Connecting
Protocols and ports
Every product speaks HTTP, HTTPS and SOCKS5, and all but Telegram can carry UDP over SOCKS5. Which one you get is decided by the port, and the port rule is different for each product.
Updated 16 October 2026
What each protocol is for#
| Protocol | What it carries | Proxy URL scheme |
|---|---|---|
| HTTP | Web traffic. HTTPS sites go through an encrypted tunnel (the CONNECT method) | http:// |
| HTTPS | The same port and the same scheme as HTTP. Encryption is end to end, the proxy cannot read the content | http:// |
| SOCKS5 | Any TCP connection: web, mail clients, game launchers, messengers | socks5://, socks5h:// |
| UDP | Datagrams through SOCKS5: QUIC and HTTP/3, DNS, voice and video calls, games | socks5:// with UDP support in the client |
ISP and datacenter: SOCKS5 is the next port#
Each proxy in an ISP or datacenter order listens on two ports at once. The port in the order speaks HTTP and HTTPS. The next port, the same number plus one, speaks SOCKS5. Username and password are the same on both.
# HTTP and HTTPS
curl -x http://USER:PASS@203.0.113.10:45174 https://api.ipify.org
# SOCKS5: the same proxy, port + 1
curl -x socks5h://USER:PASS@203.0.113.10:45175 https://api.ipify.orgSet the Protocol switch on the order page to SOCKS5 and every copied or exported line already carries the SOCKS5 port.
Residential: the port picks the protocol#
All residential traffic goes through the gateway premium.proxya.co. The port you choose in the generator decides the protocol:
| Protocol | Ports |
|---|---|
| HTTP, HTTPS | 8888, 7000–7010, 9001–9007 |
| SOCKS5 | 1080, 6000–6010, 9101–9108 |
| HTTP and SOCKS5 on one port | 5555 |
All ports lead to the same pool and behave the same. More on the residential ports page.
Mobile: the device's own ports#
A mobile device has its own HTTP port and its own SOCKS5 port, and the two numbers are not related: the plus one rule does not apply. Both are printed on the order page, and the protocol switch there picks the right one for you.
Telegram#
MTProto proxies are opened with a link and work on ports 443 and 8443. A WEB proxy is a link with a fixed address on port 443. Neither is a host:port:user:pass proxy. See MTProto.
DNS through SOCKS5#
With socks5:// your own machine looks up the domain and sends the proxy a bare IP. With socks5h:// the domain name goes to the proxy and is resolved there.
- Use
socks5h://by default. Your local DNS does not see the sites you visit, and the target gets an address that matches the proxy's country. - Some clients have a setting with the same meaning instead of a scheme, often called remote DNS or proxy DNS.
curl -x socks5h://USER:PASS@HOST:PORT https://api.ipify.orgUDP#
| Product | UDP over SOCKS5 |
|---|---|
| ISP, Datacenter | Works on the SOCKS5 port with nothing to switch on |
| Residential | Turn on the UDP switch in the generator. Details in UDP for residential |
| Mobile | Depends on the device. Pick it with the UDP filter when ordering |
| MTProto, WEB | Not applicable |
UDP never goes over an HTTP port. The client has to implement SOCKS5 UDP ASSOCIATE itself: curl and most HTTP libraries do not, while tunnel clients and many antidetect browsers do.
Didn't find the answer?
Support answers in the chat on this site around the clock. On Telegram the reply usually comes fastest, and a ticket gets an answer by email.