Use case

Proxies for SillyTavern: The Reverse Proxy Field, the requestProxy Setting, and When an IP Actually Matters

SillyTavern's 'proxy' means three things: the Reverse Proxy field (an LLM endpoint), exposing the app, and requestProxy in config.yaml (a network proxy). When each applies and when an IP matters.

HProxy Team··9 min read
HProxy.Use case

Free proxies won't hold up here.

Shared datacenter IPs get flagged and dropped fast. When it has to hold, gaming, streaming, accounts, you need mobile and residential IPs that read as a real device, from $0.44/GB, pay as you go.

See plans & pricing

SillyTavern is the power user's front end for AI roleplay: a free, open-source interface under the AGPL that you install on your own machine, load characters and lorebooks into, and point at whatever language model you like. Its documentation says it plainly: SillyTavern is only an interface, so you need access to an LLM backend to provide inference. That backend can be a model running on your own GPU through KoboldCpp, llama.cpp or Ollama, or a cloud API such as OpenAI, Claude, Google AI Studio, Mistral or OpenRouter.

Because SillyTavern connects to so many things, the word "proxy" has come to mean three different things inside it, and a person searching for a SillyTavern proxy could want any of them. One is a field in the settings that takes a language-model address. One is a way of exposing SillyTavern itself to other devices. Only the third is a proxy in the sense we sell, an address your traffic passes through, and it is the one most guides never mention because it lives in a config file rather than the interface. This page sorts the three, then explains when the network kind matters and when it changes nothing.

The three proxies of SillyTavern

What people call itWhere it livesWhat it changes
The Reverse Proxy fieldChat Completion settings: Proxy Server URL, Proxy PasswordWhich server answers as the language model
An HTTP reverse proxyThe documentation's reverse-proxying guide (nginx, Caddy)How other devices reach your SillyTavern
requestProxyconfig.yaml: enabled, url, bypassThe IP address your API calls come from

The documentation itself draws the first line. Its reverse-proxying guide opens by stating that the section does not refer to OpenAI or Claude reverse proxies and refers exclusively to HTTP and HTTPS reverse proxies, which is the second row. The first row is what the roleplay community means, and the third is ours.

Meaning one: the Reverse Proxy field is a language-model address

Switch the API type to Chat Completion and the settings show a Reverse Proxy block: proxy presets with saved addresses and passwords, a Proxy Name, a Proxy Server URL described as an alternative server URL, and a Proxy Password used in place of an API key. Next to it sits the Custom (OpenAI-compatible) source with a Custom Endpoint (Base URL) and an optional Custom API Key, with the interface's own hint that if the endpoint does not work you should try adding /v1 at the end, because the /chat/completions suffix is added automatically.

Everything in that block is about which server writes the replies. Point it at OpenRouter and OpenRouter's models answer. Point it at Chub's inference API, which Chub's documentation says can be used in the same way as an OpenAI reverse proxy, and Chub's Mars models answer. Point it at a community "free proxy" posted in a Discord and a stranger's server answers, on a key that is usually not theirs to use. This is exactly the setup that Janitor AI users mean by a proxy, and we cover the free versions of it in best free SillyTavern proxy and, for the neighbouring app, best free Janitor AI proxy.

Two warnings sit right in the product. SillyTavern's interface states that using a proxy you are not running yourself is a risk to your data privacy, and that any support requests will be refused if you are using one. Chub's documentation for the same feature goes further: reverse proxies are created by unauthorized third parties who gain access to your data and IP address, may enable logging, leak your information, and use stolen API keys which you have no control over. Nothing in that block changes your IP address, and a network proxy does nothing to it. Keep the two ideas apart and the rest of this page gets simple.

Meaning two: exposing SillyTavern itself

The second meaning is infrastructure. SillyTavern runs a local web server, and people who want to reach it from a phone or another machine put nginx or Caddy in front of it as an HTTP reverse proxy, with a domain and a certificate. The documentation's guide covers that, along with the whitelist and basic-authentication settings that keep strangers out. It has nothing to do with the model or with your outbound address, and it is not what we sell, so we leave it there.

