{"version":"2.1.300","anchor":"standalone-agent-proxy-mode-for-self-hosted-runner-sessions","canonical_anchor":"standalone-agent-proxy-mode-for-self-hosted-runner-sessions","heading":"Self-hosted runner sessions can send all traffic through a customer-run proxy","tier":"use","area":"Self-Hosted Runner","scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/standalone-agent-proxy-mode-for-self-hosted-runner-sessions","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300","markdown":"### Self-hosted runner sessions can send all traffic through a customer-run proxy\n\nNew CCR_AGENT_PROXY_RELAY_MODE value agent_proxy_standalone routes all self-hosted session traffic through your own proxy and refuses to start otherwise\n\n**Unclear.** Whether operators set `CCR_AGENT_PROXY_RELAY_MODE` themselves or it is set for them by the service is not shown.\n\n**What**\n\n`CCR_AGENT_PROXY_RELAY_MODE` (an environment variable that controls how the agent proxy relays network traffic) gains a new value, `agent_proxy_standalone`. With it, all session traffic goes through a proxy you run, named by `CCR_AGENT_PROXY_STANDALONE_URL`.\n\n- It only works when `CLAUDE_CODE_ENVIRONMENT_KIND` is `byoc` (a self-hosted runner).\n\n- The URL must be https with no username or password inside it.\n\n- Claude Code starts a local forwarder on 127.0.0.1, signs in to the proxy with the session's own id and token, and sets `CLAUDE_CODE_ENABLE_PROXY_AUTH_HELPER` to false.\n\n- If any check fails, Claude Code refuses to start rather than connect directly.\n\n- The outgoing proxy also gains a configurable log label, can reload after an upstream connection fails, accepts a function for upstream TLS options, and can send plain http:\/\/ requests through a CONNECT tunnel (a way of passing traffic through a proxy) using a new request parser.\n\n**Why**\n\nOperators of self-hosted runners can force every outgoing connection through their own proxy, and a session that cannot reach it stops instead of quietly going direct.\n\n- Area: Self-Hosted Runner\n- Tier: Use it now\n- Useful: 5\/5\n- Signal: 3\/5\n- Scope: both\n- Heads-up: no"}