topic Re: Webhook integration: Can you bypass the proxy server for local Addresses in Automations

Webhook integration: Can you bypass the proxy server for local Addresses

AmitChiba — Thu, 01 Jul 2021 13:27:05 GMT

We have configured our Dynatrace Managed Cluster to use a proxy server to connect to Dynatrace Mission Control, and this works as desired. We are now trying to integrate Dynatrace Managed to our local Ticketing tool using WebHooks. Our ticketing tool is internal and as such, has a local IP address. When trying to integrate, it seems as though Dynatrace tries to use the proxy and this fails.

Is there any way of specifying that local IP addresses should be ignored?

Re: Webhook integration: Can you bypass the proxy server for local Addresses

AmitChiba — Wed, 17 Jan 2018 13:36:39 GMT

After trying numerous options, I finally managed to get this to work. The following solution worked in my environment (OS = RHEL):

- Navigate to $DT_HOME/services

- Make a backup of the server.sh file

- Edit the server.sh file and add the following to the "export" section

export http_proxy=http://<proxyserver>:<port>

export https_proxy=$http_proxy

export no_proxy=".<yourdomain>"

- Save the file and recycle your Managed Environment

Re: Webhook integration: Can you bypass the proxy server for local Addresses

markus_reusch — Tue, 30 Jan 2018 12:08:26 GMT

Forgot to mention that an update could overwrite this script and the settings are gone. One more reason to integrate it somehow.

Re: Webhook integration: Can you bypass the proxy server for local Addresses

Julius_Loman — Wed, 13 Jun 2018 14:13:52 GMT

Is this still valid for recent Dynatrace Managed sprints? Is has no effect in any environment I've tried. And the cluster management console still does not have any option to specify proxy exceptions.

Re: Webhook integration: Can you bypass the proxy server for local Addresses

christoph_kopf — Fri, 29 Jun 2018 06:53:15 GMT

Hi there, the following configuration of /opt/dynatrace-managed/server/conf/config.properties does the trick. It then disable the proxy for all WebHooks.

[http.client.external]
...
proxy-off = true

- Christoph

Re: Webhook integration: Can you bypass the proxy server for local Addresses

eddie_marrett — Tue, 13 Nov 2018 04:13:10 GMT

It seems a bit like this was a secret 'feature' of Managed. If you're still using it Amit C does it still work? It seems even Dynatrace support can't confirm if this would work!

Re: Webhook integration: Can you bypass the proxy server for local Addresses

Julius_Loman — Tue, 13 Nov 2018 07:17:36 GMT

Eddie, use the solution by Christoph below.

Re: Webhook integration: Can you bypass the proxy server for local Addresses

eddie_marrett — Tue, 13 Nov 2018 19:45:27 GMT

The problem with Chris's solution below is it applies to all the webhooks - I want to be able to config some of our webhooks to use the proxy and some not. Or am i misunderstanding and it is possible with Chris's solution?

Re: Webhook integration: Can you bypass the proxy server for local Addresses

Julius_Loman — Tue, 13 Nov 2018 20:24:32 GMT

This is not possible I think.
There are least two options I can think of in this case:

be nice to the network/security team to allow direct connection without proxy to all services 🙂
use a proxy tunnelling mechanism to expose the remote webhooks via proxy as local endpoints. For example use socat or proxytunnel. (http://proxytunnel.sourceforge.net/), If you have several foreign webhooks you will need to setup socat/proxytunnel for each one.

Re: Webhook integration: Can you bypass the proxy server for local Addresses

AmitChiba — Thu, 22 Nov 2018 06:15:55 GMT

I am no longer using the above solution. I eventually went to our Security guys and asked them to redirect traffic to the specific IP address for the Webhook back internally. I havent had an issue since.

Re: Webhook integration: Can you bypass the proxy server for local Addresses

jiji_joseph — Mon, 15 Apr 2019 03:41:39 GMT

None of these solutions work acros upgrades. The upgrade process will remove all changes you made these files. This is the case for the solution mentioned by @Amit C and @Christoph K. Anyone found a method that would work consistently across upgrades?

Jiji Joseph

Re: Webhook integration: Can you bypass the proxy server for local Addresses

AmitChiba — Wed, 16 Oct 2019 12:50:00 GMT

Here is the official solution from Dynatrace:

https://www.dynatrace.com/support/help/setup-and-configuration/dynatrace-managed/configuration/configurable-properties-of-dynatrace-managed/

Re: Webhook integration: Can you bypass the proxy server for local Addresses

AmitChiba — Wed, 16 Oct 2019 12:50:30 GMT

Hi,

Please see this link: https://www.dynatrace.com/support/help/setup-and-configuration/dynatrace-managed/configuration/configurable-properties-of-dynatrace-managed/

Re: Webhook integration: Can you bypass the proxy server for local Addresses

Yosi_Neuman — Tue, 10 Jan 2023 07:48:14 GMT

Hi guys,

We have found out that there is a new section in CMC under Home --> Settings --> Internet proxy page that you can exclude hosts from using the proxy.

HTH

Yos