Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To test a private website with Percy, configure the network component that cannot reach its destination. Set HTTP_PROXY and, when needed, HTTPS_PROXY for Percy CLI or SDK traffic; configure Percy’s discovery browser separately if it needs the proxy; and use BrowserStack Local when a remote BrowserStack browser must reach a site inside your VPN or firewall. These solve different connectivity problems.

Identify which connection is failing

There are three separate network paths to check. Percy proxy settings do not automatically make a private site accessible to a remote test browser, and BrowserStack Local does not automatically configure the Percy CLI’s connection to Percy.

What needs access Where the target is What to configure
Percy CLI or SDK connecting to Percy Percy’s service, through a corporate proxy HTTP_PROXY and, if required, HTTPS_PROXY. Percy environment-variable reference
Percy’s asset-discovery browser Your application or its assets, reachable through a proxy Add a browser launch argument such as --proxy-server=http://proxy-host:port to discovery configuration. Percy proxy configuration
Remote BrowserStack test browser or device A localhost, staging, or private-network site Start and configure BrowserStack Local for the BrowserStack product and test integration in use. Local Testing overview

Start by identifying the failing connection: runner-to-Percy, discovery-browser-to-site or proxy, or remote-browser-to-private-site. Then configure that layer rather than changing unrelated network settings.

Route Percy CLI and SDK traffic through a proxy

  1. Set proxy variables in the Percy process environment. Percy documents HTTP_PROXY as sufficient in most cases. Set HTTPS_PROXY too if HTTPS uses a different proxy. Proxy URLs can include optional credentials, in the form http[s]://<username>:<password>@<domain>:<port>/. See Percy’s environment-variable reference.
  2. If your organization uses a PAC file, configure PERCY_PAC_FILE_URL. Percy documents local-file and HTTP-hosted PAC URL examples and says this variable takes precedence over the other Percy proxy variables. Follow your organization’s approved PAC location and proxy policy.
  3. Run Percy from the environment that has those settings. In CI, configure the variables through the CI system’s secret and environment-variable controls. For local runs, Percy recommends setting PERCY_BRANCH=local to avoid unintentionally updating the project’s master baseline.

Treat the Percy project token as a secret. Percy describes it as a write-only token for creating builds and uploading snapshots and resources; access to it can consume account quota. Use environment variables or CI secret management instead of committing it to source control. Percy environment-variable reference

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sale
TP-Link ER605, Wired Gigabit VPN Router
  • 【Five Gigabit Ports】1 Gigabit WAN Port plus 2 Gigabit WAN/LAN Ports plus 2 Gigabit LAN Port. Up to 3 WAN ports optimize bandwidth usage through one device.
  • 【One USB WAN Port】Mobile broadband via 4G/3G modem is supported for WAN backup by connecting to the USB port. For complete list of compatible 4G/3G modems, please visit TP-Link website.
  • 【Abundant Security Features】Advanced firewall policies, DoS defense, IP/MAC/URL filtering, speed test and more security functions protect your network and data.
  • 【Highly Secure VPN】Supports up to 20× LAN-to-LAN IPsec, 16× OpenVPN, 16× L2TP, and 16× PPTP VPN connections.
  • Security - SPI Firewall, VPN Pass through, FTP/H.323/PPTP/SIP/IPsec ALG, DoS Defence, Ping of Death and Local Management. Standards and Protocols IEEE 802.3, 802.3u, 802.3ab, IEEE 802.3x, IEEE 802.1q

Configure Percy asset discovery separately

Percy’s asset discovery runs through a browser. If Percy can connect to its service but the discovery browser cannot load your application or its assets, setting the CLI’s proxy variables alone may not fix the problem. Add the proxy to the discovery browser’s launch options, for example:

--proxy-server=http://proxy.example.com:port

Replace the example address with the proxy host and port approved for your network. Percy documents this browser argument separately from its SDK and CLI proxy variables. Configuring Proxy Requests

Rank #2
GL.iNet GL-SFT1200 Opal Travel Router, AC1200 Dual-Band Wi-Fi
  • 【AC1200 Dual-band Wireless Router】Simultaneous dual-band with wireless speed up to 300 Mbps (2.4GHz) + 867 Mbps (5GHz). 2.4GHz band can handles some simple tasks like emails or web browsing while bandwidth intensive tasks such as gaming or 4K video streaming can be handled by the 5GHz band.*Speed tests are conducted on a local network. Real-world speeds may differ depending on your network configuration.*
  • 【Easy Setup】Please refer to the User Manual and the Unboxing & Setup video guide on Amazon for detailed setup instructions and methods for connecting to the Internet.
  • 【Pocket-friendly】Lightweight design(145g) which designed for your next trip or adventure. Alongside its portable, compact design makes it easy to take with you on the go.
  • 【Full Gigabit Ports】Gigabit Wireless Internet Router with 2 Gigabit LAN ports and 1 Gigabit WAN ports, ideal for lots of internet plan and allow you to connect your wired devices directly.
  • 【Keep your Internet Safe】IPv6 supported. OpenVPN & WireGuard pre-installed, compatible with 30+ VPN service providers. Cloudflare encryption supported to protect the privacy.

