5CMicrosoft%5CWindows%5CStart%20Menu%5CPrograms%5CStartUp%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EObviously%2C%20this%20has%20other%20impacts%3A%20your%20Teams%20app%20will%20cease%20to%20update.%26nbsp%3B%20You%20will%20need%20to%20come%20up%20with%20a%20process%20to%20update%20it%20by%20other%20means.%26nbsp%3B%20Use%20at%20your%20own%20risk!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-266318%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266318%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F110832%22%20target%3D%22_blank%22%3E%40Marc%20Panton%3C%2FA%3E%26nbsp%3Ba%20pac%20file%20only%20defines%20what%20happens%20to%20HTTP%20traffic%2C%20it's%20not%20at%20all%20relevant%20or%20considered%20by%20UDP%2C%20so%20by%20definition%20you%20can't%20get%20teams%20UDP%20media%20to%20bypass%20your%20proxy%20through%20a%20pac.%20It%20relies%20on%20your%20network%20edge%20firewalls%20and%20DNS%20allowing%20traffic%20to%20resolve.%20Anyway%2C%20that%20was%20more%20an%20answer%20toyour%20comment%20about%20unreliable%20calls.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYour%20specific%20startup%20scenario%20sounds%20different%2C%20HTTPS%20traffic%20is%20used%20for%20authentication%20from%20the%20Teams%20client%20and%20should%20be%20ok%20to%20follow%20your%20proxy%20route.%20I've%20used%20the%20same%20setup%20in%20previous%20organisations%20without%20issue.%20I%20would%20suggest%20using%20a%20tool%20like%20Fiddler%20to%20see%20what%20happens.%20My%20complete%20guess%20would%20be%20that%20a%20proxy%20is%20refusing%20to%20respond%20until%20a%20timeout%20is%20reached.%20It's%20certainly%20not%20something%20I've%20seen%20before%20here%2C%20and%20is%20different%20to%20the%20other%20issue.%20I%20would%20also%20suggest%20raising%20a%20support%20case%20as%20the%20engineers%20there%20can%20help%20you%20diagnose%20more%20about%20what's%20happening%20in%20your%20environment.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-266146%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266146%22%20slang%3D%22en-US%22%3E%3CP%3EBy%20the%20way%2C%20I%20am%20surprised%20that%20somebody%20from%20Microsoft%20(%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F16300%22%20target%3D%22_blank%22%3E%40Alexander%20Ivanov%3C%2FA%3E)%20marks%20an%20answer%20as%20%22Solution%22.%20Shouldn't%20this%20come%20from%20the%20original%20poster%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-266142%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266142%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Steven%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20fully%20aware%20of%20the%20recommendation%20to%20NOT%20use%20a%20proxy%20%2F%20bypass%20a%20proxy%20for%20the%20365%20et%20al%20IPs%2FURLs.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20point%20is%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1.%20if%20I%20use%20a%20PAC%20file%20to%20control%20the%20bypass%2C%20TEAMs%20breaks.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E2.%20if%20I%20use%20set%20a%20proxy%20in%20the%20browser's%20proxy%20settings%20fields%20(and%20then%20bypass%20at%20the%20proxy%20level%20itsself)%2C%20TEAMs%20works.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ethe%20result%20is%3A%26nbsp%3B%20TEAMs%20does%20not%20function%20as%20expected%20when%20a%20PAC%20file%20is%20in%20use.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBackground%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20running%20Symantec%20SmartConnect%20(SSC)%20locally%20on%20the%20end%20points.%26nbsp%3B%20I%20can%20(successfully)%20dictate%20the%20bypasses%20directly%20to%20SSC%2C%20so%20traffic%20IS%20bypassed%20before%20it%20leaves%20the%20device.