Residential Proxy Setup: Complete Step-by-Step Guide
By the end of this 10-minute guide, your residential proxy setup will be fully configured, verified, and routing traffic through real AT&T or T-Mobile 4G/5G IPs across any of 174 US cities. Here's exactly what to do.
ProxyPanel provides CGNAT-assigned mobile carrier IPs — not traditional residential IPs sourced from peer-to-peer networks. CGNAT (Carrier-Grade NAT) means thousands of real mobile users share the same IP pool, giving these addresses significantly higher trust scores than datacenter or even standard residential proxies. Platforms like Instagram, Amazon, and Nike see the same IPs coming from legitimate mobile subscribers, making them extremely difficult to flag or block.
Before diving in, browse all 174 US locations to confirm the cities you need are available — every location is included on every plan, including the $1 trial.
Before You Start
- A ProxyPanel account with active credentials (username + password)
- Your proxy gateway hostname:
gatewayip - HTTP port:
8083| SOCKS5 port:9093 - A tool to configure: browser, anti-detect browser, scraper, or terminal
- (Optional) A static IP address if you prefer IP whitelisting over password auth
Step 1: Choose Your Authentication Method
ProxyPanel supports two authentication methods. Pick the one that fits your workflow.
Username/Password — Best for dynamic environments, cloud servers, and anti-detect browsers where your outbound IP may change. You'll use credentials like USER:PASS in every proxy connection string.
IP Whitelisting — Best for dedicated servers with a fixed public IP. Add your IP in the ProxyPanel dashboard under the Whitelist tab, and no credentials are needed in your proxy config. Connections from whitelisted IPs authenticate automatically.
[IMAGE: ProxyPanel dashboard showing the IP Whitelist tab with an example IP added — alt text: Adding an IP address to ProxyPanel's whitelist panel]
Step 2: Configure HTTP Proxy in Your Browser or Tool
For most use cases — multi-account management, ad verification, general browsing — HTTP on port 8083 is the right choice. Enter these values in your tool's proxy settings:
| Field | Value |
|---|---|
| Host | gatewayip |
| Port | 8083 |
| Protocol | HTTP |
| Username | Your ProxyPanel username |
| Password | Your ProxyPanel password |
In Multilogin, navigate to New Browser Profile → Proxy → HTTP and paste the values above. In GoLogin, open the profile editor, select HTTP proxy, and fill in the same fields. AdsPower and Dolphin Anty follow identical patterns — the field labels are nearly the same across all anti-detect browsers.
Step 3: Configure SOCKS5 (For Scraping and Advanced Use)
SOCKS5 handles any TCP traffic — not just HTTP — making it the better protocol for Selenium, Playwright, and tools that open WebSocket connections. Use port 9093:
socks5://USER:PASS@gatewayip:9093
In Selenium with Python, pass this as a browser argument:
from selenium import webdriver
options = webdriver.ChromeOptions()
options.add_argument('--proxy-server=socks5://gatewayip:9093')
driver = webdriver.Chrome(options=options)
driver.get('https://api.ipify.org?format=json')
For Scrapy, add the proxy middleware to settings.py and set HTTP_PROXY = 'socks5://USER:PASS@gatewayip:9093'.
Step 4: Set Up IP Rotation
ProxyPanel rotates your IP automatically with a minimum interval of 180 seconds. Every 3+ minutes, you get a fresh carrier IP from the same city and carrier — this is smart rotation, which locks your session to a consistent geolocation while cycling the address.
For on-demand rotation, trigger an IP change via the dedicated URL endpoint provided in your dashboard. You can also automate this through the REST API documentation — useful when scraping Amazon listings across 50 cities or rotating IPs between account logins.
[IMAGE: Diagram showing smart rotation flow: same city + carrier, new IP every 180s — alt text: ProxyPanel smart rotation keeps city and carrier consistent while changing IP]
Step 5: Select a Target Location
Every ProxyPanel plan includes access to all available cities. Select your target city in the dashboard or pass a location parameter via the API. When managing 30 Instagram accounts without triggering flags, assign each profile a different city — the proxy endpoint handles the rest.
Step 6: Test the Connection from Terminal
Run this command to confirm traffic routes through ProxyPanel:
curl -x http://USER:PASS@gatewayip:8083 https://api.ipify.org?format=json
For SOCKS5:
curl -x socks5://USER:PASS@gatewayip:9093 https://api.ipify.org?format=json
Ready to test with your own stack? Grab a $1 trial and run these commands against your real workload.
