Environment Proxy Server Configuration

2 minute read

In your environment proxy servers might exist between an intranet and internet. Because proxy servers can inhibit certain types of internet access, you will need to set proxy settings for each impacted machine in your installation. CloudBees Flow servers or web servers can be deployed behind a proxy server.

It is not a common practice to place repository servers or agent systems behind a proxy server since these systems communicate with CloudBees Flow through an intranet connection.

Configuring Proxy Settings for Servers

Use ecconfigure to set proxy settings for any web server or CloudBees Flow server in your configuration that is deployed behind a proxy server. Repository servers are not typically placed behind a proxy server.

  1. Select the appropriate perl scripts to run depending on the server type.

    • To set CloudBees Flow server proxy settings, enter:

      ec-perl src/ecconfigure.pl --serverProxyHost <IP_ADDRESS_PROXY> --serverProxyPort <PORT> --serverNoProxyHosts "<HOST1,HOST2>"

    • To set web server proxy settings, enter:

      ec-perl src/ecconfigure.pl --webProxyUrl https://<IP_ADDRESS:PORT> --webNoProxyHosts <HOST1,HOST2,HOST3>

Where:

<IP_ADDRESS_PROXY> is the IP address of the proxy server,

<PORT> is the server port for the proxy server, and

<HOST1,HOST2> is one or more comma separated host names for the servers in the configuration.

  1. Restart all the servers where you have applied a proxy setting

If you do not restart the servers, the proxy settings will not work.

Testing Server Proxy Settings

Use the following task to verify your proxy server settings.

  • Perform the following steps depending on your server type.

  • If you have a web server:

    1. Go to the Plugin Manager web page.

    2. Verify the catalog can be viewed and no errors are reported when accessing the catalog URL.

  • If you have a CloudBees Flow server:

    1. Go to the Plugin Manager web page.

    2. Verify you can install a plugin from the catalog.

Configuring Proxy Agents

Use ecconfigure to set proxy settings for any agent system that is deployed behind a proxy server. A proxy server is not usually placed between agents and a CloudBees Flow server.

When you use a proxy agent, the proxy target must run an SSH v2 server.
  1. Run the following command to set Agent proxy settings: ec-perl src/ecconfigure.pl --agentProxyHost <IP_ADDRESS_PROXY> --agentProxyPort <PORT> --agentNoProxyHosts "<HOST1,HOST2>"

Where:

<IP_ADDRESS_PROXY> is the IP address of the proxy server,

<PORT> is the server port for the proxy server, and

<HOST1,HOST2> is one or more comma separated host names for the servers in the configuration.

  1. Set the cygwin 1.7 privilege by running the following commands.

Certain commands require administrator privileges to run (for example, net stop xxx ) using cygwin 1.7 sshd. These commands can fail with “access denied” errors. These errors did not occur in cygwin 1.5. The CloudBees Flow proxy agent relies on sshd being privileged. To set this privilege on cygwin 1.7, you must run an additional setup script (in addition to ssh-host-config ).
  1. cyglsa-config

  2. reboot