Connect to HTTP Proxy

The Serverless Workload Agent can connect to an HTTP proxy to reach the Sysdig backend.

Connect to an HTTP Proxy

You can configure the Serverless Workload Agent to connect to an HTTP Proxy by using the SYSDIG_EXTRA_CONF environment variable. This variable accepts values in either YAML or JSON format. You must provide the options under the http_proxy heading.

OptionDefaultDescription
proxy_hostThe hostname of the proxy server. An empty string disables the proxy connection.
proxy_portThe port on the proxy server for the agent to connect to. Zero or empty string disables the proxy connection.
proxy_userSpecifies the username for HTTP authentication. An empty string indicates no authentication.
proxy_passwordSpecifies the password for HTTP authentication. Leave it blank if proxy_user is specified without it.
sslfalseIf set to true, the connection between the agent and the proxy server is encrypted.
ssl_verify_certificatetrueDetermines whether the agent will verify the certificate presented by the proxy.
ca_certificateThe path to the CA certificate for the proxy server. If SSL verification is enabled, the certificate must be appropriately signed.

For further details, see Enable HTTP proxy for agents.

Example

The following configuration, provided through the SYSDIG_EXTRA_CONF environment variable, shows how to set up the Workload Agent to connect to an HTTP proxy with:

  • squid.my.domain.com:6444 as the host and port;
  • my-user as the username;
  • my-proxy-password as the password.
http_proxy:\n  proxy_host: squid.my.domain.com\n  proxy_port: 6443\n  proxy_user: my-user\n  proxy_password: my-proxy-password

Note that newlines and spaces are important when passing this configuration as YAML to the Workload Agent.