topic Re: Communication to Mission Control with Proxy and Self Singed Certificates in Dynatrace Managed Q&A

Communication to Mission Control with Proxy and Self Singed Certificates

Yosi_Neuman — Mon, 09 Oct 2017 16:59:01 GMT

Prospect has a proxy that uses their own certificate for connections from their LAN to the Internet and they are asking if there is a way to add this certificate to the DynaTrace Managed communication with Mission Control?

Yos @Gil G.

Re: Communication to Mission Control with Proxy and Self Singed Certificates

Radoslaw_Szulgo — Mon, 09 Oct 2017 19:24:38 GMT

Do you mean that the prospect can only communicate with external services in the internet that has their own certificate? Sounds very unique..

Or just they have a proxy server with a certificate? In that way I see no issues.

Can you please specify? The easiest way to verify if it works is to send HTTP GET request to Mission Control from a host where cluster is/will be deployed.

See our help page (https://help.dynatrace.com/dynatrace-managed/dynatrace-server/which-network-ports-does-dynatrace-server-use) :

Outbound communication to Dynatrace Mission Control

Dynatrace clusters must be able to communicate to Mission Control (IP addresses 52.5.224.56 and 52.200.165.10, 52.221.165.63, and 13.228.109.33) via HTTPS (port 443)
for license validation, health monitoring, and automatic updates. This
communication can be routed via a proxy, but the proxy must allow web
sockets and, if the proxy is clustered, it must provide sticky sessions
for web socket communication.

Re: Communication to Mission Control with Proxy and Self Singed Certificates

Yosi_Neuman — Mon, 09 Oct 2017 19:37:08 GMT

Hi Radoslaw,

This is a health care system and as so they only allow outbound communication to the internet with using their own certificate throw their proxy.

For the POC they allow the connection without the certificate but its look like that this will be an issue later on.....

Yos

Re: Communication to Mission Control with Proxy and Self Singed Certificates

Radoslaw_Szulgo — Tue, 10 Oct 2017 05:42:48 GMT

You need to check it. Anyway, there are settings in CMC to specify proxy address that is used to connect to Mission Control.

Re: Communication to Mission Control with Proxy and Self Singed Certificates

Yosi_Neuman — Tue, 10 Oct 2017 08:50:47 GMT

Hi Radoslaw,

First of all thanks for your help

And for your comment We already try it before posting this question and after checking that its not working, the question was and still is how to set it to work?

Yos

Re: Communication to Mission Control with Proxy and Self Singed Certificates

Radoslaw_Szulgo — Tue, 10 Oct 2017 09:44:26 GMT

OK. I'll be glad to help.

What problem do you receive when trying to connect?

Have you configured proxy in the settings?

Re: Communication to Mission Control with Proxy and Self Singed Certificates

Yosi_Neuman — Tue, 10 Oct 2017 11:11:35 GMT

Thanks for your help in advance

I'm not at the site at the moment and there is a Holiday here in Israel till the end of the week so I have asked prospect to send me any errors from the DTM if there is and will update ASAP.

And yes DTM connected to Mission Control via Proxy right now

Yos

Re: Communication to Mission Control with Proxy and Self Singed Certificates

Radoslaw_Szulgo — Tue, 10 Oct 2017 12:33:38 GMT

Let's continue with the support team. Please open a ticket.

Re: Communication to Mission Control with Proxy and Self Singed Certificates

Yosi_Neuman — Tue, 10 Oct 2017 19:44:59 GMT

Done - https://support.dynatrace.com/supportportal/browse/SUP-3442