# Mender-gateway behind proxy in isolated network

**URL:** <https://hub.mender.io/t/mender-gateway-behind-proxy-in-isolated-network/8192>\
**Category:** General Discussions\
**Tags:** mender-gateway\
**Created:** [February 10, 2026, 5:07pm UTC](https://hub.mender.io/t/mender-gateway-behind-proxy-in-isolated-network/8192 "2026-02-10T17:07:46Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![nilso](https://avatars.discourse-cdn.com/v4/letter/n/e56c9b/32.png) [@nilso](https://hub.mender.io/u/nilso)\
**Post date:** [February 10, 2026, 5:07pm UTC](https://hub.mender.io/t/mender-gateway-behind-proxy-in-isolated-network/8192/1 "2026-02-10T17:07:46Z")

</div>

Hi,

in our setup we are using mender on customer sites within a private network: device A (mender-client) → device B (mender-client and mender-gateway) → vpn → http-proxy → [eu.hosted.mender.io](http://eu.hosted.mender.io). Device B is showing up at mender. Device A not.

When no proxy is configured on the gateway (in a test environment) everything works as expected. When adding the proxy by dropin for systemd only device B connects. On device B I get the following error in the log of mender-gateway:

```auto
Feb 10 15:44:54 cl-imx8-supervision-stationary-0001c03cae8e mender-gateway\[8385\]: time=“2026-02-10T15:44:54Z” level=info msg=“Starting HTTPS server…” caller=“server.(\*Server).Run@server.go:96”
Feb 10 15:46:20 cl-imx8-supervision-stationary-0001c03cae8e mender-gateway\[8385\]: 2026/02/10 15:46:20 http: proxy error: dial tcp: lookup eu.hosted.mender.io: Temporary failure in name resolution
Feb 10 15:46:20 cl-imx8-supervision-stationary-0001c03cae8e mender-gateway\[8385\]: time=“2026-02-10T15:46:20Z” level=error byteswritten=0 caller=“http.NewRouter.AccesslogMiddleware.func2.1@middleware.go:151” method=POST path=/api/devices/v1/authentication/auth_requests request_id=eaa0b34a-828b-44f5-bc04-7ee080ac188b responsetime=28026060us status=502 ts=“2026-02-10T15:45:52Z” type=HTTP/1.1 useragent=

```

This is the gateway config:

```auto
{“HTTPS”: {“Enabled”: true,“Listen”: “:443”,“ServerCertificate”: “/etc/mender/server.crt”,“ServerKey”: “/etc/mender/server.key”,“MinimumTLSVersion”: “1.2”},

        "Features": {
            "ArtifactsProxy": {
                "Enabled": true,
                "GatewayURL": "https://172.31.84.111",
                "DomainWhitelist": [
                    "eu.hosted.mender.io",
                    "c271964d41749feb10da762816c952ee.r2.cloudflarestorage.com",
                    "hosted.mender.io",
                    "s3.amazonaws.com"]
            },
            "DeviceSystem": {
                "Enabled": false,
                "SystemID": "REPLACE_WITH_YOUR_UNIQUE_SYSTEM_ID"
            }
        },
        "UpstreamServer": {
            "URL": "https://eu.hosted.mender.io",
            "CACertificate": "/etc/ssl/certs/ca-certificates.crt",
            "InsecureSkipVerify": false
        }

}

```

We do not have a DNS server in that setup. The dropin configuration was added to `mender-authd`, `mender-updated`, `mender-configure` and `mender-gateway` an looks like this:

`/etc/systemd/system/mender-authd.service.d/proxy.conf`:

```auto
[Service]
Environment=“HTTP_PROXY=http://x.x.0.1:8080”
Environment=“HTTPS_PROXY=http://x.x.0.1:8080”
Environment=“NO_PROXY=localhost 127.0.0.1”

```

Any hints?

Thanks!

Nils

EDIT by @TheYoctoJester: formatting

---

<div class="post-metadata">

**Author:** ![TheYoctoJester](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/theyoctojester/32/1444_2.png) [@TheYoctoJester](https://hub.mender.io/u/TheYoctoJester)\
**Post date:** [February 11, 2026, 12:09pm UTC](https://hub.mender.io/t/mender-gateway-behind-proxy-in-isolated-network/8192/2 "2026-02-11T12:09:55Z")

</div>

Hi @nilso,

I’ve got confirmation that this behaviour is accurate and considered a bug. Filed it already and will keep you posted.

Greetz,  
Josef

---

<div class="post-metadata">

**Author:** ![nilso](https://avatars.discourse-cdn.com/v4/letter/n/e56c9b/32.png) [@nilso](https://hub.mender.io/u/nilso)\
**Post date:** [February 11, 2026, 1:12pm UTC](https://hub.mender.io/t/mender-gateway-behind-proxy-in-isolated-network/8192/3 "2026-02-11T13:12:31Z")

</div>

Ok, thanks for the quick reply…

Nils

---

<div class="post-metadata">

**Author:** ![TheYoctoJester](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/theyoctojester/32/1444_2.png) [@TheYoctoJester](https://hub.mender.io/u/TheYoctoJester)\
**Post date:** [February 11, 2026, 1:35pm UTC](https://hub.mender.io/t/mender-gateway-behind-proxy-in-isolated-network/8192/4 "2026-02-11T13:35:35Z")

</div>

@nilso following up, the issue is now publicly tracked at [Jira](https://northerntech.atlassian.net/browse/MEN-9367)