DNF 4’s proxy= and no_proxy Do Different Jobs

For ordinary repositories, keep the configured main proxy:

[main]
proxy=http://proxy.example:8080

In the existing internal section, disable that inheritance with:

[internal]
proxy=

Keep its trusted base URL, keys and verification settings. Another full proxy URL here can instead select a different intermediary. For public repositories allowed through an unauthenticated public proxy, the HTTP proxy list supplies candidates for the main URL; preserve the internal repository’s direct exceptions.

Also inspect curl environment fallback. DNF documents it when proxy is unset, including legacy _none_. Removing a config input alone does not guarantee direct access under an inherited environment.

For the intended direct host, merge the process exception:

export no_proxy=packages.internal.example

Mirror lists and redirects can add hosts. Apply these DNF 4 rules to that version, without importing legacy Yum or DNF 5 assumptions.