hermes - 💡(How to fix) Fix [Feature Request]: Configurable gateway environment/proxy bypass for platform connectors [1 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
NousResearch/hermes-agent#17036Fetched 2026-04-29 06:37:43
View on GitHub
Comments
0
Participants
1
Timeline
4
Reactions
0
Participants
Timeline (top)
labeled ×4

Please consider adding a supported way to configure gateway environment variables or per-platform proxy behavior, especially for persistent websocket connectors.

Some local/enterprise deployments run with system-level proxies, VPNs, or network filters. For websocket-based platform connectors, this can cause specific platform endpoints to be routed through the wrong proxy and disconnect repeatedly. Today, the workaround may require patching Hermes launchd/service generation so the gateway process starts with a custom no_proxy/NO_PROXY value.

Root Cause

Messaging gateways are long-running and sensitive to proxy behavior. Treating proxy bypass as configuration would prevent downstream deployments from patching service templates after every upgrade.

Fix Action

Fix / Workaround

Some local/enterprise deployments run with system-level proxies, VPNs, or network filters. For websocket-based platform connectors, this can cause specific platform endpoints to be routed through the wrong proxy and disconnect repeatedly. Today, the workaround may require patching Hermes launchd/service generation so the gateway process starts with a custom no_proxy/NO_PROXY value.

Messaging gateways are long-running and sensitive to proxy behavior. Treating proxy bypass as configuration would prevent downstream deployments from patching service templates after every upgrade.

Code Example

gateway:
  env:
    no_proxy: msg-frontier.feishu.cn,localhost,127.0.0.1

---

platforms:
  feishu:
    websocket:
      proxy: direct
      no_proxy:
        - msg-frontier.feishu.cn
RAW_BUFFERClick to expand / collapse

Summary

Please consider adding a supported way to configure gateway environment variables or per-platform proxy behavior, especially for persistent websocket connectors.

Some local/enterprise deployments run with system-level proxies, VPNs, or network filters. For websocket-based platform connectors, this can cause specific platform endpoints to be routed through the wrong proxy and disconnect repeatedly. Today, the workaround may require patching Hermes launchd/service generation so the gateway process starts with a custom no_proxy/NO_PROXY value.

Proposed capability

Expose gateway process environment and/or platform proxy behavior in config, for example:

gateway:
  env:
    no_proxy: msg-frontier.feishu.cn,localhost,127.0.0.1

Or platform-scoped configuration:

platforms:
  feishu:
    websocket:
      proxy: direct
      no_proxy:
        - msg-frontier.feishu.cn

The exact config format can vary. The key request is: deployments should be able to control gateway proxy behavior without editing generated service files or Hermes source.

Use cases

  • Feishu/Lark websocket connections that must bypass a local system proxy
  • Corporate VPN environments where only some endpoints should use the proxy
  • Self-hosted deployments with separate proxy policies for model APIs vs messaging platforms
  • Launchd/systemd users who need stable env injection across upgrades

Expected outcome

Gateway service generation should preserve configured environment/proxy settings across upgrades and restarts. Platform connectors should be able to opt into direct connections where needed.

Why this matters

Messaging gateways are long-running and sensitive to proxy behavior. Treating proxy bypass as configuration would prevent downstream deployments from patching service templates after every upgrade.

extent analysis

TL;DR

Configure gateway environment variables or per-platform proxy behavior to control proxy settings for websocket connectors.

Guidance

  • Consider adding a gateway.env configuration option to set no_proxy/NO_PROXY values for the gateway process.
  • Introduce platform-scoped configuration for proxy behavior, such as platforms.feishu.websocket.proxy and platforms.feishu.websocket.no_proxy.
  • Evaluate the need for preserving configured environment/proxy settings across upgrades and restarts.
  • Investigate the feasibility of exposing gateway process environment and proxy behavior in the configuration file.

Example

gateway:
  env:
    no_proxy: msg-frontier.feishu.cn,localhost,127.0.0.1

Notes

The proposed solution requires changes to the configuration format and potentially the service generation process. The exact implementation details may vary depending on the specific requirements and constraints of the system.

Recommendation

Apply workaround by configuring gateway environment variables or per-platform proxy behavior, as this will provide a more flexible and maintainable solution for controlling proxy settings.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING