Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Separate proxy settings for inter-node communication #4392

Closed
joschi opened this issue Dec 4, 2017 · 2 comments
Closed

Separate proxy settings for inter-node communication #4392

joschi opened this issue Dec 4, 2017 · 2 comments
Labels
Milestone

Comments

@joschi
Copy link
Contributor

@joschi joschi commented Dec 4, 2017

From @jekelundh on December 4, 2017 9:39

When http_proxy is set the GL-nodes tries to connect to each other using proxy meaning everything goes offline.
Is there a way to set nonProxyHost in the "http_proxy" setting ?

Running GL graylog-server-2.4.0-4.beta.2 (with embeddded threatintel plugin)
Env is Centos 7 with java 1.8.0_151-b12

Copied from original issue: Graylog2/graylog-plugin-threatintel#74

@joschi joschi added the feature label Dec 4, 2017
@joschi
Copy link
Contributor Author

@joschi joschi commented Dec 4, 2017

Is there a way to set nonProxyHost in the "http_proxy" setting ?

No, that's currently not possible but it sounds like a good idea.

@jekelundh
Copy link

@jekelundh jekelundh commented Dec 6, 2017

Without proxy settings the threatintel feature is unusable in a multihost GL setup so in my opinion it's a bug.

@florianpopp florianpopp added the triaged label Dec 14, 2017
@florianpopp florianpopp added this to the 3.0.0 milestone Dec 14, 2017
bernd added a commit that referenced this issue Jul 13, 2018
This can be used to bypass a configured proxy server for a list of
hostnames or IP addresses. It must be used if the inter-node
communication between graylog servers should not go through a configured
proxy server.

The matcher implementation for the "http_non_proxy_hosts" is similar to
the implementation that is used for the "http.nonProxyHosts" system
property. (only the delimiter is "," instead of "|" for consistency)
By using a similar implementation, it will be possible to also set the
system property in the future. (if needed - tbd)

Fixes #4905
Fixes #4392
kroepke added a commit that referenced this issue Jul 16, 2018
This can be used to bypass a configured proxy server for a list of
hostnames or IP addresses. It must be used if the inter-node
communication between graylog servers should not go through a configured
proxy server.

The matcher implementation for the "http_non_proxy_hosts" is similar to
the implementation that is used for the "http.nonProxyHosts" system
property. (only the delimiter is "," instead of "|" for consistency)
By using a similar implementation, it will be possible to also set the
system property in the future. (if needed - tbd)

Fixes #4905
Fixes #4392

(This needs to be cherry-picked into 2.4 once merged)
bernd added a commit that referenced this issue Jul 16, 2018
This can be used to bypass a configured proxy server for a list of
hostnames or IP addresses. It must be used if the inter-node
communication between graylog servers should not go through a configured
proxy server.

The matcher implementation for the "http_non_proxy_hosts" is similar to
the implementation that is used for the "http.nonProxyHosts" system
property. (only the delimiter is "," instead of "|" for consistency)
By using a similar implementation, it will be possible to also set the
system property in the future. (if needed - tbd)

Fixes #4905
Fixes #4392

(cherry picked from commit 979787e)
bernd added a commit that referenced this issue Jul 16, 2018
This can be used to bypass a configured proxy server for a list of
hostnames or IP addresses. It must be used if the inter-node
communication between graylog servers should not go through a configured
proxy server.

The matcher implementation for the "http_non_proxy_hosts" is similar to
the implementation that is used for the "http.nonProxyHosts" system
property. (only the delimiter is "," instead of "|" for consistency)
By using a similar implementation, it will be possible to also set the
system property in the future. (if needed - tbd)

Fixes #4905
Fixes #4392

(cherry picked from commit 979787e)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
3 participants