Products
Datacenter proxies from $19/mo Rotating proxies from $49/mo ISP proxies from $33/mo Dedicated proxies from $3.50/mo UDP proxies from $5/mo Free trial
Use cases
Data & scraping AI services Social media & messaging E-commerce & finance Media & entertainment Marketing & ads Automation & tools All use cases →
Pricing
Full pricing table All 20 locations Money-back guarantee
Resources
Blog Proxy API MCP server Setup guides FAQ For business About us Affiliate program
English
English Русский
99.9% uptime · 100,000+ IPs available

TCP Proxy Servers

Tunnel any TCP connection — browsers, scrapers, mail, databases — through the same addresses, over SOCKS5 or HTTP CONNECT.

  • Unlimited bandwidth—no usage-based billing
  • One of the highest connection limits in the industry
  • Whitelist up to five source IPs at no charge
  • Up to three free proxy list refreshes per month
Start free trial Trial: 20 IPs for 60 minutes, no card required.
Packages start at 100 IPs
Plan term
Total for 30 days $0.00
Buy proxies
✓ 24-hour money-back guarantee — details · ✓ No KYC required

How TCP tunneling works

A tunnel starts with one short negotiation: your client tells the proxy which host and port it wants, the proxy opens its own TCP connection to that target, and from that moment it just copies bytes in both directions. It doesn't parse what flows inside — which is the whole point: anything that runs over TCP fits through the same pipe, and a TLS session stays encrypted end-to-end because the proxy never needs to look. There are two standard ways to ask for the tunnel — a SOCKS5 handshake, or an HTTP CONNECT request to an HTTP or HTTPS proxy — and the result is the same relay either way; which one you use depends on what your software supports, not on what you're tunneling.

Every static datacenter and ISP plan on this page includes HTTP, HTTPS, SOCKS4, and SOCKS5 on the same addresses — pick the protocol your software expects. All of them carry TCP by default. UDP is separate: it runs through SOCKS5 UDP ASSOCIATE and is available as a plan add-on — see the UDP proxies page for gaming, VoIP, and streaming workloads.

One naming caveat: in server-admin contexts, "TCP proxy" often means a reverse proxy or L4 load balancer (an nginx stream block, HAProxy) sitting in front of your own servers. This page is the forward kind — outbound IP addresses your applications connect through. Protocol comparison is in the table below; pricing for datacenter packages and static ISP plans is in the calculator above.

Product specs at a glance
IP pool100,000+ IPv4
ProtocolsHTTP, HTTPS, SOCKS4, and SOCKS5
Bandwidthunlimited
Uptime99.9%
IP whitelistingup to five source IPs included
Username/passwordoptional, in addition to IP whitelisting
List refreshesup to three free refreshes per month
Minimum order100 IPs; 1 IP for dedicated proxies
Deliveryautomatically after payment
Refund24-hour money-back guarantee
Payment methods
StripeStripe VisaVisa MastercardMastercard American ExpressAmex USDT TRC20 and ERC20USDT USDCUSDC BitcoinBitcoin EthereumEthereum LitecoinLitecoin

Which proxies should you choose?

SOCKS5 tunnels any TCP connection; HTTPS proxies use HTTP CONNECT for the same job. Compare all four protocols included with every plan.

HTTP HTTPS SOCKS4 This page
SOCKS5
Traffic encryption ✕ No TLS to the proxythe proxy connection is unencrypted ✓ TLS tunnelto our server and the target site Depends on the application protocolHTTPS traffic remains encrypted Depends on the application protocolHTTPS traffic remains encrypted
Header handling May add or modify HTTP headers TunneledHTTP headers inside the tunnel are not modified Passes application traffic unchanged Passes application traffic unchanged
TCP / UDP TCP TCP TCP TCP + UDP
Username/password auth ✓ Supported ✓ Supported ✕ No password authentication ✓ Supported
Remote DNS resolution Client-dependent Client-dependent ✕ Nothe client resolves the hostname ✓ Supportedwhen the client sends the hostname to the proxy
When to choose it Web and API traffic, especially with software that supports HTTP proxies When you need a TLS-encrypted connection to the proxy Legacy software that only supports SOCKS4 General-purpose applications, gaming, streaming, and UDP traffic
HTTP, HTTPS, SOCKS4, and SOCKS5 are included with every static proxy plan. Rotating plans support HTTP and SOCKS5. Buy now

Connect in 60 seconds

Use the SOCKS5 example for general TCP clients; use the HTTP/HTTPS line when your stack expects an HTTP proxy with CONNECT tunneling.

# HTTP or HTTPS proxy
curl -x http://login:password@IP:port https://example.com

# SOCKS5
curl --socks5-hostname IP:port \
  --proxy-user login:password \
  https://example.com
import requests

proxy = "http://login:password@IP:port"  # your proxy from the Dashboard

r = requests.get(
    "https://example.com",
    proxies={"http": proxy, "https": proxy},
)
print(r.status_code)
import { ProxyAgent } from "undici";

const dispatcher = new ProxyAgent("http://login:password@IP:port");
const res = await fetch("https://example.com", { dispatcher });
console.log(res.status);
$ch = curl_init("https://example.com");
curl_setopt($ch, CURLOPT_PROXY, "IP:port");
curl_setopt($ch, CURLOPT_PROXYUSERPWD, "login:password");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$response = curl_exec($ch);
Fill in the credentials from your Dashboard. If you use IP whitelisting, you don't need a username or password.

