Daemon: proxy connection refused - using system proxy in Windows #14706

AnicoderAndy · 2025-04-04T13:36:13Z

Description

Daemon returns an error when I am using commands like docker search and docker pull. Daemon cannot connect to the system proxy.

prompt> docker search alpine
Error response from daemon: Get "https://index.docker.io/v1/search?q=alpine&n=25": proxyconnect tcp: dial tcp 127.0.0.1:7897: connect: connection refused

Reproduce

Set WSL network mode to mirrored.
Run a proxy application like Clash in the host machine. Enable system proxy.
Start Docker Desktop.
Run docker search alpine in Powershell.

Expected behavior

No response

docker version

Client:
 Version:           28.0.4
 API version:       1.48
 Go version:        go1.23.7
 Git commit:        b8034c0
 Built:             Tue Mar 25 15:07:48 2025
 OS/Arch:           windows/amd64
 Context:           desktop-linux

Server: Docker Desktop 4.40.0 (187762)
 Engine:
  Version:          28.0.4
  API version:      1.48 (minimum version 1.24)
  Go version:       go1.23.7
  Git commit:       6430e49
  Built:            Tue Mar 25 15:07:22 2025
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          1.7.26
  GitCommit:        753481ec61c7c8955a23d6ff7bc8e4daed455734
 runc:
  Version:          1.2.5
  GitCommit:        v1.2.5-0-g59923ef
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0

docker info

Client:
 Version:    28.0.4
 Context:    desktop-linux
 Debug Mode: false
 Plugins:
  ai: Docker AI Agent - Ask Gordon (Docker Inc.)
    Version:  v1.1.3
    Path:     C:\Program Files\Docker\cli-plugins\docker-ai.exe
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.22.0-desktop.1
    Path:     C:\Program Files\Docker\cli-plugins\docker-buildx.exe
  cloud: Docker Cloud (Docker Inc.)
    Version:  0.2.20
    Path:     C:\Program Files\Docker\cli-plugins\docker-cloud.exe
  compose: Docker Compose (Docker Inc.)
    Version:  v2.34.0-desktop.1
    Path:     C:\Program Files\Docker\cli-plugins\docker-compose.exe
  debug: Get a shell into any image or container (Docker Inc.)
    Version:  0.0.38
    Path:     C:\Program Files\Docker\cli-plugins\docker-debug.exe
  desktop: Docker Desktop commands (Beta) (Docker Inc.)
    Version:  v0.1.6
    Path:     C:\Program Files\Docker\cli-plugins\docker-desktop.exe
  dev: Docker Dev Environments (Docker Inc.)
    Version:  v0.1.2
    Path:     C:\Program Files\Docker\cli-plugins\docker-dev.exe
  extension: Manages Docker extensions (Docker Inc.)
    Version:  v0.2.27
    Path:     C:\Program Files\Docker\cli-plugins\docker-extension.exe
  init: Creates Docker-related starter files for your project (Docker Inc.)
    Version:  v1.4.0
    Path:     C:\Program Files\Docker\cli-plugins\docker-init.exe
  sbom: View the packaged-based Software Bill Of Materials (SBOM) for an image (Anchore Inc.)
    Version:  0.6.0
    Path:     C:\Program Files\Docker\cli-plugins\docker-sbom.exe
  scout: Docker Scout (Docker Inc.)
    Version:  v1.17.0
    Path:     C:\Program Files\Docker\cli-plugins\docker-scout.exe

