To test a private website with Percy, configure the network path that is actually blocked: Percy’s CLI or SDK proxy, the asset-discovery browser proxy, or a BrowserStack Local tunnel for a remote browser that must reach your private network. These settings solve different problems; enabling one does not automatically configure the others.
First identify which connection is failing
A VPN or firewall setup can involve three separate network paths. Identify the failing component before changing configuration:
As an Amazon Associate I earn from qualifying purchases.
- Percy CLI or SDK to Percy: Set the proxy environment variables in the process that runs Percy.
- Percy asset-discovery browser to the site or its assets: Configure the proxy on the browser Percy launches for discovery.
- Remote BrowserStack browser to a private site: Start BrowserStack Local so the remote browser can route requests through your network.
Percy proxy configuration does not make a private site reachable from a remote browser, and BrowserStack Local does not configure the Percy CLI’s connection to Percy. BrowserStack’s proxy-request guide and Local Testing overview describe these distinct use cases.
Configure Percy’s CLI or SDK proxy
Percy uses the conventional HTTP_PROXY, HTTPS_PROXY, and NO_PROXY environment variables. Percy says HTTP_PROXY alone is sufficient in most cases; set HTTPS_PROXY as well if HTTPS traffic uses a different proxy. Proxy URLs can include optional credentials.
#1 Best Overall
- 【Five Gigabit Ports】1 Gigabit WAN Port plus 2 Gigabit WAN/LAN Ports plus 2 Gigabit LAN Port. Up to 3 WAN ports optimize bandwidth usage through one device.
- 【One USB WAN Port】Mobile broadband via 4G/3G modem is supported for WAN backup by connecting to the USB port. For complete list of compatible 4G/3G modems, please visit TP-Link website.
- 【Abundant Security Features】Advanced firewall policies, DoS defense, IP/MAC/URL filtering, speed test and more security functions protect your network and data.
- 【Highly Secure VPN】Supports up to 20× LAN-to-LAN IPsec, 16× OpenVPN, 16× L2TP, and 16× PPTP VPN connections.
- Security - SPI Firewall, VPN Pass through, FTP/H.323/PPTP/SIP/IPsec ALG, DoS Defence, Ping of Death and Local Management. Standards and Protocols IEEE 802.3, 802.3u, 802.3ab, IEEE 802.3x, IEEE 802.1q
export HTTP_PROXY="http://proxy.example.com:8080"
export HTTPS_PROXY="http://proxy.example.com:8080"
# Add NO_PROXY only for hosts that should bypass the proxy.
export NO_PROXY="localhost,127.0.0.1"Use your organization’s approved proxy host, port, authentication method, and bypass list. Percy documents credential-bearing URLs in this form: http[s]://<username>:<password>@<domain>:<port>/. Do not commit credentials or project tokens to source control.
When proxy selection uses a PAC file
Set PERCY_PAC_FILE_URL to the PAC file URL when your environment uses proxy auto-configuration. Percy documents both local-file and HTTP-hosted PAC examples. This variable takes precedence over Percy’s other proxy variables; consult the exact formats in Percy’s environment-variable reference.
Keep the project token out of logs and source control
Percy’s project token allows builds and snapshots to be created and resources uploaded. Percy recommends write access for CI integrations and warns that anyone with the token can consume account quota. Store it in your CI secret manager or another protected environment variable, rather than in a committed configuration file.
Rank #2
- 【AC1200 Dual-band Wireless Router】Simultaneous dual-band with wireless speed up to 300 Mbps (2.4GHz) + 867 Mbps (5GHz). 2.4GHz band can handles some simple tasks like emails or web browsing while bandwidth intensive tasks such as gaming or 4K video streaming can be handled by the 5GHz band.*Speed tests are conducted on a local network. Real-world speeds may differ depending on your network configuration.*
- 【Easy Setup】Please refer to the User Manual and the Unboxing & Setup video guide on Amazon for detailed setup instructions and methods for connecting to the Internet.
- 【Pocket-friendly】Lightweight design(145g) which designed for your next trip or adventure. Alongside its portable, compact design makes it easy to take with you on the go.
- 【Full Gigabit Ports】Gigabit Wireless Internet Router with 2 Gigabit LAN ports and 1 Gigabit WAN ports, ideal for lots of internet plan and allow you to connect your wired devices directly.
- 【Keep your Internet Safe】IPv6 supported. OpenVPN & WireGuard pre-installed, compatible with 30+ VPN service providers. Cloudflare encryption supported to protect the privacy.
