httpcorexyz

[!IMPORTANT]
We started this fork because there was no activity on HTTPX, a very popular Python HTTP library.

A few weeks later, Pydantic started their own fork called HTTPX2. We decided to embrace this and support HTTPX2. We're upstreaming our fixes to HTTPX2 and in our opinion it should be the "blessed" fork. Pydantic can make this more successful than we ever can.

See also https://tildeweb.nl/~michiel/httpx2.html

Thanks for all your support!

Sander & Michiel

The HTTP Core XYZ package provides a minimal low-level HTTP client, which does one thing only. Sending HTTP requests.

It is a fork of the httpcore package, which had its last release over a year ago at this point and has multiple issues that are not addressed

This package does not provide any high level model abstractions over the API, does not handle redirects, multipart uploads, building authentication headers, transparent HTTP caching, URL parsing, session cookie handling, content or charset decoding, handling JSON, environment based configuration defaults, or any of that Jazz.

Some things HTTP Core XYZ does do:

Sending HTTP requests.
Thread-safe / task-safe connection pooling.
HTTP(S) proxy & SOCKS proxy support.
Supports HTTP/1.1 and HTTP/2.
Provides both sync and async interfaces.
Async backend support for asyncio and trio.

Requirements

Python 3.9+

Installation

For HTTP/1.1 only support, install with:

$ pip install httpcorexyz

There are also a number of optional extras available...

$ pip install httpcorexyz['asyncio,trio,http2,socks']

Sending requests

Send an HTTP request:

import httpcorexyz

response = httpcorexyz.request("GET", "https://www.example.com/")

print(response)
# <Response [200]>
print(response.status)
# 200
print(response.headers)
# [(b'Accept-Ranges', b'bytes'), (b'Age', b'557328'), (b'Cache-Control', b'max-age=604800'), ...]
print(response.content)
# b'<!doctype html>\n<html>\n<head>\n<title>Example Domain</title>\n\n<meta charset="utf-8"/>\n ...'

The top-level httpcorexyz.request() function is provided for convenience. In practice whenever you're working with httpcorexyz you'll want to use the connection pooling functionality that it provides.

import httpcorexyz

http = httpcorexyz.ConnectionPool()
response = http.request("GET", "https://www.example.com/")

Once you're ready to get going, head over to the documentation.

Motivation

You probably don't want to be using HTTP Core directly. It might make sense if you're writing something like a proxy service in Python, and you just want something at the lowest possible level, but more typically you'll want to use a higher level client library, such as httpxyz.

The motivation for httpcorexyz is:

To provide a reusable low-level client library, that other packages can then build on top of.
To provide a really clear interface split between the networking code and client logic, so that each is easier to understand and reason about in isolation.

Dependencies

The httpcorexyz package has the following dependencies...

h11
certifi

And the following optional extras...

anyio - Required by pip install httpcorexyz['asyncio'].
trio - Required by pip install httpcorexyz['trio'].
h2 - Required by pip install httpcorexyz['http2'].
socksio - Required by pip install httpcorexyz['socks'].

Versioning

We use SEMVER for our versioning policy.

For changes between package versions please see our project changelog.

We recommend pinning your requirements either the most current major version, or a more specific version range:

pip install 'httpcorexyz==1.*'

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

Version 1.2.1 (September 4, 2026)

Documentation moved to https://httpxyz.x14.nl/httpcorexyz/ — the httpxyz.org domain is being allowed to lapse. No code changes.

Version 1.2.0 (September 3, 2026)

Pydantic started a fork of httpx called httpx2 This includes httpcore/httpcorexyz. we bless it and contributed many of our fixes to them. We recommend all users to move to their package. See also https://tildeweb.nl/~michiel/httpx2.html

Kindest regards, Sander and Michiel

Version 1.1.1 (May 8, 2026)

Bug fixes

Mirror already-loaded httpcorexyz.* submodules into httpcore.* in sys.modules when claiming the httpcore alias. Fixes tools that patch by submodule path, e.g. mock.patch("httpcore._sync.connection_pool.ConnectionPool") as used by respx. Thanks to @rgant.

Version 1.1.0 (April 25, 2026)

Performance

Use anyio.Lock(fast_acquire=True) and anyio.Semaphore(fast_acquire=True) to skip unnecessary event loop yields on uncontended lock acquires. Reduces async GET latency by ~3.3x. Reinstates encode/httpcore#953 which was reverted upstream for non-technical reasons. Requires anyio >= 4.5.0.
Retire map_exceptions() context manager in favour of plain try/except on hot paths (socket reads, writes, connects). try/except with no exception is nearly free; @contextmanager-based with blocks have measurable overhead. (encode/httpcore#1044)
Make Origin hashable via Origin.__hash__() for use in sets and dicts. (encode/httpcore#1038)

Bug fixes

Release the HTTP/2 max-streams semaphore and decrement _concurrent_streams when NoAvailableStreamIDError is raised, preventing permanent deadlock. (encode/httpcore#1061)
Move del self._events[stream_id] inside the _state_lock in _response_closed() to prevent a race condition with concurrent coroutines. (encode/httpcore#1062)
Close proxy connection when tunnel TLS handshake fails, preventing the pool from stalling at max_connections. (encode/httpcore#1049)
Propagate the connect timeout through the SOCKS5 handshake to prevent indefinite hangs with non-responsive proxies. (encode/httpcore#1055)
Explicitly close async generators via safe_async_iterate() context managers to prevent Trio warnings and unpredictable GC-dependent behaviour. (encode/httpcore#1019)
Reduce lock contention in PoolByteStream.close(): pool requests are marked as closed outside the lock and cleaned up lazily inside _assign_requests_to_connections(). (encode/httpcore#1038)

Changed

Minimum anyio version bumped from >=4.0 to >=4.5.0 (required for fast_acquire).

Version 1.0.10 (April 11, 2026) FIRST RELEASE AS HTTPCOREXYZ

Renamed to httpcorexyz
Fix max_keepalive_connections not being properly handled. (#1000)

Version 1.0.9 (April 24th, 2025)

Resolve https://github.com/advisories/GHSA-vqfr-h8mv-ghfj with h11 dependency update. (#1008)

Version 1.0.8 (April 11th, 2025)

Fix AttributeError when importing on Python 3.14. (#1005)

Version 1.0.7 (November 15th, 2024)

Support proxy=… configuration on ConnectionPool(). (#974)

Version 1.0.6 (October 1st, 2024)

Relax trio dependency pinning. (#956)
Handle trio raising NotImplementedError on unsupported platforms. (#955)
Handle mapping ssl.SSLError to httpcore.ConnectError. (#918)

1.0.5 (March 27th, 2024)

Handle EndOfStream exception for anyio backend. (#899)
Allow trio 0.25.* series in package dependencies. (#903)

1.0.4 (February 21st, 2024)

Add target request extension. (#888)
Fix support for connection Upgrade and CONNECT when some data in the stream has been read. (#882)

1.0.3 (February 13th, 2024)

Fix support for async cancellations. (#880)
Fix trace extension when used with socks proxy. (#849)
Fix SSL context for connections using the "wss" scheme (#869)

1.0.2 (November 10th, 2023)

Fix float("inf") timeouts in Event.wait function. (#846)

1.0.1 (November 3rd, 2023)

Fix pool timeout to account for the total time spent retrying. (#823)
Raise a neater RuntimeError when the correct async deps are not installed. (#826)
Add support for synchronous TLS-in-TLS streams. (#840)

1.0.0 (October 6th, 2023)

From version 1.0 our async support is now optional, as the package has minimal dependencies by default.

For async support use either pip install 'httpcore[asyncio]' or pip install 'httpcore[trio]'.

The project versioning policy is now explicitly governed by SEMVER. See https://semver.org/.

