for performance assume internal network does not have proxy