Route Percy asset discovery through the proxy
The CLI can connect to Percy while the browser used for asset discovery cannot reach the application or its resources. In that case, configure the discovery browser’s launch options separately, using the proxy server argument:
--proxy-server=http://proxy.example.com:8080Use the actual proxy address and the discovery configuration supported by your Percy integration. Setting only HTTP_PROXY and HTTPS_PROXY does not replace this browser launch argument when the discovery browser itself needs proxy routing. The Percy proxy guide covers both layers.
Debug discovery without uploading snapshots
Set PERCY_DEBUG=true to debug asset discovery without uploading snapshots. Percy’s environment-variable reference also lists page-load and network-idle timeout controls; their documented defaults are 30,000 ms each. Increase a timeout only when evidence points to a slow page or network-idle condition, rather than using it to mask a proxy or routing failure.
Rank #3
- New-Gen WiFi Standard – WiFi 6(802.11ax) standard supporting MU-MIMO and OFDMA technology for better efficiency and throughput.Antenna : External antenna x 4. Processor : Dual-core (4 VPE). Power Supply : AC Input : 110V~240V(50~60Hz), DC Output : 12 V with max. 1.5A current.
- Ultra-fast WiFi Speed – RT-AX1800S supports 1024-QAM for dramatically faster wireless connections
- Increase Capacity and Efficiency – Supporting not only MU-MIMO but also OFDMA technique to efficiently allocate channels, communicate with multiple devices simultaneously
- 5 Gigabit ports – One Gigabit WAN port and four Gigabit LAN ports, 10X faster than 100–Base T Ethernet.
- Commercial-grade Security Anywhere – Protect your home network with AiProtection Classic, powered by Trend Micro. And when away from home, ASUS Instant Guard gives you a one-click secure VPN.
Protect local baselines
For a local run, Percy recommends setting PERCY_BRANCH=local so it does not unintentionally update the project’s master baseline. For CI, follow the CI workflow for your integration.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesUse BrowserStack Local when a remote browser needs a private site
If the test browser runs remotely on BrowserStack and the site is available only inside a VPN, firewall, or private network, use BrowserStack Local. BrowserStack describes support for localhost, staging, and private-network sites. Its Local agent makes an outbound connection to a BrowserStack repeater; remote browser requests are routed through that repeater, and the agent resolves private-site requests from within your network. This avoids exposing the internal server to the public internet. See how Local Testing works.
- Start and authenticate the Local agent in the network that can reach the private site, using the setup for your BrowserStack product and test framework.
- Enable Local for the remote test session. For Cypress Automate, BrowserStack’s guide shows
connection_settings.localset totrueinbrowserstack.json. - Apply proxy options only when needed. Proxy support and configuration vary by integration. Do not assume a Cypress-specific flag applies to another BrowserStack product.
- Stop the agent when finished. BrowserStack says the agent can be stopped with Ctrl+C; teardown clears the agent and repeater state.
BrowserStack documents Local Testing across automated, manual, and low-code testing, but setup depends on the product and integration. Use the Local Testing overview for the relevant path.
Rank #4
- 【DUAL BAND WIFI 7 TRAVEL ROUTER】Products with US, UK, EU, AU Plug; Dual band network with wireless speed 688Mbps (2.4G)+2882Mbps (5G); Dual 2.5G Ethernet Ports (1x WAN and 1x LAN Port); USB 3.0 port.
- 【NETWORK CONTROL WITH TOUCHSCREEN SIMPLICITY】Slate 7’s touchscreen interface lets you scan QR codes for quick Wi-Fi, monitor speed in real time, toggle VPN on/off, and switch providers directly on the display. Color-coded indicators provide instant network status updates for Ethernet, Tethering, Repeater, and Cellular modes, offering a seamless, user-friendly experience.
- 【OpenWrt 23.05 FIRMWARE】The Slate 7 (GL-BE3600) is a high-performance Wi-Fi 7 travel router, built with OpenWrt 23.05 (Kernel 5.4.213) for maximum customization and advanced networking capabilities. With 512MB storage, total customization with open-source freedom and flexible installation of OpenWrt plugins.
