search

aws / amazon-ssm-agent

An agent to enable remote management of your EC2 instances, on-premises servers, or virtual machines (VMs).
https://aws.amazon.com/systems-manager/
Apache License 2.0
1.04k stars 323 forks source link

Reverse Proxy #350

Open Kris523 opened 3 years ago

Kris523 commented 3 years ago

Hey,

I have the agent installed as a hybrid instance and need to reverse proxy all HTTP/HTTPS requests through my personal domain. This restriction is set by my customer, as their firewall is restricted and will only allow us to whitelist a single domain.

I tried using the proxy settings to redirect to my reverse proxy (https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-proxy-with-ssm-agent.html), but it didn't appear to work. If this is expected to work, does anyone know what the nginx settings would need to be to allow this to be forwarded?

Is there anyway for me to tell the ssm-agent to direct requests to my domain, which will then forward them along? I'd be interested in any other tips if the ssm-agent cannot do this.

Thanks.

VishnuKarthikRavindran commented 3 years ago

Hi @Kris523,

Thanks for reaching out. As this is on-prem network configuration, we will not be able to provide suggestions with the settings. Could you please try opening a support ticket in AWS Console for further assistance?

https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-agent-logs.html https://docs.aws.amazon.com/awssupport/latest/user/case-management.html#creating-a-support-case

evulhotdog commented 2 years ago

@Kris523 what did you end up doing to resolve your problem?

Also, did you try using a http_proxy?

Kris523 commented 2 years ago

@evulhotdog I end-up not using ssm-agent. I did test using a cloud proxy and http_proxy setting, but that uses a forward proxy, not a reverse proxy, which wouldn't work for our network. Even further, that mechanism breaks down when you have a proxy on the network, and you want to forward your traffic to a proxy in the cloud. I talked with an amazon representative, and they told me they would get back to me if they scheduled the work. I haven't heard anything