Meaning three: requestProxy, the network proxy for your API calls

The third meaning is the one that matches the word everywhere else on the internet. SillyTavern's config.yaml has a requestProxy block: enabled, off by default, turns it on; url takes the proxy server address, with the documentation's example in the form socks5://username:password@example.com:1080; and bypass lists hosts that should skip the proxy. Once enabled, SillyTavern sends its outbound requests, the calls to OpenAI, Anthropic, Google, OpenRouter or any custom endpoint, through that address, so the provider sees the proxy's IP instead of yours. The documentation adds one caveat: request proxying conflicts with the private-address whitelist feature, so if connections fail after enabling it, that setting is the first thing to check.

# config.yaml, SillyTavern release branch
requestProxy:
  enabled: true
  url: "http://USER:PASS@gateway.hproxy.com:PORT"
  bypass:
    - localhost
    - 127.0.0.1

Restart SillyTavern after the change, reconnect the API, and confirm the exit with our proxy checker before you rely on it. Local backends such as KoboldCpp on the same machine stay in the bypass list, because there is no reason to send localhost traffic anywhere.

When the network proxy matters, and when it changes nothing

The cases where requestProxy is the right tool are narrow and real.

A provider that does not serve your country. The cloud APIs behind SillyTavern each publish where they are offered, and none of them serves everywhere. Anthropic lists the countries where Claude and its API are available and excludes places such as mainland China, Hong Kong, Macau, Russia and Iran, as we detail in proxies for Claude AI. OpenAI maintains a separate supported-countries page for its API. Google's Gemini free tier is not offered in every country, which is why it comes up so often in Janitor AI threads. DeepSeek's Open Platform terms bar use in comprehensively sanctioned countries. A request from an unsupported country is refused before any quota is counted, and a static residential address in a supported country is what changes the answer. It is also a decision to read against the provider's terms, which say where they choose to sell, so read them first.

A network that filters the API hosts. Universities, offices and some national networks block api.openai.com or api.anthropic.com outright. Routing through a proxy the filter does not recognise makes the calls go through, the same mechanism as any blocked site.

A consistent exit for an API account. API accounts carry a billing country and a usage history, and a key that has only ever called from Germany and starts calling from Vietnam draws exactly the security review you were avoiding. A fixed exit, held permanently, keeps the account looking like itself.

And the cases where it changes nothing, which is most of them.

Rate limits and quotas. A 429 from any provider follows the key in the request header. The same key through a different address is the same 429. We set out the whole argument in LLM API rate limits and proxies, and it applies to every backend SillyTavern can connect.

Content moderation. A provider's filters run on the request, not on where it came from.

A local model. If your backend is KoboldCpp or Ollama on your own hardware, there is no outbound call to route and no IP to change. requestProxy is irrelevant, and that is most of what makes local models attractive.

SillyTavern's requestProxy: what it moves, and what it never does

A static residential IP moves

  • A provider that does not serve your country

    the request is refused before any quota counts

  • A network that filters the API hosts

    office, campus, national filter

  • The country an API account appears from

    one fixed exit, held for good

It never touches

  • 429s and quotas

    follow the API key

  • Content filters

    run on the request, not the address

  • The Reverse Proxy field

    a model address, not an IP

  • Local backends

    nothing leaves the machine

Source: SillyTavern configuration documentation and provider documentation, read 24 August 2026

Which type, and why static

Because the point is a consistent country for an API account, the type is one static residential or ISP address held permanently, never a rotating pool. Rotation solves per-IP rate limits on websites that meter by address; API providers meter by key, so rotation buys nothing there and a moving address is itself a signal. An ISP address is registered under a consumer ISP, so it reads as a home connection, and it is hosted on always-on hardware, so it does not drop mid-session the way a real home line might. A static residential session on a real home line is the alternative when a particular country matters. Datacenter addresses are the profile most providers already associate with automated abuse, and free proxies fail for the reason SillyTavern's own warning gives about reverse proxies: a stranger's machine in the middle of your traffic is a risk to your data, and the API key travels in every request. Our explainer on rotating versus static residential proxies covers the split in full.

