HTTP Proxy Support deprecated
Introduction
Depending on the network infrastructure, it may be the case that middleware nodes do not have direct access to the internet. In those cases access is only possible via a proxy. It is now possible to configure such a proxy via well known Java system properties. The following protocols are supported with authentication:
- http
- https
Additionally the following protocols are supported without authentication:
- imap
- imaps
- smtp
- smtps
For each protocoll exists a host and port property. Additionally a user and a password property can be configured for each protocol with authentication support. There also exist a property per protocol group to configure a nonProxyHost list.
The complete list of proxy properties:
HTTP(S)
- http.proxyHost
- http.proxyPort
- http.proxyUser
- http.proxyPassword
- http.nonProxyHosts
- https.proxyHost
- https.proxyPort
- https.proxyUser
- https.proxyPassword
IMAP(S)
- mail.imap.proxy.host
- mail.imap.proxy.port
- mail.imaps.proxy.host
- mail.imaps.proxy.port
- mail.imap.proxy.nonProxyHosts
SMTP(S)
- mail.smtp.proxy.host
- mail.smtp.proxy.port
- mail.smtps.proxy.host
- mail.smtps.proxy.port
- mail.smtp.proxy.nonProxyHosts
POP3(S)
- mail.pop3.proxy.host
- mail.pop3.proxy.port
- mail.pop3s.proxy.host
- mail.pop3s.proxy.port
- mail.pop3.proxy.nonProxyHosts
Example
For example a HTTP proxy could be configured via the core-mw chart:
core-mw:
javaOpts:
other: "-Dhttp.proxyHost=proxy.my.domain -Dhttps.proxyHost=proxy.my.domain -Dhttp.proxyPort=proxyPort -Dhttps.proxyPort=proxyPort"
It is recommended to whitelist internal systems by adding them to the nonProxyHosts properties. E.g. to the http.nonProxyHosts property:
-Dhttp.nonProxyHosts=localhost|127.*|[::1]|my.internal.system
-Dmail.imap.proxy.nonProxyHosts=localhost|127.0.0.0/8|[::1]|10.0.0.0/8|*.domain.com
-Dmail.smtp.proxy.nonProxyHosts=localhost|127.0.0.0/8|[::1]|10.0.0.0/8|*.domain.com
-Dmail.pop3.proxy.nonProxyHosts=localhost|127.0.0.0/8|[::1]|10.0.0.0/8|*.domain.com