| title | type | tags | metaDescription | redirects | freshnessValidatedDate | |||||
|---|---|---|---|---|---|---|---|---|---|---|
HTTPS proxy configuration not working |
troubleshooting |
|
New Relic infrastructure monitoring: Details about proxy configuration not working due to proxy precedence. |
|
never |
The infrastructure agent's HTTP/HTTPS proxy configuration is not working.
For best proxy results, we recommend using the most recent infrastructure agent.
If the proxy configuration for your infrastructure agent isn't working, the problem may be due to proxy precedence.
Review the section below for your infrastructure agent version:
Infrastructure agent versions 1.3.1 or higher uses the following proxy precedence:<table>
<thead>
<tr>
<th>
Configuration
</th>
<th>
Precedence
</th>
<th>
Windows
</th>
<th>
Linux
</th>
</tr>
</thead>
<tbody>
<tr>
<td>
`NRIA_PROXY`
</td>
<td>
1
</td>
<td>
HTTP/HTTPS
</td>
<td>
HTTP/HTTPS
</td>
</tr>
<tr>
<td>
`proxy` (in `newrelic-infra.yml`)
</td>
<td>
2
</td>
<td>
HTTP/HTTPS
</td>
<td>
HTTP/HTTPS
</td>
</tr>
<tr>
<td>
`HTTPS_PROXY`
</td>
<td>
3
</td>
<td>
HTTPS
</td>
<td>
HTTPS
</td>
</tr>
<tr>
<td>
`HTTP_PROXY`
</td>
<td>
4
</td>
<td>
HTTP
</td>
<td>
HTTP
</td>
</tr>
</tbody>
</table>
The following options affect TLS certificate configuration:
* If you use an HTTPS proxy, you probably need to set one of these:
* The configuration option `proxy_validate_certificates: true`
* The environment variable `NRIA_PROXY_VALIDATE_CERTIFICATES=true`
* If you use your own self-signed certificates for the HTTPS proxy, keep the default value `proxy_validate_certificates: false`
Here are some additional factors that affect proxy configuration:
* The `NRIA_PROXY` and `proxy` configuration options enable HTTP or HTTPS depending on the URL scheme.
* The `HTTP_PROXY` and `HTTPS_PROXY` environment variables are ignored if either of the these configuration options is set:
* NRIA_IGNORE_SYSTEM_PROXY=true
* ignore_system_proxy: true
* The certificate validation won't work in Centos 5 systems.
<Collapser className="freq-link" id="101002_1225" title="Version 1.0.1002 to 1.2.25"
For infrastructure agent versions 1.0.1002 to 1.2.25, review the section below based on your configuration:
* [Ignore proxy is false](#false)
* [Ignore proxy is true](#true)
<DNT>**Ignore proxy is false**</DNT>
If `NRIA_IGNORE_SYSTEM_PROXY=FALSE` or `ignore_system_proxy=FALSE`:
<table>
<thead>
<tr>
<th>
Configuration
</th>
<th>
Precedence
</th>
<th>
Windows
</th>
<th>
Linux
</th>
</tr>
</thead>
<tbody>
<tr>
<td>
`HTTPS_PROXY`
</td>
<td>
1
</td>
<td>
HTTP 1
</td>
<td>
HTTP 1
</td>
</tr>
<tr>
<td>
`NRIA_PROXY`
</td>
<td>
2
</td>
<td>
HTTP 1
</td>
<td>
HTTP 1
</td>
</tr>
<tr>
<td>
`proxy` (in `newrelic-infra.yml`)
</td>
<td>
3
</td>
<td>
HTTP 1
</td>
<td>
HTTP 1
</td>
</tr>
<tr>
<td>
`HTTP_PROXY`
</td>
<td>
4
</td>
<td>
HTTP
</td>
<td>
HTTP
</td>
</tr>
</tbody>
</table>
1 HTTPS proxy not supported (redirected to HTTP)
<DNT>**Ignore proxy is true**</DNT>
If `NRIA_IGNORE_SYSTEM_PROXY=TRUE` or `ignore_system_proxy=TRUE`:
<table>
<thead>
<tr>
<th>
Configuration
</th>
<th>
Precedence
</th>
<th>
Windows
</th>
<th>
Linux
</th>
</tr>
</thead>
<tbody>
<tr>
<td>
`NRIA_PROXY`
</td>
<td>
1
</td>
<td>
HTTP 1
</td>
<td>
HTTP 1
</td>
</tr>
<tr>
<td>
`proxy` (in `newrelic-infra.yml`)
</td>
<td>
2
</td>
<td>
HTTP 1
</td>
<td>
HTTP 1
</td>
</tr>
</tbody>
</table>
1 HTTPS proxy not supported (redirected to HTTP)
<Collapser className="freq-link" id="10956_to_10989" title="Version 1.0.956 to 1.0.989"
Infrastructure agent versions 1.0.956 to 1.0.989 uses the following proxy precedence:
<table>
<thead>
<tr>
<th>
Configuration
</th>
<th>
Precedence
</th>
<th>
Windows
</th>
<th>
Linux
</th>
</tr>
</thead>
<tbody>
<tr>
<td>
`HTTPS_PROXY`
</td>
<td>
1
</td>
<td>
HTTPS
</td>
<td>
HTTP 1
</td>
</tr>
<tr>
<td>
`NRIA_PROXY`
</td>
<td>
2
</td>
<td>
HTTP/HTTPS 2
</td>
<td>
HTTP 1
</td>
</tr>
<tr>
<td>
`proxy` (in `newrelic-infra.yml`)
</td>
<td>
3
</td>
<td>
HTTP/HTTPS
</td>
<td>
HTTP 1
</td>
</tr>
<tr>
<td>
`HTTP_PROXY`
</td>
<td>
4
</td>
<td>
HTTP/HTTPS
</td>
<td>
TTP
</td>
</tr>
</tbody>
</table>
1 HTTPS proxy not supported (redirected to HTTP)
2 When using a HTTPS proxy with a custom TLS/SSL or self-signed certificate, provide either:
* The certificate file location in `ca_bundle_file`
* The certificates directory path in `ca_bundle_dir`
<Collapser className="freq-link" id="10956" title="Version 1.0.944 or lower"
Infrastructure agent versions 1.0.944 or lower uses the following proxy precedence:
<table>
<thead>
<tr>
<th>
Configuration
</th>
<th>
Precedence
</th>
<th>
Windows
</th>
<th>
Linux
</th>
</tr>
</thead>
<tbody>
<tr>
<td>
`HTTPS_PROXY`
</td>
<td>
1
</td>
<td>
HTTP 1
</td>
<td>
HTTP 1
</td>
</tr>
<tr>
<td>
`NRIA_PROXY`
</td>
<td>
2
</td>
<td>
HTTP 1
</td>
<td>
HTTP 1
</td>
</tr>
<tr>
<td>
`proxy` (in `newrelic-infra.yml`)
</td>
<td>
3
</td>
<td>
HTTP 1
</td>
<td>
HTTP 1
</td>
</tr>
<tr>
<td>
`HTTP_PROXY`
</td>
<td>
4
</td>
<td>
HTTP
</td>
<td>
HTTP
</td>
</tr>
</tbody>
</table>
1 HTTPS proxy not supported (redirected to HTTP)
2 When using a HTTPS proxy with a custom TLS/SSL or self-signed certificate, provide either:
* The certificate file location in `ca_bundle_file`
* The certificates directory path in `ca_bundle_dir`