Where HProxy fits

requestProxy takes one URL, and the URL that fits is a dedicated ISP proxy: a static IP with an ISP's name on it, yours alone, $2.70/IP a month. If the country matters more than the uptime guarantee, a static residential session from $0.44/GB goes in the same field. Chat completions weigh almost nothing, so the pricing, metered as you go with no subscription, is effectively the price of the address. Paste it, restart, check the exit with the proxy checker, and leave it alone.

If what you were actually looking for is a free model to put in the Reverse Proxy field, you do not need us at all; best free SillyTavern proxy has the backends, the exact values to paste, and the errors you will meet. The network proxy is for the narrower problem of where your API calls come from, and for that, one static address settles it.

Sources

Frequently asked questions

Does SillyTavern need a proxy?
Most of the time, no. SillyTavern is a locally installed interface, and it talks to whichever language-model backend you connect: a local model on your own machine, or a cloud API such as OpenAI, Claude, Google AI Studio or OpenRouter. If those backends are reachable from your network and offered in your country, nothing about SillyTavern needs an IP address changed. A network proxy enters only when a provider does not serve your country, when your network filters the API hosts, or when you want a consistent exit country for an API account.
What is the Reverse Proxy field in SillyTavern?
It is an alternative address for the language model, not a network proxy. The Chat Completion settings carry a Reverse Proxy block with a Proxy Server URL and a Proxy Password, which point SillyTavern at a server that speaks the OpenAI or Claude API format on your behalf. Community reverse proxies relay your messages through somebody else's key. SillyTavern's own interface warns that using a proxy you do not run yourself is a risk to your data privacy, and that support requests will be refused if you use one.
How do I route SillyTavern through a network proxy?
In config.yaml, the requestProxy block does it: set enabled to true, put the proxy address in url, in the form socks5://username:password@host:port or the http equivalent, and list any hosts that should skip the proxy under bypass. SillyTavern then sends its outbound API requests through that address. The documentation notes that request proxying conflicts with the private-address whitelist feature, so check that setting if connections fail after you enable it.
Will a proxy fix 429 errors in SillyTavern?
No. A 429 from OpenAI, Anthropic, OpenRouter or any other provider is a limit attached to your API key or account, and the quota follows the key in the request header, not the address it came from. Routing the same key through a different IP produces the same 429. Wait, slow down, or raise the limit on the provider's side. The one IP-related failure is different: a provider that does not serve your country refuses before any quota is counted.
Which proxy type should I use for SillyTavern's API calls?
One static residential or ISP address, held permanently, in a country the provider serves. API accounts are tied to a billing country and to the address they are normally used from, so a fixed exit that never changes is what keeps them quiet. Rotating pools add nothing, because the quota is per key anyway, and a moving address is the kind of change that draws security checks.
Are free reverse proxies for SillyTavern safe?
Treat them as unsafe by default. A shared reverse proxy routes every message and reply through a stranger's server on a key that is often stolen, so the operator can read and keep your chats. Chub's documentation, which covers the same feature, says such proxies are created by unauthorized third parties who gain access to your data and IP address, and SillyTavern refuses support to anyone using one. Use your own key with the official endpoint, or a free tier such as OpenRouter's free models.

Proxies that don't die mid-job

Residential, ISP, datacenter and mobile, verified by the same engine that runs tens of millions of checks. They read as a real device and hold up under load. Pay as you go, and your balance never expires. $0.44/GB is the 2,000 GB+ rate; a single gigabyte is $0.50/GB, with no minimum order.

129M+ proxy checks run · 100+ countries · HTTP / HTTPS / SOCKS · re-checked every few minutes · no signup