topic Use proxy server for Agent of java in AppD Archive

Use proxy server for Agent of java

CommunityUser — Thu, 16 Oct 2014 10:19:42 GMT

Hi, I installed a agent of java in our tomcat server and we have to use proxy server to transfer datat to Appdynamics SaaS

due to network restriction.

I set proxyHost, proxyPort as system properites as the following.

But no data can be seen on Appdynamics Saas and no log is found.

Is the setting wrong?

================================================================================

export JAVA_OPTS="$JAVA_OPTS -javaagent:/usr/local/tomcat/appagent/javaagent.jar -Dappdynamics.http.proxyHost=xxx.proxy.com -Dappdynamics.http.proxyPort=xxxx"

================================================================================

Re: Use proxy server for Agent of java

Ravi_Giroti — Fri, 17 Oct 2014 00:09:07 GMT

Hello,

Please change the Java options as shown below and restart Tomcat.

export JAVA_OPTS="$JAVA_OPTS -Dappdynamics.http.proxyHost=xxx.proxy.com -Dappdynamics.http.proxyPort=xxxx -javaagent:/usr/local/tomcat/appagent/javaagent.jar"

Can you also share the output of the following command so we can see if the proxy configuration is being read?

ps -ef | grep java

Thanks,

Ravi

Re: Use proxy server for Agent of java

CommunityUser — Fri, 17 Oct 2014 01:20:31 GMT

Thank you for your answer.

I changed my setting but it is still not working.

tomcat 30292 1 56 00:55 pts/0 00:00:32 /usr/local/jdk1.7/bin/java -Dappdynamics.http.proxyHost=xxx.proxy.com -Dappdynamics.http.proxyPort=xxxx -javaagent:/usr/local/tomcat/appagent/javaagent.jar -verbose:gc -XX:+PrintGCTimeStamps -Dcom.sun.management.config.file=/usr/local/tomcat/conf/management.properties -Djava.endorsed.dirs=/usr/local/tomcat/endorsed -classpath :/usr/local/tomcat/bin/bootstrap.jar:/usr/local/tomcat/bin/commons-logging-api.jar -Dcatalina.base=/usr/local/tomcat/ -Dcatalina.home=/usr/local/tomcat -Djava.io.tmpdir=/usr/local/tomcat/temp org.apache.catalina.startup.Bootstrap start

Re: Use proxy server for Agent of java

CommunityUser — Fri, 17 Oct 2014 07:03:39 GMT

Hi,

Can you check the logs folder of the agent directory and see if a new folder is created with the node name that you have specified in the controller-info.xml. If so please send us the logs? Can you also send us the controller-info.xml file from the config folder?

Please also confirm that this is a non-authenticating proxy.

Re: Use proxy server for Agent of java

CommunityUser — Fri, 17 Oct 2014 09:29:28 GMT

> Can you check the logs folder of the agent directory and see if a new folder is created with the node name that you have > > > specified in the controller-info.xml. If so please send us the logs? Can you also send us the controller-info.xml file from the > > > config folder?

There is no logs folder on the agent directory, and also I didn't change logs directory setting.

I attached the controller-info.xml file.

> Please also confirm that this is a non-authenticating proxy.

Yes, it is non-authenticating.

Re: Use proxy server for Agent of java

CommunityUser — Fri, 17 Oct 2014 11:46:36 GMT

I do not see the attachment. Can you attach the controller-info.xml file again.

Re: Use proxy server for Agent of java

CommunityUser — Thu, 12 Feb 2015 15:13:32 GMT

I used these with success:

-Dcom.singularity.httpclientwrapper.proxyHost=xxx

-Dcom.singularity.httpclientwrapper.proxyPort=nnnn

Re: Use proxy server for Agent of java

CommunityUser — Mon, 16 Feb 2015 10:24:49 GMT

I have the same issue for the Java agent "ver4.0.0.0".

> -Dappdynamics.http.proxyHost=proxy.mycompany.com -Dappdynamics.http.proxyPort=<theRightPort>

does not for work for me either for both https and http -- of course configured accordingly in controller-info.xml.

> -Dcom.singularity.httpclientwrapper.proxyHost=xxx -Dcom.singularity.httpclientwrapper.proxyPort=nnnn

paramter works for http.

For https I have problems with the certificate validation chain:

"PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"

I have not further looked into the SSL issue, but in production (and not playing around with dummys) encryption is a must have.

Re: Use proxy server for Agent of java

Arun_Dasetty — Mon, 16 Feb 2015 12:59:14 GMT

Hi,

We see this could be due to missing certificates that is attached in this update. We request you to import the attached certificates to your truststore

https://docs.appdynamics.com/display/OTHER/FAQ+on+SSL+Certificate+Change#FAQonSSLCertificateChange-ImporttheDigicertRootCAcertificateintoapplicationtrustStore

Hope that information helps. If error persists post jvm restart on affected node. please send the zipped version <agent_install_dir>/logs for our review.

Regards,

Arun

Re: Use proxy server for Agent of java

CommunityUser — Wed, 18 Feb 2015 14:06:13 GMT

Thanks for your help. It was actually an issue with our proxy playing a "man in the middle attack" and using self signed certificates.

I included a cacerts.jks (with the needed keys) in the conf folder. Then the SSL issues where resolved.

BTW: in the readme.txt of the 4.0.1.0 version there is still a link to the old documentation at http://docs.appdynamics.com/display/PRO14S/Install+the+App+Agent+for+Java

In the readme.txt there are also the proxy JVM paramters that do not work....