diff --git a/net/openconnect/README b/net/openconnect/README
index e7c60d7654..1a645773a3 100644
--- a/net/openconnect/README
+++ b/net/openconnect/README
@@ -11,6 +11,7 @@ config interface 'MYVPN'
 	option password 'secret'
 	option serverhash 'AE7FF6A0426F0A0CD0A02EB9EC3C5066FAEB0B25'
 	option defaultroute '0'
+	# option proxy 'http://proxy.example.com:8080'
 	option authgroup 'DEFAULT'
 	# usergroup option, if required by some servers
 	# option usergroup 'USERGROUP'
diff --git a/net/openconnect/files/openconnect.sh b/net/openconnect/files/openconnect.sh
index 6a7d122750..449ce8bc3b 100755
--- a/net/openconnect/files/openconnect.sh
+++ b/net/openconnect/files/openconnect.sh
@@ -32,6 +32,7 @@ proto_openconnect_init_config() {
 	proto_config_add_string "token_script"
 	proto_config_add_string "os"
 	proto_config_add_string "csd_wrapper"
+	proto_config_add_string "proxy"
 	proto_config_add_array 'form_entry:regex("[^:]+:[^=]+=.*")'
 	no_device=1
 	available=1
@@ -57,6 +58,7 @@ proto_openconnect_setup() {
 		password \
 		password2 \
 		port \
+		proxy \
 		server \
 		serverhash \
 		token_mode \
@@ -131,6 +133,7 @@ proto_openconnect_setup() {
 	[ -n "$token_secret" ] && append_args "--token-secret=$token_secret"
 	[ -n "$os" ] && append_args "--os=$os"
 	[ -n "$csd_wrapper" ] && [ -x "$csd_wrapper" ] && append_args "--csd-wrapper=$csd_wrapper"
+	[ -n "$proxy" ] && append_args "--proxy=$proxy"
 
 	json_for_each_item proto_openconnect_add_form_entry form_entry