- 【VPN CLIENT & SERVER】OpenVPN and WireGuard are pre-installed, compatible with 30+ VPN service providers (active subscription required). Simply log in to your existing VPN account with our portable wifi device, and Slate 7 automatically encrypts all network traffic within the connected network. Max. VPN speed of 100 Mbps (OpenVPN); 540 Mbps (WireGuard). *Speed tests are conducted on a local network. Real-world speeds may differ depending on your network configuration.*
- 【PERFECT PORTABLE WIFI ROUTER FOR TRAVEL】The Slate 7 is an ideal portable internet device perfect for international travel. With its mini size and travel-friendly features, the pocket Wi-Fi router is the perfect companion for travelers in need of a secure internet connectivity on the go in which includes hotels or cruise ships.
Cypress Automate proxy options
For the Cypress Automate integration specifically, BrowserStack documents the following proxy support:
| Proxy setup | Documented options | Authentication documented |
|---|---|---|
| Standard proxy | --proxy-host and --proxy-port |
Unauthenticated or HTTP Basic, using --proxy-user and --proxy-pass |
| MITM proxy | --local-proxy-host and --local-proxy-port |
Unauthenticated or HTTP Basic |
| PAC file | --pac-file |
Unauthenticated |
The guide says to bypass bs-local.com in the proxy if required. It also documents --force-proxy and --force-local to route remote browser or device requests through the configured proxy and Local connection. Confirm these options against your precise product and network policy before applying them. See BrowserStack’s Cypress proxy and firewall guide.
Free tools Windows power users keep installed
One-click scans. No signup required.
Troubleshoot in network-path order
- Percy cannot connect to its service: Check that the Percy CLI or SDK process inherits the correct proxy environment variables and can reach Percy’s API. Verify proxy authentication and bypass rules.
- Percy connects, but discovered pages or assets fail: Configure the discovery browser’s
--proxy-serverlaunch argument. UsePERCY_DEBUG=trueto investigate discovery without uploading snapshots. - A remote browser cannot load an internal URL: Start BrowserStack Local in the network that can reach the site, then enable Local for the relevant test session.
- Local connects, but requests still take the wrong route: Check proxy compatibility, authentication, and whether
bs-local.comneeds a bypass. Use force-routing flags only if policy requires requests to go through the local network or configured proxy; BrowserStack says the Local binary otherwise attempts direct connections where possible for performance. - Failures are intermittent or slow: Check the network path and the discovery timeout settings before raising timeouts. Percy’s documented defaults for page-load and network-idle discovery timeouts are 30,000 ms.
- Local testing stops working after a run: Confirm the Local agent is still running and correctly authenticated. Stop it with Ctrl+C when the session is complete.
Or skip the browser setup
If you need a screenshot of a publicly reachable page rather than a Percy visual-regression test of a private site, ScreenshotNeo provides a one-request website screenshot API. It does not replace a VPN tunnel for pages inaccessible outside your network.
Best Value
- Next-Gen Gigabit Wi-Fi 6 Speeds: 2402 Mbps on 5 GHz and 574 Mbps on 2.4 GHz bands ensure smoother streaming and faster downloads; support VPN server and VPN client¹
- A More Responsive Experience: Enjoy smooth gaming, video streaming, and live feeds simultaneously. OFDMA makes your Wi-Fi stronger by allowing multiple clients to share one band at the same time, cutting latency and jitter.²
- Expanded Wi-Fi Coverage: 4 high-gain external antennas and Beamforming technology combine to extend strong, reliable, Wi-Fi throughout your home.
- Improved Battery Life: Target Wake Time helps your devices to communicate efficiently while consuming less power.
- Improved Cooling Design: No heat ups, no throttles. A larger heat sink and redefined case design cools the WiFi 6 system and enables your network to stay at top speeds in more versatile environments.
For a publicly reachable page, the cURL request is:
curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webpSee the ScreenshotNeo documentation for the API and other options. Cookie banners, popups, and chat widgets are removed before the shot; bot checks, blank pages, and failed loads are never billed; and its MCP server lets AI agents take screenshots. The free plan includes 1,000 screenshots per month with no card, and paid plans start at $5 for 3,000.
Sign up free for 1,000 screenshots a month, with no card required.
Frequently Asked Questions
Does BrowserStack Local configure Percy’s API proxy?
No. Set Percy’s proxy environment variables for the Percy CLI or SDK; use BrowserStack Local for remote-browser access to a private site.
Can BrowserStack Local expose an internal website to the public internet?
BrowserStack describes Local as an outbound encrypted tunnel that lets remote browsers reach private sites without exposing the internal server publicly.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
