Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Fleet] Allow HTTP proxy_urls to be configured for all network connections that can be proxied. #205533

Open
cmacknz opened this issue Jan 3, 2025 · 1 comment
Labels
bug Fixes for quality problems that affect the customer experience Team:Fleet Team label for Observability Data Collection Fleet team

Comments

@cmacknz
Copy link
Member

cmacknz commented Jan 3, 2025

Quoting an internal bug report:

I'm setting the Elastic Agent proxy URL for the downloads from https://artifacts.elastic.co/, but keep getting an error when triggering the Agent upgrade via Kibana (it fails to download). However, when I run a wget manually via CLI on the agent host, it is able to download via proxy. The only difference I noticed is on my wget I don't put "https://" in front of the https_proxy setting, but Fleet doesn't let me set a proxy URL without the "https://".
Is there any way to bypass this format restriction? Or am I missing something else?

An HTTPS URL will only work with a proxy that supports the CONNECT method, which uses the proxy like a TCP proxy that can’t look at the request content at all. It is probably also possible to setup a proxy to be able to man in the middle the connection by having it return a certificate signed by a CA the client already trusts but this is not common.

If a proxy doesn’t support the CONNECT method, then you need an HTTP URL to disable TLS. Fleet should support using http proxy_url configurations or there’s no other way to make this work.

@cmacknz cmacknz added bug Fixes for quality problems that affect the customer experience Team:Fleet Team label for Observability Data Collection Fleet team labels Jan 3, 2025
@elasticmachine
Copy link
Contributor

Pinging @elastic/fleet (Team:Fleet)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Fixes for quality problems that affect the customer experience Team:Fleet Team label for Observability Data Collection Fleet team
Projects
None yet
Development

No branches or pull requests

2 participants