Advanced Clusters

Back Next

Step 6. Configure a proxy for the cluster (optional)

Use a proxy server to create an indirect connection to network services for security and performance reasons. For example, you can use a proxy server to get through a firewall, and some proxies provide caching mechanisms.

To use a proxy server for the cluster, edit the proxy server for the Secure Agent. Exclude the metadata server on Google Cloud and the IP addresses that you plan to assign to the cluster.

You can edit the proxy server details in the following file:

<Secure Agent installation directory>/apps/agentcore/conf/proxy.ini

Configure the property InfaAgent.NonProxyHost to exclude IP addresses or host names.

To exclude the metadata server on Google Cloud and cluster IP addresses from the proxy, perform the following steps:

Open the proxy.ini file.

Update the value for InfaAgent.NonProxyHost to exclude the metadata server and cluster IP addresses.

For example, the following value excludes the metadata server and uses two formats to exclude cluster IP addresses in the CIDR block 172.16.0.0/16:

InfaAgent.NonProxyHost=metadata|metadata.google.internal|172.16.*|172.16.0.0/16

The pipe character (|) is a delimiter that combines a list of host names and IP addresses. You can enter a wildcard to the left for host names or to the right for IP addresses.

Restart the Secure Agent for the changes to take effect.

The proxy details appear on the Secure Agent Manager settings page for the proxy server.

After the changes take effect, the Secure Agent communicates with the metadata server and the cluster without passing through the proxy, while commands to communicate with the cluster are required to pass through the proxy.

For more information about configuring a proxy to exclude non-proxy hosts, see

Runtime Environments

Setting up Google Cloud

Download Guide

Watch

Comments

Communities

Knowledge Base

Success Portal