Configure a proxy
Configure a proxy server, if applicable, to route incoming and outgoing Intelligence Center traffic through it.
EclecticIQ Intelligence Center releases 2.4.0 and earlier enabled proxy configuration through the web-based GUI.
EclecticIQ Intelligence Center releases 2.5.0 and later enable proxy configuration through a dedicated file.
This operation requires root or sudo-level access to the Intelligence Center instance through a terminal and an SSH connection.
Configure proxy settings
To configure a proxy server for the Intelligence Center:
Start a terminal session.
In the terminal, log in to the Intelligence Center through SSH.
Elevate your user level access to root.
In a text editor, open the following file:
vi
/etc/default/eclecticiq-platform
Add the following directives to the file:
HTTP_PROXY=https:
//
${user_name}:${password}@${proxy_ip_address}:8080
HTTPS_PROXY=https:
//
${user_name}:${password}@${proxy_ip_address}:8080
NO_PROXY=127.0.0.1,localhost
Example:
NO_PROXY=127.0.0.1,localhost
Save the changes to eclecticiq-platform.
In the text editor, open the following file:
vi
/etc/default/eclecticiq-platform-backend-worker-common
Add the the same directives to this file as well:
HTTP_PROXY
=
https:
/
/
${user_name}:${password}@${proxy_ip_address}:
8080
HTTPS_PROXY
=
https:
/
/
${user_name}:${password}@${proxy_ip_address}:
8080
NO_PROXY
=
127.0
.
0.1
,localhost
Save the changes to eclecticiq-platform-backend-worker-common, and exit the text editor.
To apply the changes to the settings:
About root-level access
Obtain root-level access by running sudo -i:
# Root-access login shell
sudo
-i
To access resources as a different user than the currently active one, append -u:
# Grant the currently logged in user root-level access
sudo
-
i
# Grant root-level access to a different user
sudo
-
i
-
u ${user_name}
# Run a command as a different user, with root-level access
sudo
-
i
-
u ${user_name} ${command} ${options}
Bypass proxy settings
The NO_PROXY directive enables bypassing all the IP addresses and domain names you assign to it as values.
It acts as a whitelist: NO_PROXY IP and addresses access Internet directly, without routing their requests through the proxy.
If the Intelligence Center is configured to access the Internet through a proxy, make sure that the Intelligence Center proxy configuration always bypasses local hosts localhost and 127.0.0.1.
If you cannot access the Intelligence Center proxy settings, and if terminal commands acting on Intelligence Center resources fail to execute correctly, bypass the proxy server on the fly.
To do so, prepend NO_PROXY='127.0.0.1,localhost' to the Intelligence Center commands you execute in the terminal.
Example
NO_PROXY
=
'127.0.0.1,localhost'
/
opt
/
eclecticiq
-
platform
-
backend
/
bin
/
eiq
-
platform graph upgrade
Restart Intelligence Center backend services
If you made changes to any configuration files managing backend services, restart them.
After editing or updating systemd-managed unit configuration files, you must restart all systemd-managed Intelligence Center services. It enables systemd to reload all configurations, and to apply any changes to make them effective.
To restart systemd-managed Intelligence Center services through the command line:
systemctl restart eclecticiq-platform-backend-services
Restart Intelligence Center workers
If you made changes to any configuration files managing workers, restart them.
After editing or updating backend worker configuration files and parameters, restart the workers. It enables workers to reload their configurations, and to apply any changes to make them effective.
To restart backend workers through the command line:
systemctl restart eclecticiq-platform-backend-workers