⚡️ Initial HTTP proxy support for Copilot

[bmuskalla]

We’re happy to announce that the latest release of Copilot for Visual Studio Code and Copilot for IntelliJ contains preliminary support for connecting through HTTP proxy servers.
The current version supports basic HTTP proxy setups, with and without basic authentication.

For Visual Studio Code
Ensure you have Copilot for VS Code 1.39.6432 or higher installed in your editor.

• To set up your proxy, go to your VSCode Settings and ensure your HTTP proxy configuration is set up properly. Alternatively, Copilot uses the http_proxy and https_proxy variables from your environment.

• Restart your editor so the proxy configuration is applied correctly to all components requiring connections via the proxy.

For Jetbrains IntelliJ

• Ensure you have Copilot for IntelliJ 1.1.29.1869 or higher installed in your IDE.
• Setup the HTTP proxy in your Preferences.
• Restart your editor so the proxy configuration is applied correctly to all components requiring connections via the proxy.

Troubleshooting

Determine if your proxy setup is supported

• At this point, we only support HTTP proxies, no HTTPS proxy setups
• At this point, we only support BASIC authentication
• At this point, custom certificates may be rejected
• If you have another setup that is not supported, please let us know in the comments

Determine if you can connect to some of the GitHub endpoints using the command line like

curl --verbose https://copilot-proxy.githubusercontent.com/_ping

You should see a HTTP 200 response:

…
> GET /_ping HTTP/2
…
< HTTP/2 200
{"now":1660205316,"status":"ok"}

If not, see if you can make curl use your proxy to make the request and share the setup with us. If no argument is required, see below of potential environment variables that affect this.

For example:

curl -x http://proxy-to-internet:3128 -i -L https://copilot-proxy.githubusercontent.com/_ping

Determine if there is a proxy setup in your environment

echo $HTTP_PROXY
echo $HTTPS_PROXY
echo $NO_PROXY

We’d be more than happy to see your feedback on the new proxy support, whether it works for your setup or not. And if not, please include enough information using the approaches above to further debug those issues together.

[tsoftware-org]

Finally supported, thanks!

[gittar]

same here. I was finally able with the correct proxy settings to activate copilot (if I go over the copilot icon it now says "deactivate copilot"), but no suggestions appear. E.g. in python I write the comment:

# create list from 1 to 100

and I would expext a suggestion like

L=range(1,101)

but I get nothing at all. Can you give a hint how to proceed?

[modaye]

If you have configured the http proxy of pycharm.

1. First test that the agent is available

2. If there is no automatic prompt, it may be effective to uninstall the plug-in and install it again

[gittar]

I am using VS code.

[fabianstarke]

There really should be more support here for helping out on this issues ! I have subscribed and want to be able to use it, I will probably cancel my subscription now...

[oliver-mentel]

There really should be more support here for helping out on this issues ! I have subscribed and want to be able to use it, I will probably cancel my subscription now...

Might do the same, as I really only would be using it for work.

[MinhThienDX]

I tested on 2 JetBrains Rider installations, 1 work but the other got stuck at Retrieving completions...
Both get 200 from https://copilot-proxy.githubusercontent.com/_ping

[oliver-mentel]

I tried to set it up in IntelliJ IDEA according to the post, but it got stuck on retrieving completions. A real shame..

[stephen-sgray-net]

Look in your idea.log for the copilot error message. I was getting "Request Error: unable to verify the first certificate". You need to trust the certificate provided by the website you are making your SSL call. The usual way of doing this in intellij is through the Settings/Tools/Server Certificates dialog, which allows you to import certificates that are "accepted" (trusted). Unfortunately copilot ignores this list, and also ignores certificates imported into the JRE certificate keystore (/jbr/lib/security/cacerts). It seems that copilot uses nodejs code to request. You can tell nodesj not to verify certificates by setting a windows environment variable NODE_TLS_REJECT_UNAUTHORIZED to 0 (see https://stackoverflow.com/a/67842168). WARNING: this will disable all certificate verification for nodejs calls.

The best solution would be for copilot to check the Server Certificates accepted certificates in intellij when making SSL calls (are you listening copilot developers?).

Thanks to the helpful intellij tech support for the answer to this problem.

[JohanStolk]

I hope they fix this soon:

The best solution would be for copilot to check the Server Certificates accepted certificates in intellij when making SSL calls (are you listening copilot developers?).

I'm not risking any security backdoors but thanks for the info!

I will wait for the real fix...