Server:
 Containers: 0
  Running: 0
  Paused: 0
  Stopped: 0
 Images: 0
 Server Version: 28.0.4
 Storage Driver: overlayfs
  driver-type: io.containerd.snapshotter.v1
 Logging Driver: json-file
 Cgroup Driver: cgroupfs
 Cgroup Version: 1
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
 CDI spec directories:
  /etc/cdi
  /var/run/cdi
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 nvidia runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 753481ec61c7c8955a23d6ff7bc8e4daed455734
 runc version: v1.2.5-0-g59923ef
 init version: de40ad0
 Security Options:
  seccomp
   Profile: unconfined
 Kernel Version: 5.15.167.4-microsoft-standard-WSL2
 Operating System: Docker Desktop
 OSType: linux
 Architecture: x86_64
 CPUs: 32
 Total Memory: 15.21GiB
 Name: docker-desktop
 ID: 4cda0140-8f88-4b47-8d5d-b9df179e1467
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 HTTP Proxy: http://127.0.0.1:7897
 HTTPS Proxy: http://127.0.0.1:7897
 No Proxy: 127.0.0.1,172.31.*,172.30.*,172.29.*,172.28.*,172.27.*,172.26.*,172.25.*,172.24.*,172.23.*,172.22.*,172.21.*,172.20.*,172.19.*,172.18.*,172.17.*,172.16.*,10.*,192.168.*,127.*,localhost,<local>
 Labels:
  com.docker.desktop.address=npipe://\\.\pipe\docker_cli
 Experimental: false
 Insecure Registries:
  hubproxy.docker.internal:5555
  ::1/128
  127.0.0.0/8
 Live Restore Enabled: false

WARNING: No blkio throttle.read_bps_device support
WARNING: No blkio throttle.write_bps_device support
WARNING: No blkio throttle.read_iops_device support
WARNING: No blkio throttle.write_iops_device support
WARNING: DOCKER_INSECURE_NO_IPTABLES_RAW is set
WARNING: daemon is not using the default seccomp profile

Diagnostics ID

E08A41C0-0C5E-4F80-9481-CC3AADA6DF29/20250404132805

Additional Info

This issue seems to be related to the mirrored mode of WSL networking. After enabling mirrored mode in WSL network settings, WSL automatically sets variables like HTTP_PROXY in all distros including docker-desktop and I cannot modify them by editing daemon.json or setting Resources->Proxies in Docker Desktop settings.

The connection error seems only to happen in the daemon process, but not in the whole docker-desktop WSL distro environment. The following commands are executed in the docker-desktop WSL distro.

docker-desktop:~# curl https://index.docker.io/v1/search?q=alpine&n=25
{"num_pages":400,"num_results":10000,"page_size":25,"page":1,"query":"alpine","results":[{
(...)

The text was updated successfully, but these errors were encountered:

simexce · 2025-04-05T15:50:21Z

It happened to me, too.

(HTTP code 500) server error - Get "https://registry-1.docker.io/v2/": proxyconnect tcp: dial tcp 127.0.0.1:1080: connect: connection refused

derekxia1988 · 2025-04-09T03:30:33Z

The same issue after upgraded Docker Desktop to 4.40.0.

LRainner · 2025-04-17T14:25:43Z

The same to me, i can curl but docker proxy is error

➜ ~  docker search mongo
Error response from daemon: Get "https://index.docker.io/v1/search?q=mongo&n=25": proxyconnect tcp: dial tcp 127.0.0.1:7897: connect: connection refused
➜ ~  ✗ curl.exe -v http://google.com --proxy http://127.0.0.1:7897
* Uses proxy env variable no_proxy == 'localhost,127.0.0.*'
*   Trying 127.0.0.1:7897...
* Connected to 127.0.0.1 (127.0.0.1) port 7897
* using HTTP/1.x
> GET http://google.com/ HTTP/1.1
> Host: google.com
> User-Agent: curl/8.11.1
> Accept: */*
> Proxy-Connection: Keep-Alive
>
* Request completely sent off
< HTTP/1.1 301 Moved Permanently
< Content-Length: 219
< Cache-Control: public, max-age=2592000
< Connection: keep-alive
< Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-snrpghk1r91yD0h5h6WvEg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp
< Content-Type: text/html; charset=UTF-8
< Date: Thu, 17 Apr 2025 14:15:20 GMT
< Expires: Sat, 17 May 2025 14:15:20 GMT
< Keep-Alive: timeout=4
< Location: http://www.google.com/
< Proxy-Connection: keep-alive
< Server: gws
< X-Frame-Options: SAMEORIGIN
< X-Xss-Protection: 0
<
<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
<TITLE>301 Moved</TITLE></HEAD><BODY>
<H1>301 Moved</H1>
The document has moved
<A HREF="http://www.google.com/">here</A>.
</BODY></HTML>
* Connection #0 to host 127.0.0.1 left intact*