Verifying It Works
After running the curl command above, you should see a JSON response containing a US-based IP address that differs from your real one:
{"ip":"172.58.153.217"}
Run the command again after 180 seconds to confirm IP rotation is active:
{"ip":"100.37.82.44"}
Both IPs should be US-based mobile carrier addresses. To double-check, query an IP geolocation API:
curl -x http://USER:PASS@gatewayip:8083 https://ipinfo.io
Expected output:
{
"ip": "172.58.153.217",
"city": "Dallas",
"region": "Texas",
"country": "US",
"org": "AS20057 AT&T Mobility LLC"
}
The org field should show AT&T Mobility LLC or T-Mobile USA — confirming the connection routes through a real mobile carrier, not a datacenter.
[IMAGE: Terminal window showing curl output with ipinfo.io response displaying AT&T Mobility as the org — alt text: Terminal output verifying ProxyPanel proxy connection through AT&T mobile carrier]
Common Mistakes
407 Proxy Authentication Required — You entered the wrong username or password. Double-check credentials in your ProxyPanel dashboard. If using IP whitelisting, confirm your current public IP matches the whitelisted address by visiting https://api.ipify.org directly (without the proxy).
Connection timeout on port 9093 — Your firewall or ISP is blocking SOCKS5 traffic. Switch to HTTP on port 8083 to test. If HTTP works but SOCKS5 doesn't, add an outbound firewall rule allowing TCP on 9093.
Same IP returned after multiple requests — You're querying faster than the 180-second minimum rotation interval. Wait at least 3 minutes between rotation checks, or trigger a manual IP change via the rotation URL in your dashboard.
Anti-detect browser shows your real IP on leak tests — The proxy is configured but WebRTC leak protection is disabled. In Multilogin, set WebRTC to Disabled or Replace. In GoLogin, enable WebRTC spoofing in the profile's advanced settings.
Pro Tips
- Parallel city targeting: Use the API to spin up connections in multiple cities simultaneously — ideal for price comparison scraping across US regions.
- Session persistence for logins: Keep the same IP for sensitive actions (OAuth flows, checkout) by staying within the 180-second window. Smart rotation ensures your city and carrier remain consistent even after the IP cycles.
- SOCKS5 for WebSocket apps: If your scraping target uses WebSocket connections (real-time data feeds, chat platforms), SOCKS5 on
9093handles these natively while HTTP proxies cannot. - Automate rotation with the API: Call the IP change endpoint programmatically between tasks. See the API reference for the exact endpoint and response format.
- Monitor your IP reputation: Use tools like IPQualityScore to verify your proxy IPs maintain low fraud scores — CGNAT mobile IPs typically score under 10, compared to 50+ for datacenter proxies.
Frequently Asked Questions
What if curl returns connection refused on port 8083?
Your local network may block outbound traffic on non-standard ports. Test from a different network or ask your hosting provider to allow TCP on ports 8083 and 9093. You can also check with telnet gatewayip 8083 — if it hangs, the port is blocked on your end.
How do I verify the IP actually changed after triggering rotation?
Run curl -x http://USER:PASS@gatewayip:8083 https://api.ipify.org?format=json before and after calling the rotation URL. Compare the two ip values. They must be different. If they match, at least 180 seconds hasn't elapsed — wait and retry.
Can I undo IP whitelisting if I switch to a dynamic IP?
Yes. Remove the old IP from the Whitelist tab in the dashboard and switch to username/password authentication. The change takes effect immediately — no restart or session reset needed.
Why am I getting 403 Forbidden on the target site even with the proxy active?
The target site may require additional fingerprint consistency. Ensure your anti-detect browser timezone, language, and geolocation match the proxy's exit city. Check your assigned city in the help center and align your browser profile accordingly.
Does this residential proxy setup work on Linux and macOS?
Yes. The curl commands work identically on Linux, macOS, and Windows (via PowerShell or WSL). For GUI-based tools like Multilogin or AdsPower, the proxy configuration fields are the same across all operating systems.
ProxyPanel's mobile carrier IPs make residential proxy setup straightforward and reliable. You now have a working configuration — HTTP or SOCKS5, authenticated and verified, with automatic IP rotation across real US mobile networks. The pricing plans start at $1 for a 1-hour trial with unlimited bandwidth and access to all 174 locations — enough time to validate the setup against your actual workload before committing to a weekly or monthly plan.