[pkgainwell]

This issue is still open.. It should not be that difficult for Microsoft (GitHub) to fix this plugin... It would be a lost opportunity, as I will not be subscribing/paying until this is fixed...

[uesleibros]

Its crazy!

[wangdabi]

ok I will update my vscode immadeately !

[modaye]

Finally, we support it. If we do not support it, we may propose new solutions

[wangdabi]

?

[AvishekKhatiwada]

.

[Variable-py]

Thanks

[Lincest]

This work is awesome and it will help thousands of Chinese users!! 👏👏 ❤️

[q920447939]

before i use github copilot old version . use a special way to use the function(use replace core-1.1.2xx.jar with core-1.1.20.jar )
yesterday ,My github copilot is being asked to force an upgrade to the latest version
But it can't be used normally
hint GitHub Copilot: Failed to initiate the GitHub login process. Please try again.
i try this page top method(set IDEA HTTP proxy) and check connection ( https://copilot-proxy.githubusercontent.com/_ping) .
IDEA show check connection is connection successful
i found other website method . set IDEA VM option (-Dcopilot.agent.disabled=true). then restart IDEA ,but github copilot plugin alway hint GitHub Copilot: Failed to initiate the GitHub login process. Please try again.
then i found the github-copilot-intellij-1.1.30.1887 dir exists copilot-agent
i try use CMD command run copilot-agent-win.exe in the directory bin ， but hint me
Node.js is only supported on Windows 8.1, Windows Server 2012 R2, or higher. Setting the NODE_SKIP_PLATFORM_CHECK environment variable to 1 skips this check, but Node.js might not execute correctly. Any issues encountered on unsupported platforms will not be fixed.
then i set NODE_SKIP_PLATFORM_CHECK=1 in my system environment
the copilot-agent-win.exe Can finally start. but github copilot still hine me login process.
i also try restart IDEA and clean IDEA cache .
All the methods tried in the end didn't work

IDEA info:
IntelliJ IDEA 2021.1 (Ultimate Edition) Build #IU-211.6693.111, built on April 6, 2021 Licensed to IntelliJ IDEA Evaluator Expiration date: September 25, 2022 Runtime version: 11.0.10+9-b1341.35 amd64 VM: Dynamic Code Evolution 64-Bit Server VM by JetBrains s.r.o. Windows 7 6.1 GC: G1 Young Generation, G1 Old Generation Memory: 3072M Cores: 6 Registry: compiler.automake.allow.when.app.running=true Non-Bundled Plugins: Key Promoter X (2021.1.1), com.huage2580.leeks (1.9.2), com.intellij.ideolog (203.0.27.0), io.zhile.research.ide-eval-resetter (2.1.6), com.github.copilot (1.1.30.1887), GrepConsole (12.2.211.6693.1), String Manipulation (8.15.203.000.3), org.jetbrains.jumpToLine (0.1.8), org.intellij.plugins.junitgen (2.0.12), MavenRunHelper (4.13.203.000.0), com.alibabacloud.intellij.toolkit-intellij (2022.5.2-211), JRebelPlugin (2021.3.0), SequenceDiagram (2.1.8), cn.yiiguxing.plugin.translate (3.2.2), com.bruce.intellijplugin.generatesetter (2.8), com.ccnode.codegenerator.MyBatisCodeHelperProMarketPlace (2.9.3-183-204) Kotlin: 211-1.4.32-release-IJ6693.72

system info :
Microsoft Windows 7 (6.1) Ultimate Edition 64-bit Service Pack 1 (Build 7601)

[trung-hn]

I pretty much had the same experience as you had. Try a lot of things but nothing works. https://copilot-proxy.githubusercontent.com/_ping returns 200, though. Really sucks that it failed on the day I am supposed to show how cool Copilot is to 200+ people in my company.

[MinhThienDX]

I pretty much had the same experience as you had. Try a lot of things but nothing works. https://copilot-proxy.githubusercontent.com/_ping returns 200, though. Really sucks that it failed on the day I am supposed to show how cool Copilot is to 200+ people in my company.

This is why people "demo" using pre-recorded demo since stuffs follow Murphy's law.