Async support becomes fully optional. (#809)
Add support for Python 3.12. (#807)

0.18.0 (September 8th, 2023)

Add support for HTTPS proxies. (#745, #786)
Drop Python 3.7 support. (#727)
Handle sni_hostname extension with SOCKS proxy. (#774)
Handle HTTP/1.1 half-closed connections gracefully. (#641)
Change the type of Extensions from Mapping[Str, Any] to MutableMapping[Str, Any]. (#762)

0.17.3 (July 5th, 2023)

Support async cancellations, ensuring that the connection pool is left in a clean state when cancellations occur. (#726)
The networking backend interface has been added to the public API. Some classes which were previously private implementation detail are now part of the top-level public API. (#699)
Graceful handling of HTTP/2 GoAway frames, with requests being transparently retried on a new connection. (#730)
Add exceptions when a synchronous trace callback is passed to an asynchronous request or an asynchronous trace callback is passed to a synchronous request. (#717)
Drop Python 3.7 support. (#727)

0.17.2 (May 23th, 2023)

Add socket_options argument to ConnectionPool and HTTProxy classes. (#668)
Improve logging with per-module logger names. (#690)
Add sni_hostname request extension. (#696)
Resolve race condition during import of anyio package. (#692)
Enable TCP_NODELAY for all synchronous sockets. (#651)

0.17.1 (May 17th, 2023)

If 'retries' is set, then allow retries if an SSL handshake error occurs. (#669)
Improve correctness of tracebacks on network exceptions, by raising properly chained exceptions. (#678)
Prevent connection-hanging behaviour when HTTP/2 connections are closed by a server-sent 'GoAway' frame. (#679)
Fix edge-case exception when removing requests from the connection pool. (#680)
Fix pool timeout edge-case. (#688)

0.17.0 (March 16th, 2023)

Add DEBUG level logging. (#648)
Respect HTTP/2 max concurrent streams when settings updates are sent by server. (#652)
Increase the allowable HTTP header size to 100kB. (#647)
Add retries option to SOCKS proxy classes. (#643)

0.16.3 (December 20th, 2022)

Allow ws and wss schemes. Allows us to properly support websocket upgrade connections. (#625)
Forwarding HTTP proxies use a connection-per-remote-host. Required by some proxy implementations. (#637)
Don't raise RuntimeError when closing a connection pool with active connections. Removes some error cases when cancellations are used. (#631)
Lazy import anyio, so that it's no longer a hard dependency, and isn't imported if unused. (#639)

0.16.2 (November 25th, 2022)

Revert 'Fix async cancellation behaviour', which introduced race conditions. (#627)
Raise RuntimeError if attempting to us UNIX domain sockets on Windows. (#619)

0.16.1 (November 17th, 2022)

Fix HTTP/1.1 interim informational responses, such as "100 Continue". (#605)

0.16.0 (October 11th, 2022)

Support HTTP/1.1 informational responses. (#581)
Fix async cancellation behaviour. (#580)
Support h11 0.14. (#579)

0.15.0 (May 17th, 2022)

Drop Python 3.6 support (#535)
Ensure HTTP proxy CONNECT requests include timeout configuration. (#506)
Switch to explicit typing.Optional for type hints. (#513)
For trio map OSError exceptions to ConnectError. (#543)

0.14.7 (February 4th, 2022)

Requests which raise a PoolTimeout need to be removed from the pool queue. (#502)
Fix AttributeError that happened when Socks5Connection were terminated. (#501)

0.14.6 (February 1st, 2022)

Fix SOCKS support for http:// URLs. (#492)
Resolve race condition around exceptions during streaming a response. (#491)

0.14.5 (January 18th, 2022)

SOCKS proxy support. (#478)
Add proxy_auth argument to HTTPProxy. (#481)
Improve error message on 'RemoteProtocolError' exception when server disconnects without sending a response. (#479)

0.14.4 (January 5th, 2022)