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20even%20with%20the%20SSC%20level%20Bypass%20set%2C%20if%20there%20is%20ANY%20form%20of%20PAC%20in%20use%2C%20TEAMs%20is%20troublesome.%26nbsp%3B%20I%20have%20tested%20with%20a%20single%20item%20in%20the%20PAC%20file...%20still%20takes%205%20mins%20for%20TEAMs%20to%20open%2Flogin.%26nbsp%3B%20Calls%20still%20drop.%26nbsp%3B%20If%20I%20remove%20the%20PAC%20file%20entry%20and%20set%20localhost%20in%20the%20Proxy%20settings%20field%20(SSC%20listens%20locally)%2C%20the%20bypass%20works%20correctly%20(based%20on%20it%20being%20done%20by%20SSC%2C%20rather%20than%20the%20browser).%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%2C%20the%20issue%20here%20is%20that%20TEAMs%20does%20not%20consistently%2Fcorrectly%20use%20the%20OS%2FBrowser%20configured%20proxy%20settings%20if%20a%20PAC%20file%20is%20configured.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMarc%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-266140%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-266140%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20your%20answer.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEven%20if%20I%20understand%20that%20it%20would%20be%20better%20if%20traffic%20isn't%20converted%20to%20use%20HTTPS%2C%20in%20case%20it%20does%20because%20ports%20aren't%20open%2C%20it%20would%20be%20good%20if%20we%20could%20control%20how%20proxy%20settings%20are%20used%20(or%20not)%2C%20as%20traffic%20may%20be%20allowed%20to%20go%20through%20directly%20on%20port%20443%2C%20without%20going%20through%20a%20web%20proxy%20(what%20adds%20another%20layer%20of%20quality%20degradation).%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-265967%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-265967%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20really%20shouldn't%20be%20sending%20teams%20calls%20via%20a%20proxy%2C%20the%20ip%20addresses%20listed%20as%20optimize%20in%20this%20list%20need%20to%20have%20directly%2C%20unrestricted%20connection%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fenterprise%2Furls-and-ip-address-ranges%23skype-for-business-online-and-microsoft-teams%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Foffice365%2Fenterprise%2Furls-and-ip-address-ranges%23skype-for-business-online-and-microsoft-teams%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFor%20a%20quality%20experience%20with%20audio%20calls%20Teams%20needs%20to%20be%20sending%20UDP%2FSTUN%20traffic%20directly%2C%20as%20it's%20not%20HTTP%20it%20has%20nothing%20to%20do%20with%20proxy%20settings%20or%20pac.%20Only%20if%20these%20ports%20are%20being%20blocked%20Teams%20will%20attempt%20to%20use%20HTTPS%20but%20the%20reliability%20and%20latency%20suffer.%20I%20can't%20really%20explain%20the%20difference%20you%20see%2C%20but%20maybe%20you've%20got%20some%20elements%20in%20your%20pad%20which%20take%20a%20long%20time%20to%20respond%2C%20for%20example%20using%26nbsp%3B%3CEM%3EisInNet()%3C%2FEM%3E%3CSPAN%3E%2C%20%3C%2FSPAN%3E%3CEM%3EisResolvable()%3C%2FEM%3E%3CSPAN%3E%2C%20and%20%3C%2FSPAN%3E%3CEM%3EdnsResolve()%26nbsp%3B%3C%2FEM%3Eare%20generally%20unacceptably%20slow.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-265605%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-265605%22%20slang%3D%22en-US%22%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20seeing%20this%20too%20in%20our%20environment%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPAC%20file%20in%20use%2C%20Teams%20very%20slow%20to%20open%2C%20drops%20calls%20etc.