Export in any format

Choose a standard format or create a custom one with any field order and delimiter your software requires.

IP:port login:password@IP:port {scheme}{ip}{port}{login}{password} — builder
HTTP HTTPS SOCKS4 SOCKS5 HTTP/2 ✓

See the FAQ for the ports used by each protocol.

PapaProxy API

You can automate purchases, renewals, whitelist changes, and proxy list exports. Create an API key in your Dashboard in a couple of clicks.

MCP server for AI agents

Claude, Cursor, and other agents buy proxies, renew plans, and export updated proxy lists through an access token you create in your Dashboard. See how it works.

Works with
…and 500+ more tools

Per-IP prices shown are for the largest package size. Get an exact quote in the calculator above.

Free SOCKS5 proxy list

Updated 2 days ago · New proxies added hourly · 24,120 proxies currently listed

These are not PapaProxy.net trial proxies. They are public proxies collected from open sources and are intended only for testing your software. You can also try PapaProxy.net proxies free with a 20-IP, 60-minute trial. No credit card is required.
IPCountryPortProtocol
98.175.31.222 US 4145 SOCKS5
199.187.210.54 US 4145 SOCKS5
192.252.210.233 US 4145 SOCKS5
68.1.210.189 US 4145 SOCKS5
124.248.177.43 KH 1080 SOCKS5
184.181.178.33 US 4145 SOCKS5
5.255.123.162 NL 1080 SOCKS5
66.42.224.229 41679 SOCKS5
184.182.240.12 US 4145 SOCKS5
184.178.172.5 US 15303 SOCKS5
IP:port format—one proxy per line

Reviews

A few service metrics—and feedback from our customers.

27,000+
proxy packages sold since 2019
60%
of customers upgrade their plan after the first month
100,000+ IPs
in our own pool across 22 locations

The proxies here are always of high quality, and the prices are quite low. It's not the first year I've been working with them. Thank you to the service team!

KI Komarov Igor November 2025

The price-quality ratio is at the highest level. At first I had my doubts about the service, but it turned out to be much better than I could imagine. I have not noticed any problems and proxies are excellent.

TL Thomas Laws June 2025

The site has an intuitive interface that is easy and pleasant to work with. All the proxies are fast and stable enough. As for the prices, they are quite reasonable for me.

TH Thomas Himmel May 2026

I have decided to share my impressions about my work with the service after I have finished subscribing. I would like to point out decent proxy speed and low prices for them. Additionally, I found it very convenient to buy Canada and Canadian proxies, including premium and dedicated options, which provided me with reliable and fast connections suitable for my needs.

PC Patrick Chipper July 2025

Frequently asked questions

Can't find your answer? Message us in live chat — real humans reply.

SOCKS5 or HTTPS proxy — which should I use for TCP traffic?

If your application has a dedicated SOCKS5 field — games, antidetect browsers, many scrapers — use SOCKS5. If it only accepts an HTTP proxy, HTTPS with CONNECT tunneling is the right choice: the proxy opens a TCP pipe to the destination and your TLS session stays end-to-end encrypted. HTTP without TLS to the proxy works too, but only for plain HTTP targets.

Can I route non-HTTP TCP protocols through these proxies?

Yes — that is what SOCKS5 is for. Mail clients, databases, proprietary APIs, and other TCP services connect through SOCKS5 without the proxy understanding the payload. HTTPS CONNECT covers the same use case for software that only speaks the HTTP proxy protocol.

What's the difference between TCP and UDP proxying?

Proxying TCP is one job: relay a single established connection, byte for byte, until either side closes it. Proxying UDP is structurally different — there's no connection to relay, just independent datagrams, so SOCKS5 uses a separate mechanism called UDP ASSOCIATE: the client keeps a TCP control channel open to the proxy while datagrams are forwarded alongside it, each wrapped with its destination address. That extra machinery is why UDP support has to be built and enabled explicitly, and why HTTP proxies can't offer it at all — CONNECT only ever opens TCP tunnels. Product-wise it maps directly: TCP is included with every protocol on all plans, while UDP is a plan add-on at 50% of the base plan price for eligible plans. Details and setup notes are on the UDP proxies page.

Is SOCKS4 enough for TCP-only workloads?

SOCKS4 handles TCP, but without username/password authentication or remote DNS. It remains for legacy tools that require it; new setups should default to SOCKS5.

Why does remote DNS matter for TCP proxying?

When the client resolves hostnames locally, DNS queries leave through your real connection while TCP traffic uses the proxy — a mismatch some anti-fraud systems flag. With SOCKS5 remote resolution (--socks5-hostname in curl, or the equivalent in your client), the proxy performs the lookup on your side of the tunnel.

Other PapaProxy.net products

A different proxy type may be a better fit for your use case. All products use the same Dashboard and support team.

Put our proxies to the test

Test our datacenter proxy packages free with 20 IPs for 60 minutes—no credit card required. See the speed and reliability for yourself.

Get a free trial

Buying as a company?

We can sign a contract and provide all the documents your accounting team needs. Most business orders are activated within 24 hours of your request.

Contract, invoices, and receipts Bank transfers and net payment terms Dedicated account manager Business orders from $100
Business terms or contact us on Telegram: @papaproxy