Support HTTP/2 on HTTPS tunnelling proxies. (#468)
Fix proxy headers missing on HTTP forwarding. (#456)
Only instantiate SSL context if required. (#457)
More robust HTTP/2 handling. (#253, #439, #440, #441)

0.14.3 (November 17th, 2021)

Fix race condition when removing closed connections from the pool. (#437)

0.14.2 (November 16th, 2021)

Failed connections no longer remain in the pool. (Pull #433)

0.14.1 (November 12th, 2021)

max_connections becomes optional. (Pull #429)
certifi is now included in the install dependencies. (Pull #428)
h2 is now strictly optional. (Pull #428)

0.14.0 (November 11th, 2021)

The 0.14 release is a complete reworking of httpcore, comprehensively addressing some underlying issues in the connection pooling, as well as substantially redesigning the API to be more user friendly.

Some of the lower-level API design also makes the components more easily testable in isolation, and the package now has 100% test coverage.

See discussion #419 for a little more background.

There's some other neat bits in there too, such as the "trace" extension, which gives a hook into inspecting the internal events that occur during the request/response cycle. This extension is needed for the HTTPX cli, in order to...

Log the point at which the connection is established, and the IP/port on which it is made.
Determine if the outgoing request should log as HTTP/1.1 or HTTP/2, rather than having to assume it's HTTP/2 if the --http2 flag was passed. (Which may not actually be true.)
Log SSL version info / certificate info.

Note that curio support is not currently available in 0.14.0. If you're using httpcore with curio please get in touch, so we can assess if we ought to prioritize it as a feature or not.

0.13.7 (September 13th, 2021)

Fix broken error messaging when URL scheme is missing, or a non HTTP(S) scheme is used. (Pull #403)

0.13.6 (June 15th, 2021)

Fixed

Close sockets when read or write timeouts occur. (Pull #365)

0.13.5 (June 14th, 2021)

Fixed

Resolved niggles with AnyIO EOF behaviours. (Pull #358, #362)

0.13.4 (June 9th, 2021)

Added

Improved error messaging when URL scheme is missing, or a non HTTP(S) scheme is used. (Pull #354)

Fixed

Switched to anyio as the default backend implementation when running with asyncio. Resolves some awkward TLS timeout issues.

0.13.3 (May 6th, 2021)

Added

Support HTTP/2 prior knowledge, using httpcore.SyncConnectionPool(http1=False). (Pull #333)

Fixed

Handle cases where environment does not provide select.poll support. (Pull #331)

0.13.2 (April 29th, 2021)

Added

Improve error message for specific case of RemoteProtocolError where server disconnects without sending a response. (Pull #313)

0.13.1 (April 28th, 2021)

Fixed

More resilient testing for closed connections. (Pull #311)
Don't raise exceptions on ungraceful connection closes. (Pull #310)

0.13.0 (April 21st, 2021)

The 0.13 release updates the core API in order to match the HTTPX Transport API, introduced in HTTPX 0.18 onwards.

An example of making requests with the new interface is:

with httpcore.SyncConnectionPool() as http:
    status_code, headers, stream, extensions = http.handle_request(
        method=b'GET',
        url=(b'https', b'example.org', 443, b'/'),
        headers=[(b'host', b'example.org'), (b'user-agent', b'httpcore')]
        stream=httpcore.ByteStream(b''),
        extensions={}
    )
    body = stream.read()
    print(status_code, body)

Changed

The .request() method is now handle_request(). (Pull #296)
The .arequest() method is now .handle_async_request(). (Pull #296)
The headers argument is no longer optional. (Pull #296)
The stream argument is no longer optional. (Pull #296)
The ext argument is now named extensions, and is no longer optional. (Pull #296)
The "reason" extension keyword is now named "reason_phrase". (Pull #296)
The "reason_phrase" and "http_version" extensions now use byte strings for their values. (Pull #296)
The httpcore.PlainByteStream() class becomes httpcore.ByteStream(). (Pull #296)

Added

Streams now support a .read() interface. (Pull #296)

