Xray-docs-next/docs/en/config/inbounds/http.md

# HTTP

HTTP protocol.

::: warning
**The HTTP protocol does not provide encryption for transmission and is not suitable for transmission over public networks, as it can easily be used as a target for attacks.**
:::

The more meaningful use of `http` inbound is to listen in a local network or on the local machine to provide local services for other programs.

::: tip TIP 1
`http proxy` can only proxy the TCP protocol and cannot handle protocols based on UDP.
:::

::: tip TIP 2
In Linux, you can use the following environment variables to enable global HTTP proxy for the current session (many software support this setting, but some may not).

- `export http_proxy=http://127.0.0.1:8080/` (Change the address to the configured inbound HTTP proxy address)
- `export https_proxy=$http_proxy`
- :::

## InboundConfigurationObject

```json
{
  "timeout": 0,
  "accounts": [
    {
      "user": "my-username",
      "pass": "my-password"
    }
  ],
  "allowTransparent": false,
  "userLevel": 0
}
```

> `timeout`: number

The idle timeout in seconds. The default value is `300`, and 0 means no timeout.

When handling a connection, if no data is transmitted within the timeout period, the connection will be terminated.

> `accounts`: \[[AccountObject](#accountobject)\]

An array where each element represents a user account. The default value is an empty array.

When `accounts` is not empty, the HTTP proxy will perform Basic Authentication verification for inbound connections.

> `allowTransparent`: true | false

When set to `true`, it will forward all HTTP requests instead of just proxy requests.

::: tip
Enabling this option without proper configuration may cause an infinite loop.
:::

> `userLevel`: number

The user level that the connection will use to determine the corresponding [Local Policy](../policy.md#levelpolicyobject).

The value of `userLevel` corresponds to the value of `level` in the [policy](../policy.md#policyobject). If not specified, the default value is 0.

### AccountObject

```json
{
  "user": "my-username",
  "pass": "my-password"
}
```

> `user`: string

The username. It is a string and is required.

> `pass`: string

The password. It is a string and is required.