# Manage Proxy Service

Onsite Proxy runs two background services: one that forwards call traffic through the encrypted tunnel, and one that reports the tunnel's health back to your PBX (private branch exchange, the phone system that manages your extensions and calls). This page explains what each service does and how to control it from the Onsite Proxy host's command line.

:::note
When you supply the connection details during installation, both services come up on their own. You only need the commands below to check on a service or bring it back after a manual stop.
:::

## Prerequisites

You have [installed Onsite Proxy](/pbx/onsite-proxy-guide/install-onsite-proxy/).

## Open a root shell

Every command below is run as `root` on the Onsite Proxy host.

1. Open a command line on the host running Onsite Proxy.
2. Switch to the root account:

   ```bash
   sudo -i
   ```

   If you are prompted for a password, type the password for your current user and press `Enter`. Once you are root, the prompt ends in `#` instead of `$`.

:::tip
To see whether a service is currently running before or after you change it, run `systemctl status proxycore.service` (or `proxycron.service`). The output shows `active (running)` when the service is up.
:::

## Tunnel forwarding service

While this service is running, Onsite Proxy relays SIP (Session Initiation Protocol, the messages that set up and tear down calls) signaling and RTP (Real-time Transport Protocol, the live audio) between your IP phones and the PBX through the encrypted tunnel, keeping that traffic secure end to end.

Run the command that matches what you need:

| Action | Command |
|--------|---------|
| Start the service | `systemctl start proxycore.service` |
| Stop the service | `systemctl stop proxycore.service` |
| Restart the service | `systemctl restart proxycore.service` |

:::caution
Stopping or restarting the forwarding service tears down the tunnel that carries call traffic. Any calls in progress drop immediately, and phones lose their connection to the PBX until the service is running again. Do this only during a maintenance window or when no one is on a call.
:::

## Tunnel status reporting service

While this service is running, Onsite Proxy sends connectivity health and operational metrics to the PBX at regular intervals, giving you the data you need for monitoring and diagnostics.

Run the command that matches what you need:

| Action | Command |
|--------|---------|
| Start the service | `systemctl start proxycron.service` |
| Stop the service | `systemctl stop proxycron.service` |
| Restart the service | `systemctl restart proxycron.service` |

:::note
Stopping this reporting service does not affect calls, since it only sends health and status data. The tunnel keeps forwarding traffic. The one visible effect is that the PBX stops receiving updates, so it may show the proxy as offline or unmonitored until the service is running again.
:::