Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ignore https_proxy for /usr/local/pf/bin/cluster/sync #8578

Open
chri2 opened this issue Mar 4, 2025 · 0 comments
Open

Ignore https_proxy for /usr/local/pf/bin/cluster/sync #8578

chri2 opened this issue Mar 4, 2025 · 0 comments

Comments

@chri2
Copy link
Contributor

chri2 commented Mar 4, 2025

Is your feature request related to a problem? Please describe.
To download updates and connect to fingerbank a proxy is needed in some networks. When upgrading a cluster following the instructions from the documentation for https://www.packetfence.org/doc/PacketFence_Clustering_Guide.html#_configuration_synchronisation it is needed to unset the environment variable for the proxy to make this work.

Describe the solution you'd like
In my understanding the packetfence cluster relies on the nodes being able to communicate directly with each other (keepalived: same broadcast domain, galera cluster: direct IP connection). I couldn't think of a setup where /usr/local/pf/bin/cluster/sync needs to communicate over an https_proxy.

Therefor I'd suggest to disable the proxy for /usr/local/pf/bin/cluster/sync.

Describe alternatives you've considered

  • keep own documentation stating to not forget to unset the proxy
  • use a wrapper or a shell configuration to automatically unset the proxy when sync is called

Additional context

To disable a proxy CURLOPT_NOPROXY needs to be set to *. The settings are provided in pf::api::jsonrpcclient . If there's no other use for this package that would let an admin expect that a configured proxy is used the option could simply be set there.

Otherwise pf::api::jsonrpcclient->new(host => $master_server, proto => 'https', username => $api_user, password => $api_password); in /usr/local/pf/bin/cluster/sync could be changed to include another option like noproxy => '*' which than would be used to overwrite the default to use a configured proxy in pf::api::jsonrpcclient.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant