Skip to main content

Forward proxies for mabl Link traffic

Molly Exten
  • Updated

If you're running the Link Agent in a network that uses a forward proxy, you can use proxy options to ensure outgoing Link traffic is successfully routed to the mabl Link Service.

Proxy auto-configuration (PAC) files

If your organization uses a PAC file to configure proxy settings, you must run the Link Agent using a configuration file instead of passing options on the command line. See the article on Link Agent configuration files for more details.

Proxy configurations

Use the following command-line arguments to configure the proxy:

Option Description
--http-proxy or -h  Provide the proxy server host address and port in the following format: --http-proxy host:port
--proxy-auth or -i Optional - If the proxy server requires authentication, provide a username and password in the following format: --proxy-auth username:password
--proxy-mode or -y Optional - Specify which traffic should use the proxy. See the section on proxy modes for more details.
--proxy-exclude Optional - Configure outgoing mabl Link traffic to bypass specific IP addresses, CIDR ranges, hosts, or domains. See the section on proxy exclusions for more details.

Proxy modes

By default, only connections to mabl, including API calls and the secure tunnel, use the configured proxy settings. To apply the proxy differently, use the --proxy-mode or -y option with a different mode:

Proxy mode Description
--proxy-mode all All connections are made through the configured proxy.
--proxy-mode none No connections use the configured proxy. All connections are made without using the proxy.
--proxy-mode mabl Default setting - Connect to *.link.mabl.com and api.mabl.com using the configured proxy settings. All other connections, such as the connection to the system under test, are made without using the proxy.
--proxy-mode upstream Only connect to upstream hosts, such as the system under test, with the configured proxy settings. Connections to mabl are made without using the proxy.

The following diagrams illustrate how each proxy mode works.

mabl Link with proxy mode set to "All".

link_proxy_all.png

mabl Link with proxy mode set to "mabl".

link_proxy_mabl.png

mabl Link with proxy mode set to "none".

link_proxy_none.png

mabl Link with proxy mode set to "upstream".

link_proxy_upstream.png

 

Proxy exclusions

If a proxy is required to access certain hosts but not others, specify proxy exclusions as a comma-delimited list. A proxy exclusion can be one of the following types:

  • A single IP address - for example: 192.168.10.50
  • A CIDR range - for example: 10.0.0.0/8
  • A host or domain - for example: example.com.

If you exclude a host or domain, the address is treated as a suffix. For example, if you use example.com in an exclusion, that exclusion will also match www.example.com, api.example.com, and host1.subdomain1.example.com.

A complete example might look like this:

--proxy-exclude "localhost,127.0.0.1,192.168.10.50,10.0.0.0/8,example.com"



 

Related articles