anomalyco/opencode
1
0
Fork 0
mirror of https://github.com/anomalyco/opencode.git synced 2026-07-22 18:25:32 -04:00
Code Issues 5.9k Packages Projects Releases 19 Wiki Activity

Wildcard subdomains in NO_PROXY are not respected #7650

New Issue
Open
opened 2026-02-16 18:07:50 -05:00 by yindo · 4 comments
yindo commented 2026-02-16 18:07:50 -05:00
Owner
Copy Link
Copy Source

Originally created by @ashenstrata on GitHub (Jan 26, 2026).

Originally assigned to: @thdxr on GitHub.

Description

I'm using a proxy with opencode TUI. I want to exclude all subdomains of a certain domain from going through it. I'm doing this by adding *.example.com to $NO_PROXY. However, opencode is still routing calls to a provider on foo.bar.example.com through the proxy. Only if I specify the full domain foo.bar.example.com does it function correctly.

Here's a representation of my setup:

export GATEWAY_PROXY="http://gateway.local:2080"
export NO_PROXY="localhost,127.0.0.1,192.168.*,*.local,*.example.com"

HTTP_PROXY=$GATEWAY_PROXY HTTPS_PROXY=$GATEWAY_PROXY opencode

{
  "$schema": "https://opencode.ai/config.json",
  "autoupdate": "notify",
  "share": "disabled",
  "provider": {
    "ozon": {
      "npm": "@ai-sdk/openai-compatible",
      "name": "foo",
      "options": {
        "baseURL": "https://foo.bar.example.com/api",
        "apiKey": "foo"
      },
      "models": {}
    }
  }
}

Plugins

none

OpenCode version

1.1.36

Steps to reproduce

No response

Screenshot and/or share link

No response

Operating System

macOS 26.2

Terminal

Ghostty

Originally created by @ashenstrata on GitHub (Jan 26, 2026). Originally assigned to: @thdxr on GitHub. ### Description I'm using a proxy with opencode TUI. I want to exclude all subdomains of a certain domain from going through it. I'm doing this by adding `*.example.com` to `$NO_PROXY`. However, opencode is still routing calls to a provider on `foo.bar.example.com` through the proxy. Only if I specify the full domain `foo.bar.example.com` does it function correctly. Here's a representation of my setup: ```sh export GATEWAY_PROXY="http://gateway.local:2080" export NO_PROXY="localhost,127.0.0.1,192.168.*,*.local,*.example.com" HTTP_PROXY=$GATEWAY_PROXY HTTPS_PROXY=$GATEWAY_PROXY opencode ``` ```json { "$schema": "https://opencode.ai/config.json", "autoupdate": "notify", "share": "disabled", "provider": { "ozon": { "npm": "@ai-sdk/openai-compatible", "name": "foo", "options": { "baseURL": "https://foo.bar.example.com/api", "apiKey": "foo" }, "models": {} } } } ``` ### Plugins none ### OpenCode version 1.1.36 ### Steps to reproduce _No response_ ### Screenshot and/or share link _No response_ ### Operating System macOS 26.2 ### Terminal Ghostty
yindo added the bug label 2026-02-16 18:07:50 -05:00
yindo commented 2026-02-16 18:07:50 -05:00
Author
Owner
Copy Link
Copy Source

@github-actions[bot] commented on GitHub (Jan 26, 2026):

This issue might be a duplicate of existing issues. Please check:

  • #8822: Opencode not respecting NO_PROXY variable with wildcard subdomains (*.org.com)

Both issues describe the same problem where wildcard NO_PROXY entries (e.g., *.example.com) are not being respected, requiring full domain specification as a workaround.

Feel free to ignore if this doesn't address your specific case.

@github-actions[bot] commented on GitHub (Jan 26, 2026): This issue might be a duplicate of existing issues. Please check: - #8822: Opencode not respecting NO_PROXY variable with wildcard subdomains (*.org.com) Both issues describe the same problem where wildcard NO_PROXY entries (e.g., `*.example.com`) are not being respected, requiring full domain specification as a workaround. Feel free to ignore if this doesn't address your specific case.
yindo commented 2026-02-16 18:07:50 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Jan 26, 2026):

Think this is probably a bun bug, ur using the tui right?

@rekram1-node commented on GitHub (Jan 26, 2026): Think this is probably a bun bug, ur using the tui right?
yindo commented 2026-02-16 18:07:50 -05:00
Author
Owner
Copy Link
Copy Source

@ashenstrata commented on GitHub (Jan 26, 2026):

Yes, the TUI

@ashenstrata commented on GitHub (Jan 26, 2026): Yes, the TUI
yindo commented 2026-02-16 18:07:50 -05:00
Author
Owner
Copy Link
Copy Source

@Thesam1798 commented on GitHub (Jan 27, 2026):

Fix available in PR #10856

This issue is specifically addressed by PR #10856.

Your use case:

NO_PROXY="localhost,127.0.0.1,192.168.*,*.local,*.example.com"

Provider on foo.bar.example.com should bypass the proxy.

Our implementation:
The shouldBypassProxy() function in packages/opencode/src/util/fetch.ts handles wildcards correctly:

// Wildcard: *.example.com
if (p.startsWith("*.") && hostname.endsWith(p.slice(1))) return true

This means *.example.com matches:

  • ✅ foo.example.com
  • ✅ foo.bar.example.com
  • ✅ a.b.c.d.example.com

I've added a specific regression test for this case:

test("matches deep subdomain wildcards (#10710)", () => {
  expect(shouldBypassProxy("foo.bar.example.com", ["*.example.com"])).toBe(true)
  expect(shouldBypassProxy("a.b.c.d.example.com", ["*.example.com"])).toBe(true)
})

The fix works independently of Bun's native proxy handling - we implement our own pattern matching.

@Thesam1798 commented on GitHub (Jan 27, 2026): ## Fix available in PR #10856 This issue is specifically addressed by PR #10856. **Your use case:** ``` NO_PROXY="localhost,127.0.0.1,192.168.*,*.local,*.example.com" ``` Provider on `foo.bar.example.com` should bypass the proxy. **Our implementation:** The `shouldBypassProxy()` function in `packages/opencode/src/util/fetch.ts` handles wildcards correctly: ```typescript // Wildcard: *.example.com if (p.startsWith("*.") && hostname.endsWith(p.slice(1))) return true ``` This means `*.example.com` matches: - ✅ `foo.example.com` - ✅ `foo.bar.example.com` - ✅ `a.b.c.d.example.com` I've added a specific regression test for this case: ```typescript test("matches deep subdomain wildcards (#10710)", () => { expect(shouldBypassProxy("foo.bar.example.com", ["*.example.com"])).toBe(true) expect(shouldBypassProxy("a.b.c.d.example.com", ["*.example.com"])).toBe(true) }) ``` The fix works independently of Bun's native proxy handling - we implement our own pattern matching.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
acp
bad
bug
discussion
docs
documentation
enhancement
extension
good first issue
growth
help-wanted
mcp
model-problem
needs:compliance
nix
opentui
perf
pull-request
Mirrored from GitHub Pull Request
 tui
web
windows
zen
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#7650
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?