Network and Connectivity Issues
Solutions for proxy, firewall, and network-related problems
This guide helps you resolve network connectivity issues, including proxy configuration and SSL/TLS certificate problems.
Proxy Configuration
In enterprise settings, you may encounter proxy-related issues at two points:
- During AskUI installation
- When AskUI Controller connects to AskUI Inference
NTLM or Kerberos Proxy Setup
NTLM or Kerberos proxies require authentication via your Windows user or username/password combination. We recommend using a local proxy to handle authentication.
Setting Up a Local Proxy with Px
Px is recommended as a local proxy:
- Install Px following their documentation
- Start the proxy (default port: 3128)
Choose the binary option if package managers aren’t available in your environment.
Windows Autostart Configuration:
Create px-start.bat
in your Px installation folder:
To set up autostart:
- Create a link to
px-start.bat
- Press
Windows + R
, entershell:startup
- Move the link to this folder
Configure pip to Use Proxy
Create a pip configuration file:
Linux/macOS (~/.config/pip/pip.conf
):
Windows (%APPDATA%\pip\pip.ini
):
Set Environment Variables
In Python scripts:
System-wide configuration:
Linux/macOS:
Windows:
AskUI Controller Proxy Configuration
Method 1: Using Environment Variables
The Python client uses the requests
library which automatically uses proxy environment variables.
Method 2: Configure Proxies in Code
Proxy with Authentication
SSL/TLS Certificate Issues
Corporate proxies often perform Deep Package Inspection by adding self-signed certificates. This causes errors like:
SSLError: self-signed certificate
SSLError: unable to verify the first certificate
Solution: Adding Custom Certificates
Certificate Configuration Methods
Certificate Configuration Methods
Extracting Corporate Certificates
-
From Browser:
- Chrome: Click lock icon → “Certificate”
- Firefox: Click lock icon → “Connection Secure” → “More Information” → “View Certificate”
-
Select the root certificate (often named after your company)
-
Export/download in PEM format
-
Save to accessible location
Security Note: Never use verify=False
in production. It disables SSL verification and exposes you to man-in-the-middle attacks.
AskUI Suite Proxy Commands
Use these commands in askui-shell to manage proxy settings:
Common Network Errors
Connection Timeout
Symptoms:
- Operations hang for long periods
- Timeout errors after 30-60 seconds
Solutions:
- Check firewall allows outbound HTTPS (port 443)
- Verify proxy settings are correct
- Test connection:
AskUI-TestConnection
DNS Resolution Failures
Symptoms:
- “Unable to resolve host” errors
- Connection failures to askui.com domains
Solutions:
- Check DNS settings
- Try using corporate DNS servers
- Add explicit DNS entries if needed
Certificate Verification Failed
Symptoms:
- SSL certificate errors
- “Certificate verify failed” messages
Solutions:
- Add corporate root certificate (see above)
- Update certificate bundle:
pip install --upgrade certifi
- Check system date/time is correct
Debugging Network Issues
Enable verbose logging to diagnose problems:
Use network debugging tools:
Firewall Configuration
If AskUI is blocked by your firewall, ensure the required domains are whitelisted. See the network requirements in our Installation guide for the complete list of domains that need to be accessible.
Next Steps
- Still having issues? Report a bug
- Installation problems? See Installation and Setup
- Runtime errors? Check Runtime and Environment Errors