Download
Downloadable File
| File link | File size | File description |
|---|---|---|
Abstract
The Remote Support Center Proxy is a network proxy that connects one or more IBM storage systems to IBM remote support servers in the IBM Remote Support Center. This proxy utility runs as a service on a Linux system that has Internet connectivity to the IBM Remote Support Center and local network connectivity to the storage system.
Download Description
The remote support assistance feature for the IBM storage systems requires TCP/IP communication between the storage systems and IBM Remote Support Center. When a storage system cannot have internet access (for e.g due to firewall policies) or if it is desired that multiple storage systems are routed to the IBM Remote Support Center via a single system, you can use the IBM Remote Support Center Proxy application.
The Remote Support Center Proxy is a network proxy that connects one or more IBM storage systems to the IBM Remote Support Center. This proxy utility runs as a service on a Linux system that has Internet connectivity to the IBM Remote Support Center and local network connectivity to the storage system. The connection to the IBM Remote Support Center is initiated by the storage system through the IBM Storage Management GUI or the command-line interface (CLI).
Many brands of IBM storage such as XIV, SVC, Storwize etc can use this remote support proxy application to connect to the IBM Remote Support Center. They can also be used interchangeably i.e XIV proxy server can be used to connect SVC/Storwize and vice-versa.
The communication between the storage system and the Remote Support Center Proxy uses Secure Shell (SSH) over a configurable port. The communication between the Remote Support Center Proxy and the IBM Remote Support Center uses port 443, SSH, outbound only.
Installation
- On the Linux computer where you plan to run the proxy utility, download the Remote Support Center Proxy utility installation package found below.
- Assign the downloaded file execution permissions by running the following command:
chmod +x file_name.bin
Where file_name.bin is the name of the installation package for the appropriate platform. - Install the Remote Support Center Proxy using the following command:
./file_name.bin
Where file_name.bin is the name of the installation package for the appropriate platform.A software license is displayed. - Follow the instructions to read through and accept the license. Some times, the license is not displayed and the application terminates unexpectedly. This is due to a missing bzip2 package on your system. Please install this package using the Linux package manager and try again.
- Ensure that your firewall allows both incoming and outgoing connections to the IBM IP addresses 170.225.126.11, 170.225.126.12, 170.225.127.11 and 170.225.127.12 on port 443.
| /usr/bin/xivproxy | The binary executable file. |
| /etc/xiv/proxy.conf | The configuration file. You must update this file before you start the Remote Support Center Proxy service. |
| /etc/init.d/xivproxy | The system service for starting and stopping the Remote Support Center Proxy. The service is configured to start when the server boots. It does not start automatically after installation. |
| /usr/share/xiv/syslog-logger | The logger program that can be modified to integrate with the existing logging and monitoring systems. |
| /usr/share/doc/proxy-version/license | The directory that contains the accepted software license for the Remote Support Proxy in multiple languages. In the directory path, version is the product version. |
| /usr/share/xiv/proxy_id_rsa | A cryptographic file that is used by the configuration-retrieval function. |
Configuring
Procedure
To configure the Remote Support Proxy service, edit the following parameters in the /etc/xiv/proxy.conf file:
- ListenInterface
The name or IP address of the network interface on which the Remote Support Proxy is to listen for incoming connections from the Spectrum Virtualize system (for example, eth0 or 192.0.2.1). The interface name must be the same as the output of the ifconfig command.Important - The Spectrum Virtualize system must have access to the system running the Remote Support Proxy as defined by this interface name or IP address.
- ListenPort
The TCP port on which the Remote Support Proxy is to listen for incoming connections from the Spectrum Virtualize system (for example, 8988).Important - The Spectrum Virtualize system must have access to the system running the Remote Support Proxy as defined by this port.
- StatusInterface
(Optional) The interface name or IP address, in IPv4 format, of an additional TCP port on which the Remote Support Proxy listens to monitor status (for example, eth1 or 192.0.2.2).
When you connect to the status port (for example, by using telnet), the proxy service displays a status message and then closes the connection.
If the StatusInterface and StatusPort parameters are not configured, the status service is disabled.
When the status service is enabled, you can retrieve the status by running the service xivproxy status command.
To enable status queries only from the local server, use the loopback interface lo. To enable status queries over the network, use a network interface.
- StatusPort
(Optional) The port number of an additional TCP port on which the Remote Support Proxy listens to monitor status (for example, 8966).
If the StatusInterface and StatusPort parameters are not configured, the status service is disabled.
- User
(Optional) The user name of a restricted user that is used to run the Remote Support Proxy (for example, nobody).
If the proxy runs as the root user, it drops its privileges to match the privileges of the specified user or to nobody if no user is specified. This is done after binding ports and opening the log file, in case they require root access.