[lianghuang7]

I also encountered such a situation, and the product used as a paying user should not have such a situation
@bmuskalla

[lianghuang7]

It's really not like a big company's product, an HTTP proxy can't do it well

[yangjianlin]

这是来自QQ邮箱的假期自动回复邮件。   您好，我最近正在休假中，无法亲自回复您的邮件。我将在假期结束后，尽快给您回复。

[lianghuang7]

IDE log
2022-09-01 10:49:38,323 [4145514] WARN - CopilotAgentProcessServiceImpl - Failed to execute JSON-RPC command or notification. Request: 19, command: signInInitiate java.io.IOException: Stream Closed at java.base/java.io.FileOutputStream.writeBytes(Native Method) at java.base/java.io.FileOutputStream.write(FileOutputStream.java:354) at java.base/java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:81) at java.base/java.io.BufferedOutputStream.write(BufferedOutputStream.java:127) at java.base/java.io.FilterOutputStream.write(FilterOutputStream.java:108) at com.github.copilot.lang.agent.vscodeRpc.VSCodeJsonRpc.sendBytes(VSCodeJsonRpc.java:76) at com.github.copilot.lang.agent.vscodeRpc.VSCodeJsonRpc.sendCommand(VSCodeJsonRpc.java:39) at com.github.copilot.lang.agent.CopilotAgentProcessServiceImpl.lambda$executeCommandWithPromise$3(CopilotAgentProcessServiceImpl.java:289) at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) at java.base/java.lang.Thread.run(Thread.java:834) 2022-09-01 10:49:38,323 [4145514] WARN - .lang.agent.AgentGitHubService - error retrieving device code org.jetbrains.concurrency.MessageError: Stream Closed 2022-09-01 10:49:38,476 [4145667] WARN - CopilotAgentProcessServiceImpl - Failed to execute JSON-RPC command or notification. Request: 20, command: signInInitiate java.io.IOException: Stream Closed at java.base/java.io.FileOutputStream.writeBytes(Native Method) at java.base/java.io.FileOutputStream.write(FileOutputStream.java:354) at java.base/java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:81) at java.base/java.io.BufferedOutputStream.write(BufferedOutputStream.java:127) at java.base/java.io.FilterOutputStream.write(FilterOutputStream.java:108) at com.github.copilot.lang.agent.vscodeRpc.VSCodeJsonRpc.sendBytes(VSCodeJsonRpc.java:76) at com.github.copilot.lang.agent.vscodeRpc.VSCodeJsonRpc.sendCommand(VSCodeJsonRpc.java:39) at com.github.copilot.lang.agent.CopilotAgentProcessServiceImpl.lambda$executeCommandWithPromise$3(CopilotAgentProcessServiceImpl.java:289) at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) at java.base/java.lang.Thread.run(Thread.java:834) 2022-09-01 10:49:38,477 [4145668] WARN - .lang.agent.AgentGitHubService - error retrieving device code org.jetbrains.concurrency.MessageError: Stream Closed

[mchlstrng]

[oliver-mentel]

I'm behind a corporate proxy with self signed root certs.

VS Code: Set proxy in the settings and download win-ca extension and set it to append.

In Visual Studio it works if using proxifier and setting up proxy rules.

@mchlstrng are you on MacOS or on Win?

[pedrobraz1990]

So I could finally complete the curl using the following command pattern (omitting relevant values due to company policy):

curl -x http://proxy-to-internet:3128 -i -L https://copilot-proxy.githubusercontent.com/_ping --proxy-user USERNAME

But I can't reproduce that within the PyCharm IntelliJ environment.

The settings screen looks like this:

The problem is that if I Auto-detect, I can't choose the login credentials (which are the windows usual ones btw). If I choose manualit doesn't let me specify the http://proxy-to-internet:3128 part.

And to be absolutely honest about my ignorance, I'm not sure what I should put under host name hahaha

I guess my problem should be translating the curl to pycharm, if anyone is smart enough to help I would highly appreciate it! Thanks

[shiloh92]

So no solution to this problem, even after reinstalling, updating, repairing, everything suggested by users since May 2022. This app seems broken for many users. I will have to get a refund I think, about 3 hours in trying to get this extension to work.

[oliver-mentel]

Same, thinking of a refund as well, as I can only really use this over a VPN/ Proxy. A real shame, as it really helped me code/ work more efficiently.

[bmuskalla]

I'd recommend to contact support with logs/screenshots of the exact problem you're facing.
If it's a problem that the HTTP(S) connection runs through a self-signed certificate, we're aware of the problem and try to support it as soon as possible.

[benji566]

Any fixes for this yet?

[aide-cloud]

I get this problem a lot！

[NargiT]

We have proxy and custom certificates and, custom certificates are not read from standard ubuntu. I don't know what to do in order to fix this, because vscode support custom certificate behind a proxy but not this extension. Unless I am doing something wrong.

