Important This documentation space contains information about PATROL Agents when deployed in a BMC Helix Operations Management environment. If you are a TrueSight Operations Management user, see PATROL Agent 24.2

Configuring PATROL Agents to support multiple forward proxy servers


This topic provides instructions to configure a PATROL Agent to communicate with the proxy server. 

The following video (23:51) provides the process to configure PATROL agents to support proxy server migration to BMC Helix Operations Management:


icon-play@2x.png https://youtu.be/DBVwJXsrxJM

You can configure one or more proxy servers in your infrastructure so that PATROL Agents can communicate with BMC Helix Operations Management through them, creating an additional security layer. Use of multiple proxy servers improves infrastructure performance by providing high availability.

Setting up a proxy server is optional. To understand how to create a proxy server as a docker container, see Configuring-a-Squid-proxy-server.


Important

To use multiple forward proxy servers, make sure that all the proxy servers have the same user name and password.

Single proxy server

forward_proxy_diagram.png


Multiple proxy servers

forward_proxy_diagram_multi.png


You can configure the proxy server in one of the following ways:

  • During the installation of PATROL Agents
  • After the installation of PATROL Agents

To configure the proxy server during the installation of PATROL Agents

To configure forward proxy server, perform the following:

  • Single proxy server: Enter the proxy server details with the RunSilentInstall command:
    RunSilentInstall.exe -apikey=a0000000-a000-0a0a-00a0-0000aaa00000 -forwardProxyServer=proxyServer.bmc.com:3128 -forwardProxyUser=user1 -forwardProxyPassword=user123
  • Multiple proxy servers: Enter the comma-separated proxy server details with the RunSilentInstall command:
    RunSilentInstall.exe -apikey=a0000000-a000-0a0a-00a0-0000aaa00000 -forwardProxyServer=proxyServer1.bmc.com:3128,proxyServer2.bmc.com:3128,proxyServer3.bmc.com:3128 -forwardProxyUser=user1 -forwardProxyPassword=user123

Note

You can specify the forwardProxyServer as proxyServer1.bmc.com:3128, http://proxyServer2.bmc.com:3128, or https://proxyServer3.bmc.com:3128. If the protocol is not specified in the Forward Proxy String, the protocol defaults to http.

The forward proxy password is encrypted and then stored in the secure store.

For more information, see Installing-PATROL-Agents.

To configure the proxy server after the installation of PATROL Agents

After a PATROL Agent is installed, add the following configuration variables with forward proxy server details and restart PATROL Agent:

Variable

Details

Example

/AgentSetup/integration/forwardProxyServer

Enter the forward proxy server address.

PATROL_CONFIG "/AgentSetup/integration/forwardProxyServer" = { REPLACE= "proxyServer1.bmc.com:3128,http://proxyServer2.bmc.com:3128,proxyServer3.bmc.com:3128"}

/AgentSetup/integration/forwardProxyUser

Enter the forward proxy server username.

PATROL_CONFIG "/AgentSetup/integration/forwardProxyUser" = {REPLACE = "user1"}

/SecureStore/mca/tenant/forwardProxyPasswd

Enter the forward proxy server password. The forward proxy password is encrypted and then stored in the secure store.

PATROL_CONFIG "/SecureStore/mca/tenant/forwardProxyPasswd" = {REPLACE = "MCA/user123"}

/AgentSetup/integration/forwardProxyServerTimeoutRetryCount

Enter the forward proxy server retry count in case of timeout error. The timeout error occurs when curl send operation returns error code 28. The default retry count value is 15. If you do not want PATROL Agent to re-establish the connection and directly switch to the next available forward proxy server, set this variable to 0.

PATROL_CONFIG "/AgentSetup/integration/forwardProxyServerTimeoutRetryCount" = { REPLACE="15"}

Important

When PATROL Agent is unable to connect to the forward proxy server, the following error message is shown in the PATROL Agent error log file:
"Error detected in curl send operation for Forward Proxy Server <Forward Proxy server URL>,error code = <curl return error code>, trying to connect next available server in provided list."

Take necessary action based on the error code mentioned in the error log file.

For more information about the pconfig utility, see Using the pconfig utility to modify PATROL Agent configuration variables.

For similar information about configuring PATROL agents to support proxy server migration to BMC Helix Operations Management, see the Configuring PATROL Agents to support proxy server migration to BHOM discussion on BMC Communities.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*