ARC agent connect on linux servers with private link and proxy

相关文章推荐

伤情的脸盆 · 番禺区社区卫生服务中心（站）服务时间、地址、 ...· 2 周前 ·

爽快的夕阳 · 国产达沙替尼治疗慢性髓性白血病慢性期患者的药 ...· 1 年前 ·

文雅的香槟 · 释宝志_百度百科· 1 年前 ·

不拘小节的电影票 · 唐玄宗失西域:高仙芝戰敗改寫中亞河中地區歷史 ...· 1 年前 ·

神勇威武的斑马 · 巫师（猎魔人）系列从原著小说到游戏的完整情节 ...· 1 年前 ·

I'm trying to connect a linux server, in this case ubuntu 20.04 but we have other editions that have the same issue. I have been able to install azcmagent and have configured the proxy and the bypass for ARC. We have DNS in place that will resolve gbl.his.arc.azure.com and ae.his.arc.azure.com

When I run the connect command I get as far as

ERROR Failed to send config info to agent Error="read unix @->/var/opt/azcmagent/socks/himds.sock: i/o timeout"
ERROR Created Arc resource but couldn't connect it. You may delete the ARM resource and run azcmagent connect again to onboard. Error="read unix @->/var/opt/azcmagent/socks/himds.sock: i/o timeout"
DEBUG No proxy will be used: destination: gbl.his.arc.azure.com, bypass rule: arc
DEBUG Exiting...
DEBUG Starting client connection on: /var/opt/azcmagent/socks/himds.sock
DEBUG Awaiting status message from agent...
DEBUG Status Message received
DEBUG Cancelled change token
INFO Exit Code: AZCM0061: Agent Communication Error
INFO For troubleshooting, see https://aka.ms/arc/azcmerror
FATAL read unix @->/var/opt/azcmagent/socks/himds.sock: i/o timeout
DEBUG Exiting...

While watching the logs I observe the following

Get \"https://gbl.his.arc.azure.com/discovery?location=australiaeast&api-version=1.1-preview\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)"

When checking our firewall and proxy server I can see that gbl.his.arc.azure.com is trying to go through the proxy server

I have tried adding no_proxy="gbl.his.arc.azure.com,ae.his.arc.azure.com,global.in.ai.monitor.azure.com,api.monitor.azure.com,global.handler.control.monitor.azure.com,diagservices-query.monitor.azure.com,live.monitor.azure.com,profiler.monitor.azure.com,snapshot.monitor.azure.com"
but get the same error

I have restarted he himdsd service multiple times with the same error.

I have been able to get this working on at least 2 servers but I have a few that are still not working.

I have a similar issue, exactly the same error, I actually need all the traffic to go through the proxy server due to some weird routing meaning the end devices have no route for internet access at all. I have private endpoints configured and the proxy server has all the relevant DNS to go to the private endpoints rather than the public internet ones. Is there a more detailed diagnostic tool or checks we can do to help find out which URL isnt quite going the right direction perhaps ? The Connectivity test included in the command line of the agent all comes back as OK. As always it worked fine in test.

@Nick Murphy , Apologies for the delayed response. Based on the error, can you please check and ensure that proxy was set using azcmagent config set proxy.url cmd. The proxy details from environment variable ( although could be inherited by the azcmagent cli tool when run from terminal ), might not get inherited for the server process (himds etc.). Therefore, it is required to be set using the azcmagent config set proxy.url command. Please see this link for more details - Update or remove proxy settings

Also, for bypassing proxy for specific set of URLs, you may use azcmagent config set proxy. Bypass command. Please see the following link for details and usage example - Proxy bypass for private endpoints

Please let me know if you have any questions.