[ghost]

I have the same issue and error for 140.82.121.3. I requested to have access via proxy to this endpoint.
Locally i can resolve 140.82.121.3 via "nslookup 140.82.121.3" to:

• 3.121.82.140.in-addr.arpa and name: lb-140-82-121-3-fra.github.com

I'll give update if this is resolved with proxy adjustment. If that's the cases this should be listed for the configuration of Copilot behind Proxy.

[RIGHTHOOD]

I have the same issue and error for 140.82.121.3. I requested to have access via proxy to this endpoint.

Locally i can resolve 140.82.121.3 via "nslookup 140.82.121.3" to:

• 3.121.82.140.in-addr.arpa and name: lb-140-82-121-3-fra.github.com

I'll give update if this is resolved with proxy adjustment. If that's the cases this should be listed for the configuration of Copilot behind Proxy.

[Oxicode]

The VSCode extension ‘Win-CA’ (must be set to ‘append’ mode) solves this issue. It tells VSCode to also trust the CA’s installed on the employees desktop. This makes VSCode happy again trusting the fake cert chain.

good lucky

[bushig]

For anyone struggling with errors inside IDEs with configured proxy and if you don't want to proxy all your traffic, try this:

1. Disable proxy settings in IDE (for me there was problem inside jetbrains idea and pycharm)
2. Install host level proxy manager. For Mac OS i've used Proxifier (it's paid, 30 days trial), it has proxying rules.
3. Add your proxy server (if you don't have one, try finding public or buy it for less than a dollar). I bought shared one at proxys.io (able to pay from Russia)
4. Add rule for *.github.com to use proxy
5. Restart IDE
   

For me it works even with another vpn alongside, what a pleasure you don't have to switch vpns all the time

[ivan-plotnikov]

Лучший, спасибо!

[gaomeng1900]

Any updates on socks?

[majkee15]

This sux, makes the copilot unusable at work

[IOnlyFetchBranches]

Hey guys, how can we do proxy for Visual Studio 2022, we dont get any love huh? ;(

[Finn-paulsen]

Response #2

[kazedi]

How can I set HTTP proxy URL for vim Copilot extension?

[oliver-mentel]

For anyone still struggling to get it running behind a proxy and is using IntelliJ as their IDE do the following:

1. Open Settings (Mac: CMD + ,)
2. Go to Tools in the left side bar menu
3. Find and open Server Certificates
4. Enable "Accept non-trusted certificates automatically"
5. Restart IntelliJ
6. Now it should work given that you have set up your proxy settings accordingly

[kaonick]

Definitely the correct answer.

[hcgo97]

This solution solved my long-standing problem!!
It solved both the issue of the plugin not downloading properly when using a proxy and the issue with the copilot login.

[ZainCheung]

Thank you very much! This works for me! I've been obsessing about this for a while!

[mmohylko]

It seems "Login to GitHub" doesn't work with the PAC script, at least in PyCharm. When I log in to GitHub with direct Internet access and switch to the corporate environment via VPN, further network communication works fine.
If I set the proxy hostname and port, it works fine even without direct Internet access. But I must turn off the proxy whenever I disconnect from the corporate VPN.
So, the issue with PAC is only during the "Login to GitHub" process. I hope it will be sorted out soon.

[umitaltintas]

For the Jetbrains users:

1. Remove github related server certificates.
2. Enable "Accept non-trusted certificates automatically".
3. Uninstall copilot.
4. Restart ide.
5. Reinstall copilot.

[josnabattula]

@umitaltintas Thanks. But for it worked in a different way

1. IDE --> settings -->Tools-->Server Certificates
2. `Select "Accept non-trusted certificates automatically"
3. Restart Ide
4. Log-in into Copilot again
5. Deselect "Accept non-trusted certificates automatically" which we select from first step, may not need as once log-in complete Copilot won't ask it again, I think.
6. Make sure in proxy settings --> proxy hostname is 127.0.0.1 rather localhost

In bellow link at step:5
https://docs.github.com/en/copilot/configuring-github-copilot/configuring-network-settings-for-github-copilot#configuring-a-proxy-in-a-jetbrains-ide

[jrl-se]

It seems to me that the Copilot plugin for IntelliJ IDEA does not take into account proxy parameters when using the option "Auto-detect proxy settings" with an automatic proxy configuration URL (PAC). Testing the connection to GitHub using the "Check connection" button works, so probably a Copilot issue.

When I inform the proxy information in the section "Manual proxy configuration" it works, though. Could you look into that?

[paulobndes]

Hope you have NLTM authentication soon.

VSCode already supports it. Unfortunately the extensions don't use

[TRUEVORO]

Socks5 support?