- Logger
(Optional) Location of the logger program (for example, /usr/share/xiv/syslog-logger).
See the contents of the /usr/share/xiv/syslog-logger file for more information and example code.Note - The logger runs as a restricted user and not the root user.
The Remote Support Proxy runs the logger each time the Spectrum Virtualize system connects to and disconnects from the Remote Support Center, or when an error occurs. You can modify the logger program to integrate with existing logging and monitoring tools.
The logger program runs without any arguments and with the following predefined environment variables:
PATH=/bin:/sbin:/usr/bin:/usr/sbin
EVENT={connect|disconnect|error}
CLIENT=IP_address:port
SERVER=IP_address:port
SERVER_LIST=IP_address:port,IP_address:port,...
MESSAGE=arbitrary text message when EVENT=error
SERVER_LIST is a list of all known IBM® remote-support servers at the time of the last configuration retrieval.
In the following example, the Spectrum Virtualize system uses IP address 192.0.2.5 on port 9999, the Remote Support Center uses IP addresses 195.110.41.141 and 195.110.41.142 on port 443, and the logger is called to report a successful connection:
PATH=/bin:/sbin:/usr/bin:/usr/sbin
EVENT=connect
CLIENT=192.0.2.5:9999
SERVER=195.110.41.141:443
SERVER_LIST=195.110.41.141:443,195.110.41.142:443
MESSAGE=
- LogFile
(Optional) Location of the error log. If not set, the default location is /var/log/xivproxy.log.
This error log contains information about proxy service startup, shutdown, connections, and disconnections. If debugging is enabled, this file also contains the trace logs.
- DebugLog
(Optional) A flag indicating whether debugging is enabled. Set to Yes to enable debugging or No to disable debugging. The default value is No.
When debugging is enabled, trace logs are created. These logs are useful for troubleshooting and debugging problems.
- ServerAddress
(Optional) IP addresses of front servers. If set, only the configured front server(s) will be used. Below is the list of IP addresses of all the available front servers:- 170.225.126.11
- 170.225.126.12
- 170.225.127.11
- 170.225.127.12
The servers can be specified as host names as well:- xrsc-front-srv-1.southdata.ibm.com
- xrsc-front-srv-2.southdata.ibm.com
- xrsc-front-srv-3.eastdata.ibm.com
- xrsc-front-srv-4.eastdata.ibm.com
To configure front servers, use the following format:
ServerAddress[N] IPAddrs
ServerPort[N]PortNo (where N=1..n)
For example, to configure two front servers with IP addresses IP1 and IP2 over SSL, add the following to /etc/xiv/proxy.conf:
ServerAddress1 IP1
ServerPort1 8888
ServerAddress2 IP2
ServerPort2 8888Note - If ServerPort is not specified, the default port used is 443.
Example
The following example shows a sample configuration file:
# Interface and port on which the proxy listensListenInterface eth0
ListenPort 8988
# Host and port of the HTTP proxy server
HTTPProxyHost 192.0.2.3
HTTPProxyPort 8080
# User ID and password for the HTTP proxy server
HTTPProxyUser ibm_user
HTTPProxyPassword passw0rd
# Interface and port of status service
StatusInterface lo
StatusPort 8966
# User ID to run the proxy
User nobody
# External log program (optional)
Logger /usr/share/xiv/syslog-logger
LogFile /var/log/xivproxy.log
DebugLog no
Starting the proxy server
To start the Remote Support Proxy service, run the following command:
service xivproxy startIf the proxy service does not start correctly, examine the log file for errors. The default log file is */var/log/xivproxy.log*.
Uninstalling the proxy server
To uninstall the Remote Support Proxy service, run the following commands:
service xivproxy stoprpm -e xivproxy
MD5 Checksums
| c5f2c5f552c7d5fb387cf2f01b4e5763 | xivproxy-installer-rpm-1.3.2.3-b1801.rhel7.x86_64.bin |
| 18d0db977c2f0c5985728f51f6200f31 | xivproxy-installer-rpm-1.3.2.3-b1801.rhel8.x86_64.bin |
| abb24b438b6f21cb6b20699e176966ed | xivproxy-installer-rpm-1.3.2.3-b1801.sles12.x86_64.bin |
| 3acb4d9ce22dc3c638467ca62186b64e | xivproxy-installer-rpm-1.3.2.3-b1801.sles15.x86_64.bin |
Download Package
Download the Support Center Proxy package from Fix Central. Select "All" releases and "All" platforms then search and find the latest version of the proxy package in the "Product Software" section, e.g. Storage-RemoteProxyServer-1.3.2.3.
Alternatively, use this direct link, which should work on all platforms.
Document Location
Worldwide
Was this topic helpful?
Document Information
Modified date:
26 June 2024
UID
ibm16262375