Proxy tunnel refusals now name a CDN, VPN or firewall instead of looking like an Anthropic block.
What's wrong with this entry?
When a corporate proxy or CDN refuses the CONNECT tunnel, the error now says so instead of surfacing as an Anthropic 403. The failure carries code ERR_PROXY_TUNNEL plus the CONNECT status and headers, and the explanation names a CDN or a VPN/firewall refusing the request before it reached Anthropic.
- A classifier inspects
request-id,cf-rayandserverheaders to label the refusal as coming from the origin, a Cloudflare-like intermediary, or some other intermediary. - Header sniffing gained a separate
x-proxy-errorreader alongside the existingx-deny-reason. - Reachable in this build with no flag.
ERR_PROXY_TUNNEL
Strings lifted out of the shipped bundle, so the claim above can be checked against them.