docker info

Client:
 Version:    28.0.4
 Context:    desktop-linux
 Debug Mode: false
 Plugins:
  ai: Docker AI Agent - Ask Gordon (Docker Inc.)
    Version:  v1.1.3
    Path:     C:\Program Files\Docker\cli-plugins\docker-ai.exe
  buildx: Docker Buildx (Docker Inc.)
    Version:  v0.22.0-desktop.1
    Path:     C:\Users\LRainner\.docker\cli-plugins\docker-buildx.exe
  cloud: Docker Cloud (Docker Inc.)
    Version:  0.2.20
    Path:     C:\Program Files\Docker\cli-plugins\docker-cloud.exe
  compose: Docker Compose (Docker Inc.)
    Version:  v2.34.0-desktop.1
    Path:     C:\Users\LRainner\.docker\cli-plugins\docker-compose.exe
  debug: Get a shell into any image or container (Docker Inc.)
    Version:  0.0.38
    Path:     C:\Users\LRainner\.docker\cli-plugins\docker-debug.exe
  desktop: Docker Desktop commands (Beta) (Docker Inc.)
    Version:  v0.1.6
    Path:     C:\Users\LRainner\.docker\cli-plugins\docker-desktop.exe
  dev: Docker Dev Environments (Docker Inc.)
    Version:  v0.1.2
    Path:     C:\Users\LRainner\.docker\cli-plugins\docker-dev.exe
  extension: Manages Docker extensions (Docker Inc.)
    Version:  v0.2.27
    Path:     C:\Users\LRainner\.docker\cli-plugins\docker-extension.exe
  init: Creates Docker-related starter files for your project (Docker Inc.)
    Version:  v1.4.0
    Path:     C:\Users\LRainner\.docker\cli-plugins\docker-init.exe
  sbom: View the packaged-based Software Bill Of Materials (SBOM) for an image (Anchore Inc.)
    Version:  0.6.0
    Path:     C:\Users\LRainner\.docker\cli-plugins\docker-sbom.exe
  scout: Docker Scout (Docker Inc.)
    Version:  v1.17.0
    Path:     C:\Program Files\Docker\cli-plugins\docker-scout.exe
WARNING: Plugin "C:\\Users\\LRainner\\.docker\\cli-plugins\\docker-feedback.exe" is not valid: failed to fetch metadata: fork/exec C:\Users\LRainner\.docker\cli-plugins\docker-feedback.exe: The system cannot find the file specified.

Server:
 Containers: 1
  Running: 0
  Paused: 0
  Stopped: 1
 Images: 3
 Server Version: 28.0.4
 Storage Driver: overlay2
  Backing Filesystem: extfs
  Supports d_type: true
  Using metacopy: false
  Native Overlay Diff: true
  userxattr: false
 Logging Driver: json-file
 Cgroup Driver: cgroupfs
 Cgroup Version: 1
 Plugins:
  Volume: local
  Network: bridge host ipvlan macvlan null overlay
  Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
 CDI spec directories:
  /etc/cdi
  /var/run/cdi
 Swarm: inactive
 Runtimes: io.containerd.runc.v2 nvidia runc
 Default Runtime: runc
 Init Binary: docker-init
 containerd version: 753481ec61c7c8955a23d6ff7bc8e4daed455734
 runc version: v1.2.5-0-g59923ef
 init version: de40ad0
 Security Options:
  seccomp
   Profile: unconfined
 Kernel Version: 5.15.133.1-microsoft-standard-WSL2
 Operating System: Docker Desktop
 OSType: linux
 Architecture: x86_64
 CPUs: 20
 Total Memory: 31.22GiB
 Name: docker-desktop
 ID: 9dda2957-467b-4b14-bad7-3c37bbb9a78f
 Docker Root Dir: /var/lib/docker
 Debug Mode: false
 HTTP Proxy: http://127.0.0.1:7897
 HTTPS Proxy: http://127.0.0.1:7897
 No Proxy: 172.31.*,172.30.*,172.29.*,172.28.*,172.27.*,172.26.*,172.25.*,172.24.*,172.23.*,172.22.*,172.21.*,172.20.*,172.19.*,172.18.*,172.17.*,172.16.*,10.*,192.168.*,127.*,localhost,<local>
 Labels:
  com.docker.desktop.address=npipe://\\.\pipe\docker_cli
 Experimental: false
 Insecure Registries:
  hubproxy.docker.internal:5555
  ::1/128
  127.0.0.0/8
 Live Restore Enabled: false

