Support of HTTP Proxies

Starting with 8.1.400.27, URS provides support of HTTP Proxies for an "https://" type of request. HTTP Proxies are specified either in the request itself or globally at the URS Application level, in the web section.

Starting with 8.1.400.45, URS can use the HTTP CONNECT method to establish a secure tunnel between URS and the web server when accessing a secure web server through a proxy server. The option proxy_use_connect controls the connection method.

def_https_proxy_host
Location in Configuration Layer by precedence: web section of URS
Default Value: An empty string
Valid Values: Any valid host name
Changes Take Effect: After restart

This option specifies the HTTP Proxy host for an "https://" type of connection.

def_https_proxy_port
Location in Configuration Layer by precedence: web section of URS
Default Value: An empty string
Valid Values: TCP port
Changes Take Effect: After restart

This option specifies the HTTP Proxy port for an "https://" type of connection.

URS checks these options only if a request does not contain the HTTP Proxy host and port specified. HTTP Proxy for "https://" must be fully trusted and support secure connection on the Proxy port.

proxy_use_connect
Location in Configuration Layer by precedence: web section of URS
Default Value: true
Valid Values: true, false
Changes Take Effect: After restart

This option specifies the connection method to a secure web server through a HTTP proxy server.

• A value of true uses the HTTP CONNECT method. URS communicates with web servers through HTTP proxy and performs TLS negotiations directly with the web server.
• A value of false uses the legacy method (not recommended). URS communicates with web servers through HTTP proxy and performs TLS negotiations with the proxy server.