Configuring HTTPS Traffic via a Proxy Server without Authentication on a CentOS 7 VM

Configuring HTTPS Traffic via a Proxy Server without Authentication on a CentOS 7 VM

Many organizations have their internet traffic routed via a proxy server rather than by direct connection from a virtual machine.

This page describes how to configure HTTPS Traffic via a proxy server without authentication on a CentOS 7 Virtual Machine.

Proxy Server Secure Communication

To enable secure communication between your Proxy server and Votiro's Positive Selection® Engine, set permissions by creating an ACL that includes the following locations:

Proxy Server Information

Before you start the procedure, determine the following information:

nIMPORTANT!

By default, all HTTPS traffic will be routed to the proxy. We want to avoid the default routing scenario because HTTPS is used for internal traffic not to be routed to the internet.

By default, when running init cluster, several networks are created.

First node:

The flannel and cni networks will also be created on the second and third nodes, using different IPs in their subnet.

Second node:

Third node:

Note 

All of the above networks and IP addresses will be used for internal purposes, and will need to bypass the proxy.

Configuration Procedure

Before you begin, ensure the proxy server permissions have been set on the required locations and you have gathered the required proxy server information.

To set and configure your three nodes, follow these steps:

vi /etc/hosts

This step is mandatory because the no_proxy parameter does not allow the use of wildcards.

vi /etc/environment

https_proxy=http://{Proxy-Server-IP}:{Proxy Port}

no_proxy={cluster name},{node#X IP},localhost, docker,cni,flannel,node0net,node1net,node2net, 10.244.0.0,10.244.1.0,10.244.2.0

For example:

https_proxy=http://10.130.1.168:3128

no_proxy=support-va,10.130.1.163,localhost, docker,cni,flannel, node0net,node1net,node2net, 10.244.0.0,10.244.1.0,10.244.2.0

mkdir /usr/lib/systemd/system/docker.service.d

vi /usr/lib/systemd/system/docker.service.d/http-proxy.conf

[Service]

#Environment="HTTP_PROXY=http://10.130.1.168:3128/" Environment="HTTPS_PROXY=http://10.130.1.168:3128/" Environment="NO_PROXY= hostname.example.com,172.10.10.10"

sudo systemctl daemon-reload

sudo systemctl restart docker

sudo systemctl show --property=Environment docker

You should receive the following output:

Environment=HTTPS_PROXY=http://10.130.1.168:3128/ NO_PROXY= hostname.example.com,172.10.10.10

nIMPORTANT!

Repeat Steps 1 to 9 above for the other two nodes.