The proxy runs on Windows or Linux servers inside your network. It listens for authentication requests (RADIUS or LDAP), reaches out to Duo’s cloud service to verify the user’s second factor, and then forwards the success/failure back to the requesting device.
Edit the configuration file (location varies by OS). Example for RADIUS with Active Directory: duo authentication proxy configuration