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EProxy%20set%20in%20proxy%20options%2C%20Teams%20opens%20normally%2C%20but%20we%20are%20limited%20in%20the%20size%20of%20the%20bypass%20list%20so%20not%20a%20solution.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENeed%20to%20know%20how%20to%20pass%20proxy%20settings%20directly%20to%20Teams%20%2F%20electron%20app.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Emarc%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-260634%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-260634%22%20slang%3D%22en-US%22%3E%3CP%3ELet%20me%20ping%20some%20folks%20on%20that%2C%20hopefully%20it's%20documented%20somewhere.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-260245%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-260245%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%2C%20thanks%20for%20your%20answer.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEdge%2C%20MSIE%20and%20Chrome%20are%20all%20using%20my%20Windows%20system%20Internet%20settings.%20WinHTTP%20is%20configured%20for%20Direct%20access.%20It%20looks%20like%20that%20Teams%20is%20using%20some%20of%20the%20system%20proxy%20settings%2C%20e.g.%20use%20the%20configured%20proxy%20server%2C%20but%20not%20all%20of%20them%2C%20especially%20not%20settings%20about%20bypassing%20my%20proxy%20for%20specific%20domains.%20I%20also%20monitored%20Teams%20using%20SysInternals%20ProcMon%20and%20saw%20it%20reading%20system%20proxy%20setting%20from%20registry.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20I%20monitor%20all%20proxy%20accesses%20(WireShark%20configured%20to%20display%20%22CONNECT%22%20requests%20to%20my%20proxy%20server)%2C%20I%20can%20see%20my%20web%20browsers%20honoring%20proxy%20settings%20(bypass%20or%20not)%2C%20but%20not%20Teams.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-260234%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-260234%22%20slang%3D%22en-US%22%3E%3CP%3EWhich%20browser%20settings%20though%3F%20Being%20an%20electron%20app%2C%20I%20imagine%20Teams%20would%20look%20at%20the%20Chrome%20settings%2C%20if%20installed%2C%20but%20I%20haven't%20actually%20bothered%20to%20check.%20My%20point%20being%2C%20configure%20them%20in%20both%20Chrome%20and%20IE%2C%20and%20if%20that%20fails%2C%20also%20change%20the%20WinHTTP%20ones%20via%20netsh.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1152956%22%20slang%3D%22de-DE%22%3ERe%3A%20What%20proxy%20setting%20is%20teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1152956%22%20slang%3D%22de-DE%22%3E%3CP%3EWe%20are%20also%20having%20trouble%20getting%20teams%20to%20use%20the%20proxy%20server%20for%20all%20the%20CDN%20stuff%20since%20we%20can't%20allow%20URLs%20on%20our%20firewall.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFor%20example%20at%20Teams%20start%20it%20is%20trying%20to%20connect%20to%20statics.teams.cdn.office.net.%20If%20we%20setup%20a%20proxy%20via%20automatically%20detect%20settings%20and%20wpad%20or%20static%20wpad%20script%20it%20is%20not%20working%20and%20trying%20to%20connect%20directly.%20If%20we%20setup%20the%20proxy%20statically%20via%20manual%20proxy%20settings%20it%20is%20working.