For diagnosis, Percy documents PERCY_DEBUG=true to debug asset discovery without uploading snapshots. Its environment-variable reference lists page-load and network-idle discovery timeouts, both with a documented default of 30,000 ms. If discovery is failing or waiting too long, check the relevant timeout and debug output. Percy environment-variable reference

Reach a private site from a remote BrowserStack browser

Use BrowserStack Local when the browser that must load the application is remote and the site is available only from your private network. BrowserStack describes Local Testing support for localhost, staging, and private-network sites, including sites behind proxies, firewalls, or VPNs. Setup and integration depend on the BrowserStack product and test framework. Local Testing overview

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
ASUS RT-AX1800S Dual Band WiFi 6 Extendable Router, Subscription-Free Network Security, Parental Control, Built-in VPN, AiMesh Compatible, Gaming & Streaming, Smart Home
  • New-Gen WiFi Standard – WiFi 6(802.11ax) standard supporting MU-MIMO and OFDMA technology for better efficiency and throughput.Antenna : External antenna x 4. Processor : Dual-core (4 VPE). Power Supply : AC Input : 110V~240V(50~60Hz), DC Output : 12 V with max. 1.5A current.
  • Ultra-fast WiFi Speed – RT-AX1800S supports 1024-QAM for dramatically faster wireless connections
  • Increase Capacity and Efficiency – Supporting not only MU-MIMO but also OFDMA technique to efficiently allocate channels, communicate with multiple devices simultaneously
  • 5 Gigabit ports – One Gigabit WAN port and four Gigabit LAN ports, 10X faster than 100–Base T Ethernet.
  • Commercial-grade Security Anywhere – Protect your home network with AiProtection Classic, powered by Trend Micro. And when away from home, ASUS Instant Guard gives you a one-click secure VPN.

How the tunnel works

The Local agent running inside your network initiates an outbound connection and authenticates with BrowserStack. BrowserStack assigns a repeater; remote browsers send private-site requests through it, and the Local agent resolves those requests from inside your network. This lets a remote browser reach an internal site without exposing the internal server to the public internet. Stop the Local agent with Ctrl+C; BrowserStack describes the agent and repeater state being torn down when the session ends. How Local Testing works

Cypress Automate proxy options

BrowserStack’s Cypress-specific guide documents these configurations for Local Testing. Confirm that the option matches your BrowserStack product, integration, and organization’s network policy before applying it elsewhere.

Rank #4
Sale
GL.iNet GL-BE3600 Slate 7 Wi-Fi 7 Travel Router Touchscreen 2.5G
  • 【DUAL BAND WIFI 7 TRAVEL ROUTER】Products with US, UK, EU, AU Plug; Dual band network with wireless speed 688Mbps (2.4G)+2882Mbps (5G); Dual 2.5G Ethernet Ports (1x WAN and 1x LAN Port); USB 3.0 port.
  • 【NETWORK CONTROL WITH TOUCHSCREEN SIMPLICITY】Slate 7’s touchscreen interface lets you scan QR codes for quick Wi-Fi, monitor speed in real time, toggle VPN on/off, and switch providers directly on the display. Color-coded indicators provide instant network status updates for Ethernet, Tethering, Repeater, and Cellular modes, offering a seamless, user-friendly experience.
  • 【OpenWrt 23.05 FIRMWARE】The Slate 7 (GL-BE3600) is a high-performance Wi-Fi 7 travel router, built with OpenWrt 23.05 (Kernel 5.4.213) for maximum customization and advanced networking capabilities. With 512MB storage, total customization with open-source freedom and flexible installation of OpenWrt plugins.
  • 【VPN CLIENT & SERVER】OpenVPN and WireGuard are pre-installed, compatible with 30+ VPN service providers (active subscription required). Simply log in to your existing VPN account with our portable wifi device, and Slate 7 automatically encrypts all network traffic within the connected network. Max. VPN speed of 100 Mbps (OpenVPN); 540 Mbps (WireGuard). *Speed tests are conducted on a local network. Real-world speeds may differ depending on your network configuration.*
  • 【PERFECT PORTABLE WIFI ROUTER FOR TRAVEL】The Slate 7 is an ideal portable internet device perfect for international travel. With its mini size and travel-friendly features, the pocket Wi-Fi router is the perfect companion for travelers in need of a secure internet connectivity on the go in which includes hotels or cruise ships.
Proxy setup in the Cypress guide Documented configuration
Standard proxy, unauthenticated or HTTP Basic authenticated --proxy-host and --proxy-port; for Basic authentication, --proxy-user and --proxy-pass
MITM proxy, unauthenticated or HTTP Basic authenticated --local-proxy-host and --local-proxy-port
PAC file without authentication --pac-file

