Problem
The infrastructure agent's HTTP/HTTPS proxy configuration is not working.
For best proxy results, we recommend using the most recent infrastructure agent.
Solution
If the proxy configuration for your infrastructure agent isn't working, the problem may be due to proxy precedence.
Review the section below for your infrastructure agent version:
Infrastructure agent versions 1.3.1 or higher uses the following proxy precedence:
Configuration | Precedence | Windows | Linux |
---|---|---|---|
| 1 | HTTP/HTTPS | HTTP/HTTPS |
| 2 | HTTP/HTTPS | HTTP/HTTPS |
| 3 | HTTPS | HTTPS |
| 4 | HTTP | HTTP |
The following options affect TLS certificate configuration:
If you use an HTTPS proxy, you probably need to set one of these:
- The configuration option
proxy_validate_certificates: true
- The environment variable
NRIA_PROXY_VALIDATE_CERTIFICATES=true
- The configuration option
If you use your own self-signed certificates for the HTTPS proxy, keep the default value
proxy_validate_certificates: false
Here are some additional factors that affect proxy configuration:
The
NRIA_PROXY
andproxy
configuration options enable HTTP or HTTPS depending on the URL scheme.The
HTTP_PROXY
andHTTPS_PROXY
environment variables are ignored if either of the these configuration options is set:- NRIA_IGNORE_SYSTEM_PROXY=true
- ignore_system_proxy: true
The certificate validation won't work in Centos 5 systems.
For infrastructure agent versions 1.0.1002 to 1.2.25, review the section below based on your configuration:
Ignore proxy is false
If
NRIA_IGNORE_SYSTEM_PROXY=FALSE
orignore_system_proxy=FALSE
:Configuration
Precedence
Windows
Linux
HTTPS_PROXY
1
HTTP 1
HTTP 1
NRIA_PROXY
2
HTTP 1
HTTP 1
proxy
(innewrelic-infra.yml
)3
HTTP 1
HTTP 1
HTTP_PROXY
4
HTTP
HTTP
1 HTTPS proxy not supported (redirected to HTTP)
Ignore proxy is true
If
NRIA_IGNORE_SYSTEM_PROXY=TRUE
orignore_system_proxy=TRUE
:Configuration
Precedence
Windows
Linux
NRIA_PROXY
1
HTTP 1
HTTP 1
proxy
(innewrelic-infra.yml
)2
HTTP 1
HTTP 1
1 HTTPS proxy not supported (redirected to HTTP)
Infrastructure agent versions 1.0.956 to 1.0.989 uses the following proxy precedence:
Configuration | Precedence | Windows | Linux |
---|---|---|---|
| 1 | HTTPS | HTTP 1 |
| 2 | HTTP/HTTPS 2 | HTTP 1 |
| 3 | HTTP/HTTPS | HTTP 1 |
| 4 | HTTP/HTTPS | TTP |
1 HTTPS proxy not supported (redirected to HTTP)
2 When using a HTTPS proxy with a custom TLS/SSL or self-signed certificate, provide either:
- The certificate file location in
ca_bundle_file
- The certificates directory path in
ca_bundle_dir
Infrastructure agent versions 1.0.944 or lower uses the following proxy precedence:
Configuration | Precedence | Windows | Linux |
---|---|---|---|
| 1 | HTTP 1 | HTTP 1 |
| 2 | HTTP 1 | HTTP 1 |
| 3 | HTTP 1 | HTTP 1 |
| 4 | HTTP | HTTP |
1 HTTPS proxy not supported (redirected to HTTP)
2 When using a HTTPS proxy with a custom TLS/SSL or self-signed certificate, provide either:
- The certificate file location in
ca_bundle_file
- The certificates directory path in
ca_bundle_dir