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F178440%22%20target%3D%22_blank%22%3E%40Steven%20Collier%3C%2FA%3E%26nbsp%3BCan%20you%20confirm%20that%20your%20setup%20is%20still%20working%3F%20%3CBR%20%2F%3EI%20tried%20with%20a%20very%20simple%20wpad%20file%20with%20correct%20mime%20type%3A%3C%2FP%3E%3CPRE%20class%3D%22lia-code-sample%20language-javascript%22%3E%3CCODE%3Efunction%20FindProxyForURL(url%2C%20host)%20%0A%7B%0A%20return%20%22PROXY%20proxy.domain.com%3A80%3B%22%3B%0A%7D%3C%2FCODE%3E%3C%2FPRE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOr%20is%20there%20any%20other%20way%20we%20could%20allow%20teams%20direct%20connections%20via%20a%20dumb%20cisco%20router%20(not%20allowing%20every%20outgoing%20traffic)%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1324375%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1324375%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F178440%22%20target%3D%22_blank%22%3E%40Steven%20Collier%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20Teams%2FLinux%20is%20connecting%20to%26nbsp%3B52.113.46.7%20with%20my%20Video%20and%20this%20IP%20is%20not%20listed%20on%20the%20suggest%20NO_PROXY%20IP's.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-734635%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-734635%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F197841%22%20target%3D%22_blank%22%3E%40Claude%20Villermain%3C%2FA%3E-%20Good%20find...%20however%2C%20I'm%20pretty%20sure%20my%20organization%20would%20not%20be%20happy%20with%20static%20plaintext-stored%20passwords%20anywhere.%20How%20would%20this%20play%20with%2C%20say%2C%20a%20kerberos-aware%20proxy%3F%3C%2FP%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3Ehttp%3A%2F%2Fuser%3Apassword%40proxy.domain.com%3Aport%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1382693%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1382693%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F630673%22%20target%3D%22_blank%22%3E%400036209145007%3C%2FA%3E%26nbsp%3BI%20noticed%20the%20same%20thing.%26nbsp%3B%20However%2C%20that%20address%20is%20covered%20by%20the%2052.112.0.0%2F12%20CIDR%20range.%26nbsp%3B%20I%20know%2C%20it's%20weird%2C%20I%20did%20not%20understand%20that%20one%20until%20someone%20explained%20it%20to%20me.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1495243%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1495243%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F178440%22%20target%3D%22_blank%22%3E%40Steven%20Collier%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%2C%20I%20have%20web%20proxy%20in%20our%20environment.%20Browsers%20have%20PAC%20file%20configured%20for%20load%20balancing.%20I%20have%20allowed%20the%20UDP%20based%20traffic%20directly%20without%20proxy%20and%20http%20based%20access%20via%20proxy.%20Still%20when%20we%20try%20to%20attempt%20audio%2Fvideo%20call%2C%20it%20takes%20time%20to%20connect.%20e.g.%20Call%20gets%20successfully%20connected%20only%20if%20I%20wait%20for%203-4%20rings%20and%20pick%20up.%20It%20fails%20if%20I%20pick%20up%20on%201st%20or%202nd%20ring.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20idea%20why%20this%20might%20be%20happening%3F%26nbsp%3B%3C%2FP%3E%3CP%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1495248%22%20slang%3D%22en-US%22%3ERe%3A%20What%20proxy%20setting%20is%20Teams%20using%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1495248%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F110832%22%20target%3D%22_blank%22%3E%40Marc%20Panton%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20also%20using%20hosted%20PAC%20file%20with%20mime%20type%26nbsp%3B%3CSPAN%3Eapplication%2Fx-ns-proxy-autoconfig.%20But%20still%20some%20of%20my%20users%20are%20not%20able%20to%20connect%20to%20teams%20with%20PAC%20settings%20in%20IE%20browser.%20They%20are%20able%20to%20connect%20if%20it%20is%20changed%20to%20explicit%20proxy%20IP.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EAny%20issue%20with%20Teams%20if%20we%20use%20PAC%20file%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EThanks!%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Does anybody know what proxy setting Teams is using?