WARNING: No blkio throttle.read_bps_device support
WARNING: No blkio throttle.write_bps_device support
WARNING: No blkio throttle.read_iops_device support
WARNING: No blkio throttle.write_iops_device support
WARNING: DOCKER_INSECURE_NO_IPTABLES_RAW is set
WARNING: daemon is not using the default seccomp profile

docker version

Client:
 Version:           28.0.4
 API version:       1.48
 Go version:        go1.23.7
 Git commit:        b8034c0
 Built:             Tue Mar 25 15:07:48 2025
 OS/Arch:           windows/amd64
 Context:           desktop-linux

Server: Docker Desktop 4.40.0 (187762)
 Engine:
  Version:          28.0.4
  API version:      1.48 (minimum version 1.24)
  Go version:       go1.23.7
  Git commit:       6430e49
  Built:            Tue Mar 25 15:07:22 2025
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          1.7.26
  GitCommit:        753481ec61c7c8955a23d6ff7bc8e4daed455734
 runc:
  Version:          1.2.5
  GitCommit:        v1.2.5-0-g59923ef
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0

LRainner · 2025-04-17T14:51:12Z

I remove the wsl config networkingMode=mirrored, restart wsl, it seems ok. I want to know that's why

Halfknow · 2025-04-22T09:48:28Z

The same to me. After I remove the wsl config networkingMode=mirrored, restart wsl, all the network problems of docker desktop are fixed. However, my wsl network is not on my host proxy now, it's not reasonable.

luochuanyuewu · 2025-04-28T01:10:55Z

Same here.

utaaaaaaaaaa · 2025-05-01T15:04:10Z

I remove the wsl config networkingMode=mirrored, restart wsl, it seems ok. I want to know that's why

thanks, it works!

ycyaw66 · 2025-05-09T10:50:55Z

The same to me. After I remove the wsl config networkingMode=mirrored, restart wsl, all the network problems of docker desktop are fixed. However, my wsl network is not on my host proxy now, it's not reasonable.

Thanks, it works too

AnicoderAndy added the needs-triage label Apr 4, 2025

docker-robot bot added the version/4.40.0 label Apr 4, 2025

bsousaa added area/network status/triage area/WSL2 and removed needs-triage labels Apr 4, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Daemon: proxy connection refused - using system proxy in Windows #14706

Daemon: proxy connection refused - using system proxy in Windows #14706

AnicoderAndy commented Apr 4, 2025

simexce commented Apr 5, 2025

derekxia1988 commented Apr 9, 2025

LRainner commented Apr 17, 2025

LRainner commented Apr 17, 2025

Halfknow commented Apr 22, 2025

luochuanyuewu commented Apr 28, 2025

utaaaaaaaaaa commented May 1, 2025

ycyaw66 commented May 9, 2025

Daemon: proxy connection refused - using system proxy in Windows #14706

Daemon: proxy connection refused - using system proxy in Windows #14706

Comments

AnicoderAndy commented Apr 4, 2025

Description

Reproduce

Expected behavior

docker version

docker info

Diagnostics ID

Additional Info

simexce commented Apr 5, 2025

derekxia1988 commented Apr 9, 2025

LRainner commented Apr 17, 2025

LRainner commented Apr 17, 2025

Halfknow commented Apr 22, 2025

luochuanyuewu commented Apr 28, 2025

utaaaaaaaaaa commented May 1, 2025

ycyaw66 commented May 9, 2025