The guide says to bypass bs-local.com in the proxy if required. It also documents --force-proxy and --force-local for routing remote browser or device requests through the configured proxy and Local connection. Without those flags, the Local binary attempts direct connections where possible for performance. Use forced routing only when your routing policy requires it. Cypress proxy and firewall guide

Set up Local for Cypress

In BrowserStack’s Cypress Local Testing guide, the configuration includes setting connection_settings.local to true in browserstack.json. The guide also describes optional force-local, proxy, and verbose-logging settings in the Local configuration file. Follow that guide’s setup for your Cypress and BrowserStack configuration rather than assuming the same fields or flags apply to a different integration. Run tests on localhost and staging websites

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
Sale
TP-Link Dual-Band AX3000 Wi-Fi 6 Wireless Gigabit Internet Router for Home
  • Next-Gen Gigabit Wi-Fi 6 Speeds: 2402 Mbps on 5 GHz and 574 Mbps on 2.4 GHz bands ensure smoother streaming and faster downloads; support VPN server and VPN client¹
  • A More Responsive Experience: Enjoy smooth gaming, video streaming, and live feeds simultaneously. OFDMA makes your Wi-Fi stronger by allowing multiple clients to share one band at the same time, cutting latency and jitter.²
  • Expanded Wi-Fi Coverage: 4 high-gain external antennas and Beamforming technology combine to extend strong, reliable, Wi-Fi throughout your home.
  • Improved Battery Life: Target Wake Time helps your devices to communicate efficiently while consuming less power.
  • Improved Cooling Design: No heat ups, no throttles. A larger heat sink and redefined case design cools the WiFi 6 system and enables your network to stay at top speeds in more versatile environments.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshoot in network-path order

  1. Percy cannot connect to its service: Verify that the Percy CLI or SDK process inherits the intended HTTP_PROXY and, where needed, HTTPS_PROXY. Check the PAC setting if your organization routes traffic through a PAC file. Percy environment-variable reference
  2. Percy connects, but page or asset discovery fails: Configure the discovery browser’s --proxy-server launch argument. Use PERCY_DEBUG=true to investigate discovery without uploading snapshots. Percy proxy configuration
  3. A remote browser cannot open your private page: Confirm that BrowserStack Local is running and configured for the relevant product and integration. Percy’s API proxy variables do not create this tunnel. How Local Testing works
  4. The Local tunnel cannot work through your proxy: Check that your proxy type and authentication match the options documented for your integration, and determine whether bs-local.com must be bypassed. The detailed standard, MITM, and PAC guidance cited here is specifically for Cypress Automate. Cypress proxy and firewall guide
  5. Some requests bypass the private route: Review whether the test requires --force-local or --force-proxy. BrowserStack says its Local binary tries direct connections where possible otherwise; forced routing changes that behavior. Verify the requirement before enabling either flag. Cypress proxy and firewall guide
  6. Credentials or tokens are exposed: Remove secrets from committed configuration and logs, rotate exposed credentials according to your organization’s process, and supply them through protected environment or CI secret settings. Percy warns that token access can consume account quota. Percy environment-variable reference

Or skip the browser setup

If the page you need to capture is reachable by ScreenshotNeo, you can request a screenshot directly instead of configuring a browser runner. ScreenshotNeo is a website screenshot API and MCP server from Yorker Media. Its API call takes a URL and returns an image or PDF; the API and capture options are documented at ScreenshotNeo documentation.

curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webp

ScreenshotNeo accepts cookie or consent banners and removes more than 60 known consent platforms, newsletter popups, and chat widgets before capture; each of those steps can be turned off. Bot checks and CAPTCHAs, blank pages, timeouts, failed loads, and cache hits are not billed, and each response identifies the page verdict and billing status in headers. Its MCP server offers take_screenshot, get_page_info, and capture_pdf for AI agents and other MCP clients. The Free plan includes 1,000 shots a month with no card; paid plans start at $5 for 3,000 shots.

Sign up for ScreenshotNeo to get 1,000 screenshots a month free, with no card required.

Keep the two approaches distinct

Percy plus BrowserStack Local is the relevant path when you need Percy snapshots from remote BrowserStack browsers against a private site. ScreenshotNeo is an alternative for making a direct screenshot or PDF request to a page reachable by its API; its documented workflow is not a Percy snapshot or a BrowserStack Local tunnel.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Frequently Asked Questions

Can Percy’s HTTP_PROXY setting make a private site visible to a remote test browser?

No. It configures Percy CLI or SDK traffic. Remote BrowserStack browsers need BrowserStack Local to reach a site available only inside your network.

Does the Cypress proxy configuration apply to every BrowserStack Local integration?

The cited proxy flags and supported proxy types are documented for Cypress Automate. Verify the current setup for the specific BrowserStack product and integration you use.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.