 

I am in corporate environment, behind a web proxy, and Teams works fine up to the point I want to attend an audio meeting. I figured out that at the time I am attempting to join, there are requests to *.relay.teams.microsoft.com and *.tr.teams.microsoft.com that are going through our proxy and this fails.

I figured out that if the connection goes through hosts in these domains directly (bypassing the proxy), audio meetings work fine.

As I don't have control over this corporate proxy and proxy auto configuration (PAC) file, I configured my Internet proxy settings to a specific web proxy, bypassing these domains, and I validated that my web browser is well taking into account such bypass configurations.

However, Teams persists in connecting through our web proxy for such domains, and even after restarting, rebooting...

 

Therefore, what proxy settings is Teams using? How can I configure it to bypass our web proxy for these domains?

 

Thanks

20 Replies
Highlighted

Which browser settings though? Being an electron app, I imagine Teams would look at the Chrome settings, if installed, but I haven't actually bothered to check. My point being, configure them in both Chrome and IE, and if that fails, also change the WinHTTP ones via netsh.

Highlighted

@Vasil Michev, thanks for your answer.

 

Edge, MSIE and Chrome are all using my Windows system Internet settings. WinHTTP is configured for Direct access. It looks like that Teams is using some of the system proxy settings, e.g. use the configured proxy server, but not all of them, especially not settings about bypassing my proxy for specific domains. I also monitored Teams using SysInternals ProcMon and saw it reading system proxy setting from registry.

 

When I monitor all proxy accesses (WireShark configured to display "CONNECT" requests to my proxy server), I can see my web browsers honoring proxy settings (bypass or not), but not Teams.

Highlighted

Let me ping some folks on that, hopefully it's documented somewhere.

Highlighted

 

We are seeing this too in our environment: 

 

PAC file in use, Teams very slow to open, drops calls etc. 

 

Proxy set in proxy options, Teams opens normally, but we are limited in the size of the bypass list so not a solution. 

 

Need to know how to pass proxy settings directly to Teams / electron app. 

 

marc 

Highlighted
Best Response confirmed by Alexander Ivanov (Microsoft)
Solution

You really shouldn't be sending teams calls via a proxy, the ip addresses listed as optimize in this list need to have directly, unrestricted connection

 

https://docs.microsoft.com/en-us/office365/enterprise/urls-and-ip-address-ranges#skype-for-business-...

 

For a quality experience with audio calls Teams needs to be sending UDP/STUN traffic directly, as it's not HTTP it has nothing to do with proxy settings or pac. Only if these ports are being blocked Teams will attempt to use HTTPS but the reliability and latency suffer. I can't really explain the difference you see, but maybe you've got some elements in your pad which take a long time to respond, for example using isInNet(), isResolvable(), and dnsResolve() are generally unacceptably slow.

Highlighted

Thanks for your answer.

 

Even if I understand that it would be better if traffic isn't converted to use HTTPS, in case it does because ports aren't open, it would be good if we could control how proxy settings are used (or not), as traffic may be allowed to go through directly on port 443, without going through a web proxy (what adds another layer of quality degradation).

Highlighted

Hi Steven, 

 

I am fully aware of the recommendation to NOT use a proxy / bypass a proxy for the 365 et al IPs/URLs.

 

My point is: 

 

1. if I use a PAC file to control the bypass, TEAMs breaks.  

2. if I use set a proxy in the browser's proxy settings fields (and then bypass at the proxy level itsself), TEAMs works. 

 

the result is:  TEAMs does not function as expected when a PAC file is in use. 

 

Background: 

 

We are running Symantec SmartConnect (SSC) locally on the end points.  I can (successfully) dictate the bypasses directly to SSC, so traffic IS bypassed before it leaves the device.

 

However, even with the SSC level Bypass set, if there is ANY form of PAC in use, TEAMs is troublesome.  I have tested with a single item in the PAC file... still takes 5 mins for TEAMs to open/login.  Calls still drop.  If I remove the PAC file entry and set localhost in the Proxy settings field (SSC listens locally), the bypass works correctly (based on it being done by SSC, rather than the browser). 

 

So, the issue here is that TEAMs does not consistently/correctly use the OS/Browser configured proxy settings if a PAC file is configured. 

 

Marc

 

 

Highlighted

By the way, I am surprised that somebody from Microsoft ( @Alexander Ivanov) marks an answer as "Solution". Shouldn't this come from the original poster?

Highlighted

@Marc Panton a pac file only defines what happens to HTTP traffic, it's not at all relevant or considered by UDP, so by definition you can't get teams UDP media to bypass your proxy through a pac. It relies on your network edge firewalls and DNS allowing traffic to resolve. Anyway, that was more an answer toyour comment about unreliable calls.

 

Your specific startup scenario sounds different, HTTPS traffic is used for authentication from the Teams client and should be ok to follow your proxy route. I've used the same setup in previous organisations without issue. I would suggest using a tool like Fiddler to see what happens. My complete guess would be that a proxy is refusing to respond until a timeout is reached. It's certainly not something I've seen before here, and is different to the other issue. I would also suggest raising a support case as the engineers there can help you diagnose more about what's happening in your environment.

