Suppose there are multiple subsystems installed on the same machine. If proxy is enabled, currently all communications among the subsystems are done via the proxy ports. Since they are on the same machine, they can actually communicate directly and more efficiently through the internal ports.

To use the internal ports, however, new parameters may need to be added to the default.cfg and CS.cfg. Also, some changes need to be done to the code at certain locations. It's possible to minimize the changes by limiting it to certain operations only (e.g. KRA connector), and everything else will continue to use the proxy ports.

The other option is to leave the code as is and make sure all required URL's are mapped correctly in the proxy configuration. The advantage is suppose the subsystems are later moved to separate machines all proxy configurations are already setup. However, maintaining an accurate URL list may become a maintenance issue for projects such as IPA that expose certain parts of Dogtag interface through proxy.