Skip to content

Commit 51a690b

Browse files
Update configure-proxy-settings-23h2.md
1 parent bcc5711 commit 51a690b

File tree

1 file changed

+6
-7
lines changed

1 file changed

+6
-7
lines changed

azure-local/manage/configure-proxy-settings-23h2.md

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -165,7 +165,7 @@ When configuring the `WinHTTP` proxy bypass list string, keep the following poin
165165
166166
## Configure proxy settings for Environment Variables
167167
168-
You must configure the proxy for Azure Resource Bridge and AKS before you [Register the machines with Azure Arc](../deploy/deployment-arc-register-server-permissions.md).
168+
You must configure the proxy for Azure Resource Bridge, AKS and Arc enabled Kubernetes agents before you [Register the machines with Azure Arc](../deploy/deployment-arc-register-server-permissions.md).
169169
170170
To set the proxy server Environment Variable, run the following commands as administrator on each machine in the system:
171171
@@ -186,7 +186,7 @@ The parameters are described in the following table:
186186
|---|---|
187187
| HTTPS_PROXY variable | Specifies the proxy server endpoint in the format `http://[Proxy_Server_Address]:[Proxy_Port]`. For example, `http://proxy.contoso.com:8080`. |
188188
| HTTP_PROXY variable | Specifies the proxy server endpoint in the format `http://[Proxy_Server_Address]:[Proxy_Port]`. For example, `http://proxy.contoso.com:8080`. |
189-
| NO_PROXY variable | String to bypass local intranet URLs, domains, and subnets. On your Azure Local the list must include:<br><br>- At least the IP address of each machine.<br>- At least the IP address of system.<br>- At least the IPs you defined for your infrastructure network. Arc Resource Bridge, AKS, and future infrastructure services using these IPs require outbound connectivity.<br>- Or you can bypass the entire infrastructure subnet.<br>- NetBIOS name of each machine.<br>- NetBIOS name of the system.<br>- Domain name or domain name with dot `.` wildcard for any host or subdomain.<br>- `.svc` for internal Kubernetes service traffic.|
189+
| NO_PROXY variable | String to bypass local intranet URLs, domains, and subnets. On your Azure Local the list must include: <br><br>- At least the IP address of each machine. <br>- At least the IP address of system. <br>- NetBIOS name of each machine. <br>- NetBIOS name of the system. <br>- Domain name or domain name with dot `.` wildcard for any host or subdomain. <br>- At least the IPs you defined for your infrastructure network. Arc Resource Bridge, and future infrastructure services using these IPs require outbound connectivity. <br>- Or you can bypass the entire infrastructure subnet. <br>- The subnets on which you plan on deploying your AKS clusters. <br>- `.svc`, `kubernetes.default.svc` and `.svc.cluster.local` for internal Kubernetes service traffic. <br>- `10.0.0.0/8`, `172.16.0.0/12` and `192.168.0.0/16`. These subnets are required for creating AKS clusters and Azure Arc agents. |
190190

191191
Here's an example of the command usage:
192192

@@ -195,7 +195,7 @@ Here's an example of the command usage:
195195
$env:HTTPS_PROXY = [System.Environment]::GetEnvironmentVariable("HTTPS_PROXY", "Machine")
196196
[Environment]::SetEnvironmentVariable("HTTP_PROXY", "http://192.168.1.250:8080", "Machine")
197197
$env:HTTP_PROXY = [System.Environment]::GetEnvironmentVariable("HTTP_PROXY", "Machine")
198-
$no_proxy = "localhost,127.0.0.1,.svc,192.168.1.0/24,.contoso.com,node1,node2,s-cluster"
198+
$no_proxy = "localhost,127.0.0.1,.svc,kubernetes.default.svc,.svc.cluster.local,192.168.1.0/24,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,.contoso.com,node1,node2,s-cluster"
199199
[Environment]::SetEnvironmentVariable("NO_PROXY", $no_proxy, "Machine")
200200
$env:NO_PROXY = [System.Environment]::GetEnvironmentVariable("NO_PROXY", "Machine")
201201
```
@@ -209,9 +209,8 @@ When configuring the Environment Variables proxy bypass list string, keep the fo
209209
- Asterisk `*` as wildcards to bypass subnets or domain names isn't supported.
210210
- Dots `.` Should be used as wildcards to bypass domain names or local services. For example `.contoso.com` or `.svc`.
211211
- Proxy name must be specified with `http://` and the port for both HTTP_PROXY and HTTPS_PROXY variables. For example, `http://192.168.1.250:8080`.
212-
- `.svc` bypass is for AKS internal services communication in Linux notation. This is required for Arc Resource Bridge and AKS.
213-
- AKS requires to bypass the following subnets. 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16. These subnets will be added to the Environment Variables bypass list automatically if they aren't defined.
214-
- The use of `<local>` strings isn't supported in the proxy bypass list.
212+
- `.svc`, `kubernetes.default.svc` and `.svc.cluster.local,.svc` bypass is for AKS internal services communication in Linux notation. This is required for Arc Resource Bridge and AKS.
213+
- AKS requires to bypass the following subnets. `10.0.0.0/8`, `172.16.0.0/12` and `192.168.0.0/16`. These subnets will be added to the Environment Variables bypass list automatically if they aren't defined.
215214

216215
### Confirm and remove the Environment Variables proxy configuration
217216

@@ -269,4 +268,4 @@ If you're using or plan to use any of the following Azure services, refer to the
269268

270269
For more information, see:
271270

272-
- [Firewall requirements for Azure Local](../concepts/firewall-requirements.md).
271+
- [Firewall requirements for Azure Local](../concepts/firewall-requirements.md).

0 commit comments

Comments
 (0)