What a Web Proxy Is and When to Use One

A VPN builds a tunnel at system level and every byte the device sends goes through it — apps, games, system updates. A web proxy works one layer up, inside the browser: the browser sends each request to the proxy server according to its proxy settings, and the proxy fetches the site and returns the result.

So the difference is not security or speed but scope. Use a VPN when the whole device should take the route; use a web proxy when one browser should and everything else should stay local.

LeoTun’s web proxy runs over an encrypted HTTPS connection and uses the same username and password as the VPN, so one account switches between the two at will. A proxy has to be encrypted today: plain HTTP and SOCKS5 proxies get detected and disrupted on networks in mainland China, so every proxy we offer is encrypted.

• A company or school laptop: no VPN client allowed, no admin rights, but browser extensions are permitted.
• Already on a corporate VPN: two VPN clients fight each other, while a web proxy lives inside the browser and coexists with the corporate one.
• A poor network where the VPN keeps dropping: a proxy has no long-lived connection to maintain; each request stands alone, and after a drop the next request simply reconnects.
• Only one browser should take the route: the work browser stays local while a second browser is dedicated to blocked sites, and neither affects the other.

• Video and music apps: players usually ignore the browser’s proxy settings — the page loads but the video will not play.
• Phone apps, games, desktop software: none of them read the browser’s proxy. Apps like Dropbox only accept unencrypted HTTP / SOCKS5 in their own proxy settings, so they can't use the encrypted web proxy — use Traffic Camouflage for the whole device and set the app to "No proxy" (see the Dropbox / app proxy guide).
• A mainland IP for Tencent Video or iQIYI: even inside the browser, the site also checks IPv6 and DNS, which a web proxy cannot control.
• When DNS must also take the route: the proxy server resolves names for browser requests, which is usually enough, but system-level DNS stays local.

Pick your system and follow the screenshots. The button on the right plays the video, and any screenshot enlarges when you click it.

• The extension in the screenshots is ZeroOmega (the maintained successor of SwitchyOmega); this site’s web-proxy page links each browser’s install page.
• When the browser shows a login prompt, enter your site username and password.
• Changing region and going back to a direct connection both happen in the extension icon: pick another region profile, or switch to “Direct”.
• To confirm the exit, open an IP-lookup page and check that it shows the region you chose.

• The login prompt keeps reappearing: the account has expired or the password is wrong. Check the expiry on the site.
• Some sites fail while others work: usually an “auto switch” rule in the extension sends those domains direct. Try the global proxy profile once.
• Inside China, on carrier networks only HTTPS sites open: plaintext HTTP requests are rewritten in transit and only encrypted connections get through; nearly every site is HTTPS now, so the impact is small.
• Slow: change region. The proxy and the VPN share the same servers, so the same region logic applies.