Roadrunner Temporal plugin - HTTP PROXY

[jur3]

Issue:
We have a datacenter where all external traffic must go through an HTTPS proxy, while internal traffic must not.

For our PHP application, we set the HTTPS_PROXY environment variable so that all requests to external sources go through the proxy. We also set the NO_PROXY environment variable so that requests to hosts in the internal network bypass the proxy.

When using Temporal.IO workflows with RoadRunner, we encounter a problem: RoadRunner must connect to the Temporal server, which is in the internal network. We set HTTPS_PROXY=xxxx and NO_PROXY="temporal-server", but the RoadRunner plugin still cannot connect to the Temporal server. We assume this is because the NO_PROXY environment variable is either not functioning or not implemented in the RoadRunner Temporal plugin.

Roadrunner version: 2025.1.1
PHP version : 8.2

Docker compose:

version: '3'
services:
  temporal-server:
    container_name: temporal-server
    image: temporalio/auto-setup:1.27.2
    networks:
      - temporal

  temporal-postgres:
    image: postgres:17.4
    networks:
      - temporal

  app-roadrunner:
    image: ....
    networks:
      - temporal
    environment:
      - HTTPS_PROXY=xxxxx
      - HTTP_PROXY=xxxx
      - NO_PROXY="temporal-server, temporal-server:7233, 127.0.0.1:6001, 127.0.0.1"
        
networks:
  temporal:
    name: temporal_development

Question:

• Is our assumption correct that the NO_PROXY environment variable is not supported/implemented in the RoadRunner Temporal plugin?
• If so, is there an alternative way to configure RoadRunner so that it connects directly to the internal Temporal server without going through the proxy?

[rustatian]

Hey @jur3 👋🏻
NO_PROXY is supported by the grpc options (RR uses Temporal SDK-GO under the hood). Other envs are http(s) specific and not used, since the Temporal server connects to the clients via gRPC.

I'll convert this discussion into a feature request and add NO_PROXY handling.

[jur3]

If I’m correct, we’ll need to wait for the implementation of that feature or find a workaround.
Do you have any suggestions on how to solve this?

[rustatian]

I already implemented it: temporalio/roadrunner-temporal#690

[rustatian]

If you want, you may use Velox (roadrunner-server/velox) to build your custom RR build with the master branch of the roadrunner-temporal plugin and test NO_PROXY handling. Or wait for the regular release.

[jur3]

Thank you for fast implementation.
I have some consideration about implementations, i wrote it to PR

[rustatian]

We're not controlling several resources. For the particual resource you may have proxy on or off. Temporal connection is a particular resource. So, for that gRPC connection, which connects to the Temporal server, you may have NO_PROXY on or off only.