Apache may need to reach an external site through the same corporate forward proxy used by other machines. For requests handled by mod_proxy, ProxyRemote selects that next hop.

ProxyRemote "http://downloads.example/" "http://proxy.example:8080"

The first argument matches the destination URL prefix. The second identifies the upstream proxy. A scheme name can match that protocol, while * is broader and selects the remote proxy for all matching proxy traffic.

This can also serve a fixed local mapping. If an existing ProxyPass sends a local path to the downloads site, ProxyRemote tells Apache how to reach that site through the corporate intermediary. ProxyPass selects the mapped destination; ProxyRemote selects its upstream route.

You do not need to enable unrestricted forward-proxy access for that fixed mapping. Keep ProxyRequests Off unless accepting client-supplied forward-proxy destinations is an intentional, access-controlled service.

Put the rule in server or virtual-host configuration and ensure the necessary proxy modules are loaded. Apache's NoProxy directive can identify intranet destinations that should avoid the remote proxy.

For an upstream requiring Basic credentials, the optional third argument is available in httpd 2.4.59 and later and sends them preemptively. Check the deployed version and protect that configuration before using the credential form.

Artiglyn mynjee