Communication to Mission Control with Proxy and Self Singed Certificates

[Yosi_Neuman]

Hi

Prospect has a proxy that uses their own certificate for connections from their LAN to the Internet and they are asking if there is a way to add this certificate to the DynaTrace Managed communication with Mission Control?

Yos @Gil G.

[Radoslaw_Szulgo · Accepted solution]

Do you mean that the prospect can only communicate with external services in the internet that has their own certificate? Sounds very unique..

Or just they have a proxy server with a certificate? In that way I see no issues.

Can you please specify? The easiest way to verify if it works is to send HTTP GET request to Mission Control from a host where cluster is/will be deployed.

See our help page (https://help.dynatrace.com/dynatrace-managed/dynatrace-server/which-network-ports-does-dynatrace-server-use) :

Outbound communication to Dynatrace Mission Control

Dynatrace clusters must be able to communicate to Mission Control (IP addresses 52.5.224.56 and 52.200.165.10, 52.221.165.63, and 13.228.109.33) via HTTPS (port 443)
for license validation, health monitoring, and automatic updates. This
communication can be routed via a proxy, but the proxy must allow web
sockets and, if the proxy is clustered, it must provide sticky sessions
for web socket communication.

[Yosi_Neuman]

Hi Radoslaw,

This is a health care system and as so they only allow outbound communication to the internet with using their own certificate throw their proxy.

For the POC they allow the connection without the certificate but its look like that this will be an issue later on.....

Yos

[Radoslaw_Szulgo]

You need to check it. Anyway, there are settings in CMC to specify proxy address that is used to connect to Mission Control.

[Yosi_Neuman]

Hi Radoslaw,

First of all thanks for your help

And for your comment We already try it before posting this question and after checking that its not working, the question was and still is how to set it to work?

Yos

[Radoslaw_Szulgo]

OK. I'll be glad to help.

What problem do you receive when trying to connect?

Have you configured proxy in the settings?

[Yosi_Neuman]

Thanks for your help in advance

I'm not at the site at the moment and there is a Holiday here in Israel till the end of the week so I have asked prospect to send me any errors from the DTM if there is and will update ASAP.

And yes DTM connected to Mission Control via Proxy right now

Yos

[Radoslaw_Szulgo]

Let's continue with the support team. Please open a ticket.

[Yosi_Neuman]

Done - https://support.dynatrace.com/supportportal/browse/SUP-3442