{% extends 'base.html' %}
{% block title %}VPS & proxy setup · Quantzy{% endblock %}
{% block content %}
<section class="page-heading"><p class="eyebrow">YOUR ORDER CONNECTION</p><h1>Your IP. Your broker connection.</h1><p class="intro">Access Quantzy from your phone, home or office. Broker API requests travel through the VPS or proxy saved to your connection.</p></section>
<section class="settings-form">
  <div class="panel"><h2>Two different IPs</h2><dl><div><dt>Browser sign-in IP</dt><dd>Your current internet connection</dd></div><div><dt>Broker API / order IP</dt><dd>Your verified VPS or proxy outgoing IP</dd></div></dl><p>A broker sign-in page opened in your browser still uses your browser's connection. Quantzy's server-side broker API requests use your saved route.</p><p class="note">Browser → Quantzy connection → Your VPS / proxy → Broker</p></div>
  <div class="panel" id="own-vps"><p class="eyebrow">OPTION 01</p><h2>My own VPS</h2><ol>
    <li>Use a VPS with a fixed public IPv4 address. Keep it available while your connection is trading.</li>
    <li>Install an HTTP CONNECT proxy service on that VPS. Squid is one supported approach; require a dedicated proxy username and password.</li>
    <li>Restrict access to the proxy port to Quantzy's server IP: <strong>{{ server_ip }}</strong>. Allow HTTPS CONNECT to broker services; keep private and metadata networks blocked.</li>
    <li>In My broker → Manage broker & proxy, choose <strong>My own VPS</strong>. Enter the VPS IP, proxy port, proxy username and proxy password.</li>
    <li>Enter the fixed outgoing IP registered with your broker and choose <strong>Verify IP & save</strong>. For a VPS, this is usually its public IP.</li>
  </ol><p class="note">Quantzy needs the proxy service login, not your VPS SSH/root password. An IP address without a running proxy service cannot forward orders.</p><p class="fine"><a href="https://ubuntu.com/server/docs/how-to/web-services/install-a-squid-server/" target="_blank" rel="noopener">Ubuntu: installing Squid ↗</a> · <a href="https://wiki.squid-cache.org/Features/Authentication" target="_blank" rel="noopener">Squid: configuring authentication ↗</a></p></div>
  <div class="panel" id="proxy-provider"><p class="eyebrow">OPTION 02</p><h2>Proxy provider</h2><p>Ask your provider for a fixed, non-rotating IPv4 HTTP proxy that supports CONNECT. You need its server IP, port, username, password and fixed outgoing IP. The server IP and outgoing IP can be different.</p><p>Choose <strong>Proxy provider</strong>, enter those details, then whitelist the outgoing IP with your broker where required.</p></div>
  <div class="panel"><h2>What the verification means</h2><p>Quantzy checks the actual outgoing IP against the address you entered when saving and before starting the connection. A mismatch or unavailable connection blocks startup. A proxy connection cannot silently switch to direct server egress.</p><p>The check does not prove that an IP was whitelisted in your broker account, and it does not guarantee a rotating provider will retain the same IP later. Use a fixed outgoing IP and complete your broker's own whitelist setup.</p><p>Changing this route requires stopping the connection. Stopping or changing a connection does not close broker positions.</p></div>
  <div class="panel"><h2>IIFL Capital live feed</h2><p>Your proxy must also allow CONNECT to <code>bridge.iiflcapital.com:8883</code> for market data and order updates. Ask your proxy provider to enable this destination. <a href="https://developers.iiflcapital.com/apidocs/marketdatastream" target="_blank" rel="noopener">IIFL connection requirements ↗</a></p></div>
  <a class="button" href="/account/workspace">Back to my broker →</a>
</section>
{% endblock %}