Using a web proxy on a connection manager

Edit online

The IBM Storage Defender connection manager requires outbound internet access to connect to the Data Resiliency Service. If your on-premises network uses a proxy server for internet access, you can configure proxy settings in the connection manager. The proxy is used to communicate with the Data Resiliency Service for inventory, recovery, and other operations. It is also used to download packages from the online repository to update the connection manager.

Before you begin

Important:

Proxy server authentication is not supported. The proxy server must be configured to allow unauthenticated requests from the connection manager.
TLS inspection on proxy servers is not supported. The proxy server must be configured to bypass TLS inspection for requests from the connection manager.
WebSocket support on proxy servers is required. The proxy server must be configured to allow HTTP Upgrade and WebSocket protocol for requests originating from the connection manager.

Procedure

To configure a connection manager to use a web proxy, complete the following steps:

Log in to the connection manager by using SSH as the defender user.
To manage the proxy and test the network connectivity, issue the following command:
```
cmadm
```
To run health checks related to the configuration and services of the connection manager, issue the following command:
```
cmadm check
```
Review the Network Configuration section in the output. The status of the checks indicate if the connection manager is able to connect to the internet resources. If the connection manager requires a proxy and it is not configured, the checks (such as check connectivity to DRS or check connectivity to update repository) will fail.
To view the current proxy settings, issue the following command:
```
cmadm proxy show
```
By default, no proxy is configured and the command output is None.
To specify a new proxy or to update the existing proxy, issue the following command:
```
cmadm proxy set
```
When prompted, enter the proxy address (hostname or IP address) and port. For example:
```
proxy.example.com:8080
```
The command performs a connectivity test to verify that the address and port are reachable, applies the proxy settings, and restarts the agent service on the connection manager.
To examine the Network Configuration health checks, to verify that the proxy is set and connectivity to internet resources are successful, issue the following command:
```
cmadm check
```
If you want to remove the proxy configuration and revert to the default state, issue the following command:
```
cmadm proxy clear
```