> ## Documentation Index
> Fetch the complete documentation index at: https://docs.siderolabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Corporate Proxies

> How to configure Talos Linux to use proxies in a corporate environment

## Appending the certificate authority of MITM proxies

See [Custom Certificate Authorities](https://docs.siderolabs.com/talos/v1.15/security/certificate-authorities.md) to append the CA certificate of your corporate proxy to the trusted store.

## Configuring a machine to use the proxy

To configure Talos to use an HTTP or HTTPS proxy, set the appropriate environment variables with the [`EnvironmentConfig`](../reference/configuration/runtime/environmentconfig) document:

```yaml theme={null}
apiVersion: v1alpha1
kind: EnvironmentConfig
variables:
  http_proxy: <http proxy>
  https_proxy: <https proxy>
  no_proxy: <no proxy>
```

In proxy-restricted environments, you may also need to configure DNS with [`ResolverConfig`](../reference/configuration/network/resolverconfig) and NTP with [`TimeSyncConfig`](../reference/configuration/network/timesyncconfig) explicitly:

```yaml theme={null}
apiVersion: v1alpha1
kind: ResolverConfig
nameservers:
  - address: <ip 1>
  - address: <ip 2>
---
apiVersion: v1alpha1
kind: TimeSyncConfig
ntp:
  servers:
    - <server 1>
    - <server 2>
```

If proxy access is required before the machine configuration is applied (for example, during initial boot), provide the proxy settings via [kernel command line arguments](https://docs.siderolabs.com/talos/v1.15/reference/kernel.md):

```text theme={null}
talos.environment=http_proxy=<http-proxy> talos.environment=https_proxy=<https-proxy>
```

## Connecting to Omni through a proxy

Machines managed by Omni have additional requirements behind a proxy. The SideroLink overlay prefix, `0.0.0.0`, and the machines' own subnets must be listed in `no_proxy`, and the SideroLink gRPC tunnel must be enabled where outbound UDP is blocked. See [Connect Machines to Omni Through a Corporate Proxy](https://docs.siderolabs.com/omni/omni-cluster-setup/connect-machines-to-omni-through-a-proxy.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.