The classic three levels
Proxies have traditionally been grouped into three anonymity levels, based on what HTTP headers they add to your requests.
Transparent proxies
A transparent proxy passes your real IP address to the website, usually in the X-Forwarded-For header, and announces that a proxy is in use via the Via header. It provides no anonymity. Transparent proxies are common in corporate networks, schools and ISPs for caching and filtering, where the goal is control rather than privacy.
Anonymous proxies
An anonymous proxy hides your real IP address but still reveals that a proxy is being used, typically by adding a Via or Proxy-Connection header, or an X-Forwarded-For header containing the proxy's own IP. The website doesn't know who you are, but it knows you're using a proxy and may treat you with suspicion.
Elite (high-anonymity) proxies
An elite proxy adds no identifying headers at all. To the website, the request looks like it came directly from the proxy's IP as an ordinary user. All reputable commercial proxies, including residential, ISP, datacenter and mobile proxies, are elite by default.
| Level | Hides your IP | Hides proxy use (headers) | Typical source |
|---|---|---|---|
| Transparent | No | No | Corporate/ISP caches |
| Anonymous | Yes | No | Old servers, free lists |
| Elite | Yes | Yes | Commercial providers |
The headers that give you away
X-Forwarded-For: 198.51.100.7(your real IP, or a chain of IPs)X-Real-IPForwarded: for=198.51.100.7(the standardised version)Via: 1.1 proxy-serverProxy-Connection: keep-aliveX-Proxy-ID,Client-IPand assorted vendor headers
Important: HTTPS hides headers from the proxy
When you browse an HTTPS site through a CONNECT tunnel, the proxy can't add headers to your encrypted requests at all. So header-based anonymity leaks mostly apply to plain-HTTP traffic. The modern ways proxies get detected are different (see below). For the mechanics, read how proxies work.
How websites detect proxies today
Since commercial proxies don't add headers, websites detect them in other ways:
- IP reputation and ASN. Is the IP registered to a hosting company? Is it on a known proxy or abuse list? This is why datacenter proxies are easier to spot. See IP reputation and proxies.
- Behaviour. Request rates, navigation patterns, timing.
- Fingerprint mismatches. A browser timezone of Berlin with an IP in Texas. See browser fingerprinting and proxies.
- Leaks. WebRTC and DNS revealing your real IP or location. See WebRTC leaks and DNS leaks.
- Network-level signals. TCP/IP fingerprinting (e.g. the operating system implied by packet characteristics doesn't match the user agent), and latency patterns.
In other words, "elite" is now the bare minimum. Real-world anonymity depends far more on the IP type and how you configure your client.
Proxy tip: A practical next step is to run a few requests through a commercial pool and watch what changes. Geonode supports HTTP, HTTPS and SOCKS5 and lets you switch between rotating and sticky sessions from the same endpoint. We walk through it in our Geonode proxies guide.
How to test your proxy's anonymity
Request a header-echo service through the proxy over plain HTTP:
curl -x http://USER:PASS@proxy.example.com:8080 http://httpbin.org/headers
curl -x http://USER:PASS@proxy.example.com:8080 http://httpbin.org/ipCheck that the IP is the proxy's and that no X-Forwarded-For, Via or Forwarded header appears. Then test in a browser on a leak-test site for WebRTC and DNS. Full checklist: how to check if a proxy works.
Anonymity by proxy type
| Proxy type | Header anonymity | Detectability as a proxy | Notes |
|---|---|---|---|
| Commercial datacenter | Elite | High (hosting ASN) | Websites know the ranges |
| Commercial ISP | Elite | Low to moderate | Residential ASN, server behaviour |
| Commercial residential | Elite | Low | Real consumer IPs |
| Commercial mobile | Elite | Very low | Carrier CGNAT |
| Free public proxies | Varies, often transparent/anonymous | High | Often listed and abused |
| Corporate gateways | Often transparent | N/A | Designed for control, not anonymity |
"Elite" header behaviour is table stakes. The real differentiator is the IP type, because that's what modern detection relies on. See residential vs datacenter proxies.
Anonymity vs privacy vs security
These words get mixed up:
- Anonymity: the website can't tell who you are. A proxy hides your IP; fingerprints and accounts may still identify you.
- Privacy: third parties (your ISP, the proxy provider) can't see what you do. A proxy shifts visibility from your ISP to the proxy provider.
- Security: your data is protected from tampering and interception. HTTPS provides this end-to-end; a proxy doesn't add it.
If privacy and security from your local network are the goal, a VPN is often the better tool. See proxy vs VPN.
A layered anonymity checklist
- IP: an elite proxy of the right type for your target.
- Headers: no proxy-revealing headers (test over HTTP).
- DNS: no local DNS leaks. See DNS leaks.
- WebRTC: no real IP exposure in browsers. See WebRTC leaks.
- Fingerprint: consistent with the IP's location. See browser fingerprinting.
- Cookies and accounts: separated per identity.
- Behaviour: human-paced where it matters.
What your proxy provider can see and keep
Anonymity levels describe what the website learns. They say nothing about what the provider learns, which is the other half of the picture. A typical commercial provider can record:
- your account identity and billing details, often with identity checks for residential and mobile products;
- the IP you connect from, timestamps and how much data you transfer;
- the hostnames you connect to, from CONNECT requests or SOCKS5 destinations;
- full request and response content only for plain-HTTP traffic, or if you've trusted its certificate for TLS interception.
Reputable providers keep some of this to investigate abuse and respond to lawful requests, and they say so in their privacy policy. That's a reasonable trade: the same records protect the residential peers whose connections you're borrowing. What you're looking for is clarity. How long are logs kept? Are destinations logged, or only bandwidth? Who inside the company can access them?
Ask before you buy, using the proxy provider checklist. Vague or evasive answers are one of the classic proxy provider red flags, and so are promises of "no logs whatsoever" from a provider that also claims to police abuse, since the two are hard to square.
If your goal is privacy from everyone, including the company you pay, a proxy is the wrong tool. Read proxy vs VPN and think honestly about who you need protection from.
FAQ
Are free proxies elite?
Some claim to be. Many aren't, and many are monitored. See risks of free proxies.
Does an elite proxy make me completely anonymous?
No. It hides your IP. Your browser fingerprint, cookies, accounts and behaviour can still identify you.
Do I need to pay extra for elite proxies?
No. Every reputable paid provider sells elite proxies as standard.
Editorial note: Proxy providers change their pools, features and prices often, so treat any figures here as typical ranges at the time of writing and confirm current terms with the provider before you buy.