Fixed

Task cancellation no longer leaks connections from the connection pool. (Pull #305)

0.12.3 (December 7th, 2020)

Fixed

Abort SSL connections on close rather than waiting for remote EOF when using asyncio. (Pull #167)
Fix exception raised in case of connect timeouts when using the anyio backend. (Pull #236)
Fix Host header precedence for :authority in HTTP/2. (Pull #241, #243)
Handle extra edge case when detecting for socket readability when using asyncio. (Pull #242, #244)
Fix asyncio SSL warning when using proxy tunneling. (Pull #249)

0.12.2 (November 20th, 2020)

Fixed

Properly wrap connect errors on the asyncio backend. (Pull #235)
Fix ImportError occurring on Python 3.9 when using the HTTP/1.1 sync client in a multithreaded context. (Pull #237)

0.12.1 (November 7th, 2020)

Added

Add connect retries. (Pull #221)

Fixed

Tweak detection of dropped connections, resolving an issue with open files limits on Linux. (Pull #185)
Avoid leaking connections when establishing an HTTP tunnel to a proxy has failed. (Pull #223)
Properly wrap OS errors when using trio. (Pull #225)

0.12.0 (October 6th, 2020)

Changed

HTTP header casing is now preserved, rather than always sent in lowercase. (#216 and python-hyper/h11#104)

Added

Add Python 3.9 to officially supported versions.

Fixed

Gracefully handle a stdlib asyncio bug when a connection is closed while it is in a paused-for-reading state. (#201)

0.11.1 (September 28nd, 2020)

Fixed

Add await to async semaphore release() coroutine (#197)
Drop incorrect curio classifier (#192)

0.11.0 (September 22nd, 2020)

The Transport API with 0.11.0 has a couple of significant changes.

Firstly we've moved changed the request interface in order to allow extensions, which will later enable us to support features such as trailing headers, HTTP/2 server push, and CONNECT/Upgrade connections.

The interface changes from:

def request(method, url, headers, stream, timeout):
    return (http_version, status_code, reason, headers, stream)

To instead including an optional dictionary of extensions on the request and response:

def request(method, url, headers, stream, ext):
    return (status_code, headers, stream, ext)

Having an open-ended extensions point will allow us to add later support for various optional features, that wouldn't otherwise be supported without these API changes.

In particular:

Trailing headers support.
HTTP/2 Server Push
sendfile.
Exposing raw connection on CONNECT, Upgrade, HTTP/2 bi-di streaming.
Exposing debug information out of the API, including template name, template context.

Currently extensions are limited to:

request: timeout - Optional. Timeout dictionary.
response: http_version - Optional. Include the HTTP version used on the response.
response: reason - Optional. Include the reason phrase used on the response. Only valid with HTTP/1.*.

See https://github.com/encode/httpx/issues/1274#issuecomment-694884553 for the history behind this.

Secondly, the async version of request is now namespaced as arequest.

This allows concrete transports to support both sync and async implementations on the same class.

Added

Add curio support. (Pull #168)
Add anyio support, with backend="anyio". (Pull #169)

Changed

Update the Transport API to use 'ext' for optional extensions. (Pull #190)
Update the Transport API to use .request and .arequest so implementations can support both sync and async. (Pull #189)

0.10.2 (August 20th, 2020)

Added

Added Unix Domain Socket support. (Pull #139)

Fixed

Always include the port on proxy CONNECT requests. (Pull #154)
Fix max_keepalive_connections configuration. (Pull #153)
Fixes behaviour in HTTP/1.1 where server disconnects can be used to signal the end of the response body. (Pull #164)

0.10.1 (August 7th, 2020)

Include max_keepalive_connections on AsyncHTTPProxy/SyncHTTPProxy classes.

0.10.0 (August 7th, 2020)

The most notable change in the 0.10.0 release is that HTTP/2 support is now fully optional.

Use either pip install httpcore for HTTP/1.1 support only, or pip install httpcore[http2] for HTTP/1.1 and HTTP/2 support.

