topic Re: How to configure exceptions to proxy config in splunk-launch.conf? in Security

How to configure exceptions to proxy config in splunk-launch.conf?

flle — Tue, 29 Sep 2020 14:53:54 GMT

Hi,

to support several external lookups to internet services with APIs I added a proxy configuration to splunk-launch.conf:
HTTP_PROXY=proxy.example.net:8080
HTTPS_PROXY=proxy.example.net:8080

Now I have an external lookup to an API on my internal network which should connect directly but not via the proxy.
Forwarding the connection from the proxy to the internal network is not possible, so I need a solution on the Splunk Search Head.

Question:
Is it somehow possible to configure exceptions which should not go via the proxy configured in splunk-launch.conf?

Thanks & regards

Re: How to configure exceptions to proxy config in splunk-launch.conf?

itradeclayton — Tue, 21 Nov 2017 16:58:52 GMT

yes, there is a "no_proxy" setting, however the syntax is unclear... I'm also trying to find this out.

Re: How to configure exceptions to proxy config in splunk-launch.conf?

vliggio — Wed, 22 Nov 2017 16:47:01 GMT

Something like this:

NO_PROXY = *.domain.com,10.0.0.0/8,localhost,127.0.0.1,::1

You can set this either in your environment variables or in splunk-launch.conf. Either will work.

Re: How to configure exceptions to proxy config in splunk-launch.conf?

ejwade — Thu, 04 Jan 2018 00:41:15 GMT

I couldn't get it to work with wild cards or CIDR notation, but I did get it to work with the following:

no_proxy = fqdn.localdomain, 10.0.0.1, localhost, 127.0.0.1, ::1

The key is no quotes, and IPs/FQDNs fully spelled out.

Re: How to configure exceptions to proxy config in splunk-launch.conf?

micahkemp — Thu, 04 Jan 2018 00:43:42 GMT

I’ve seen the same behavior. Wildcards don’t appear to work, but lists do.