Transparently redirecting requests to a proxy is something that Juju *could* do but it could lead to other problems. HTTPS in particular is quite tricky to proxy in a transparent way (with good reason!) without changes in the client (which it sounds like you're trying to avoid).
Our of HTTP, HTTPS and FTP, only HTTP lends itself to straightforward transparent proxying. On 21 February 2017 at 01:08, Evgeny Zobnitsev <[email protected]> wrote: > Hello, > > That there are a lot if applications that does not support proxy settings > in juju environment, it is understandable. But we was thinking to enable > option, that enables "transparent proxy", so just grab the well known ports > and forward them according to the juju proxy settings... > _______________________ > Best, > Evgeny > > > Monday, 20 February 2017, 12:51 +0300 from Merlijn Sebrechts < > [email protected]>: > > The issue with an https proxy is that this is an application level tunnel, > not a network level tunnel. This means that EVERY application needs to > change its behavior. You can't change this from the OS level. Juju > correctly sets the https proxy variables, but those are only suggestions. > It is still up to the application to respect this. A bunch of applications > and libraries don't do that. > > We've used an http proxy for a while, but we switched to a NATted setup > because there were just too much issues (outside of the control of Juju), > and fixing them all slowed us down a lot. > > 2017-02-20 10:25 GMT+01:00 Vladimir Burlakov <[email protected] > <https://e-aj.my.com/compose/?mailto=mailto%[email protected]>>: > > Hi Mark, > Some thoughts/tests on how charms works after/in deployment state in proxy > environment, f.e in deploying Kubernetes charm we stuck, cause application > trying to connect to public http/s servers without proxy, and it not reads > system settings for proxy .. so maybe there (in juju) should be an option > to redirect all (or well known, such as http/https/ftp) connection to > outside through juju controller using it as gateway or through proxy > itself?! > Or am I mistaken and this option is already there? :) > > Thanks, > Vladimir > > > > 10 февр. 2017 г., в 9:07, Mark Shuttleworth <[email protected] > <https://e-aj.my.com/compose/?mailto=mailto%[email protected]>> > написал(а): > > > > On 09/02/17 12:27, Vladimir Burlakov wrote: > >> Hi Guys, > >> Thank you a lot, it’s worked, you really helped me. :) as said my > >> friend: "community - is the power !" > > > > :) > > > > Welcome aboard, Vladimir! > > > > One question - are we good about passing this proxy information on to > > the various machines that get spun up? Ubuntu, CentOS, Windows etc all > > have ways to use proxy info, and I'm interested in whether we rigorously > > pass this to them via cloud-init. > > > > Mark > > > -- > Juju mailing list > [email protected] > <https://e-aj.my.com/compose/?mailto=mailto%[email protected]> > Modify settings or unsubscribe at: https://lists.ubuntu.com/ > mailman/listinfo/juju > > > -- > Juju mailing list > [email protected] > <https://e-aj.my.com/[email protected]> > Modify settings or unsubscribe at: https://lists.ubuntu.com/ > mailman/listinfo/juju > > > -- > Juju mailing list > [email protected] > Modify settings or unsubscribe at: https://lists.ubuntu.com/ > mailman/listinfo/juju > >
-- Juju mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/juju