 

 

Highlighted

 

Progress: 

 

Teams vs proxy does NOT seem to be the issue.  the autoupdate aspects of the default Teams install does though:

 

Default / current install: 

 

Task bar shortcut target: 

C:\Users\%username%\AppData\Local\Microsoft\Teams\Update.exe --processStart "Teams.exe"

Start in: 

C:\Users\marc.panton\AppData\Local\Microsoft\Teams\current

 

 

Change to: 

C:\Users\%username%\AppData\Local\Microsoft\Teams\current\teams.exe --no-proxy-server

 

Start in: 

C:\Users\marc.panton\AppData\Local\Microsoft\Teams\current

 

Now, when you use the task bar icon to open Teams, it opens in normal time. 

 

n.b. This only impacts the TASK BAR icon for Teams.  You will also need to stop Teams automatically opening on login (settings of teams, un-tick Auto login)/StartupTab of Task manager, disable Teams). 

 

If you still want Teams to auto start, but use the new settings above, you will need to create a shortcut and drop into:

 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp

 

 

Obviously, this has other impacts: your Teams app will cease to update.  You will need to come up with a process to update it by other means.  Use at your own risk!

 

 

 

Highlighted

@Marc Panton What mime type i your .pac file being served as? Is it application/x-ns-proxy-autoconfig ?

 

I've seen that the updater process used by Teams (https://github.com/Squirrel/Squirrel.Windows) can have issues if the .pac isn;t served with the right mime type.

Highlighted

 

We are staging via GPO UNC share to local folder, then proxy settings set via GPO use defined path locally, not a web address.  (We do it that way as W10/Edge had issues with PAC files from a web share)

 

I'll have a read of the second.

 

Marc

Highlighted

Update - 

 

When we reconfigured to test a URL served  PAC file, IIS was set to serve it as Javascript, when changed to application/x-ns-proxy-autoconfig sure enough, all was good with the world: Teams opens in 30s. 

 

thanks for the help all and @Steven Collier 

 

cheers,

Marc

 

Highlighted

I figured out that, if an environment variable HTTPS_PROXY is defined, MS Teams seems to use it, instead of the Windows "Internet Settings". Its format must be like http://user:password@proxy.domain.com:port

Highlighted

@Claude Villermain- Good find... however, I'm pretty sure my organization would not be happy with static plaintext-stored passwords anywhere. How would this play with, say, a kerberos-aware proxy?


http://user:password@proxy.domain.com:port



Highlighted

We are also having trouble getting Teams to use the proxy server for all the CDN stuff since we can't allow URLs on our firewall.

 

For example at Teams start it is trying to connect to statics.teams.cdn.office.net. If we setup a proxy via automatically detect settings and wpad or static wpad script it is not working and trying to connect directly. If we setup the proxy statically via manual proxy settings it is working.

 

@Steven Collier Can you confirm that your setup is still working?
I tried with a very simple wpad file with correct mime type:

function FindProxyForURL(url, host) 
{
	return "PROXY proxy.domain.com:80;";
}

 

Or is there any other way we could allow Teams direct connections via a dumb cisco router (not allowing every outgoing traffic)?

Highlighted

@Steven Collier 

My Teams/Linux is connecting to 52.113.46.7 with my Video and this IP is not listed on the suggest NO_PROXY IP's.

Highlighted

@0036209145007 I noticed the same thing.  However, that address is covered by the 52.112.0.0/12 CIDR range.  I know, it's weird, I did not understand that one until someone explained it to me.

Highlighted

@Steven Collier 

Hi, I have web proxy in our environment. Browsers have PAC file configured for load balancing. I have allowed the UDP based traffic directly without proxy and http based access via proxy. Still when we try to attempt audio/video call, it takes time to connect. e.g. Call gets successfully connected only if I wait for 3-4 rings and pick up. It fails if I pick up on 1st or 2nd ring. 

 

Any idea why this might be happening? 

Thanks!