Added

HTTP/2 support becomes optional. (Pull #121, #130)
Add local_address=... support. (Pull #100, #134)
Add PlainByteStream, IteratorByteStream, AsyncIteratorByteStream. The AsyncByteSteam and SyncByteStream classes are now pure interface classes. (#133)
Add LocalProtocolError, RemoteProtocolError exceptions. (Pull #129)
Add UnsupportedProtocol exception. (Pull #128)
Add .get_connection_info() method. (Pull #102, #137)
Add better TRACE logs. (Pull #101)

Changed

max_keepalive is deprecated in favour of max_keepalive_connections. (Pull #140)

Fixed

Improve handling of server disconnects. (Pull #112)

0.9.1 (May 27th, 2020)

Fixed

Proper host resolution for sync case, including IPv6 support. (Pull #97)
Close outstanding connections when connection pool is closed. (Pull #98)

0.9.0 (May 21th, 2020)

Changed

URL port becomes an Optional[int] instead of int. (Pull #92)

Fixed

Honor HTTP/2 max concurrent streams settings. (Pull #89, #90)
Remove incorrect debug log. (Pull #83)

0.8.4 (May 11th, 2020)

Added

Logging via HTTPCORE_LOG_LEVEL and HTTPX_LOG_LEVEL environment variables and TRACE level logging. (Pull #79)

Fixed

Reuse of connections on HTTP/2 in close concurrency situations. (Pull #81)

0.8.3 (May 6rd, 2020)

Fixed

Include Host and Accept headers on proxy "CONNECT" requests.
De-duplicate any headers also contained in proxy_headers.
HTTP/2 flag not being passed down to proxy connections.

0.8.2 (May 3rd, 2020)

Fixed

Fix connections using proxy forwarding requests not being added to the connection pool properly. (Pull #70)

0.8.1 (April 30th, 2020)

Changed

Allow inherintance of both httpcore.AsyncByteStream, httpcore.SyncByteStream without type conflicts.

0.8.0 (April 30th, 2020)

Fixed

Fixed tunnel proxy support.

### Added

New TimeoutException base class.

0.7.0 (March 5th, 2020)

First integration with HTTPX.

Release files for httpcorexyz 1.2.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for httpcorexyz 1.2.1
File	Size	Uploaded
httpcorexyz-1.2.1.tar.gz	98.6 kB	Sep 4, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for httpcorexyz 1.2.1
File	Interpreter	ABI	Platform	Reset
httpcorexyz-1.2.1-py3-none-any.whl 83.8 kB Sep 4, 2026	Python 3	none	any	Details

Total release size: 182.4 kB

Release files / httpcorexyz-1.2.1.tar.gz

Download URL	httpcorexyz-1.2.1.tar.gz
Size	98.6 kB
Tags	Source
SHA-256 checksum How to use checksums	`43e02cfcd2cd9f9805baabe595b28017a11b7a137f655bb9e4f6d46f14c79c31`
BLAKE2b-256 checksum How to use checksums	`358774e5a89f3201b75e1782e85b7c41b063ee1133e0e5a7567de143dc205a47`
Upload date	Sep 4, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.14.7`

Release files / httpcorexyz-1.2.1-py3-none-any.whl

Download URL	httpcorexyz-1.2.1-py3-none-any.whl
Size	83.8 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`5244d8357e6d5bf245ae0dac65adde7a9dd5dabe3db0bb9499ed0ec92df14ddc`
BLAKE2b-256 checksum How to use checksums	`9e4122d2ca83436d7aa46073ad437fc687c488005d0571db93b25f480d3ccd23`
Upload date	Sep 4, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.14.7`

Release history Release notifications | RSS feed

This release

1.2.1 This release

Sep 4, 2026 2 release files

1.2.0

Sep 3, 2026 2 release files

1.1.1

May 8, 2026 2 release files

1.1.0

Apr 25, 2026 2 release files

1.0.10

Apr 11, 2026 2 release files