Oracle ZFS Storage Appliance: Configuring an HTTP Application to Implement a Proxy Connection to Oracle ASR Infrastructure

Asset ID:	1-71-2017915.1
Update Date:	2018-05-29
Keywords:

Solution Type Technical Instruction Sure

Solution 2017915.1 : Oracle ZFS Storage Appliance: Configuring an HTTP Application to Implement a Proxy Connection to Oracle ASR Infrastructure

Applies to:

Oracle ZFS Storage ZS3-2 - Version All Versions to All Versions [Release All Releases]
Oracle ZFS Storage ZS3-4 - Version All Versions to All Versions [Release All Releases]
Sun ZFS Storage 7420 - Version All Versions to All Versions [Release All Releases]
Sun ZFS Storage 7320 - Version All Versions to All Versions [Release All Releases]
Sun Storage 7410 Unified Storage System - Version All Versions to All Versions [Release All Releases]
Information in this document applies to any platform.

Goal

The intent of this document is to describe how to configure a HTTP proxy application on your network so that you may properly access the Oracle Auto Service Request (ASR) service for your Oracle ZFS Storage appliance, using only a single outbound IP address to the internet.

This document will not make a recommendation as to which proxy application to use, nor does it advocate or prefer one application over another.

Solution

1) Install your http proxy software on your server that will direct traffic to the internet. We recommend installing this proxy on the same server as our Oracle ASR Manager software, to centralize your connection points to Oracle.

2) Once installed you will need to configure your proxy software by:

a) Set the Listener for the proxy application to be the IP address of the interface that traffic will be traveling to the internet
b) Set the port on the listener to what you require for traffic to travel outbound
c) Edit your Network Rules to either allow each ZFS Appliance head IP address (xxx.yyy.zzz.www) or each subnet containing both nodes (xxx.yyy.zzz.www/24)

NOTE: It is important to understand that if you have a clustered appliance, that BOTH heads of the appliance have their management interface connected and sending traffic, otherwise Oracle ASR may miss events that would open Service Requests.

d) Turn on URL Filters, and create a list of allowable domain names for ASR support as follows:

transport.oracle.com
inv-cs.oracle.com
asr-services.oracle.com

e) You will likely have to start or re-start your proxy service for these changes to take effect

3) On the Appliance, for either cluster node (you only need to do this on one of them), you will need to go to Configurations->Services->Phone Home
and check the "web proxy" box providing the host information and port for the interface you configured for your proxy software.

4) The ZFS Appliance will need to connect to the FQDN's from step 2d over SSL/443. This means that any firewall rules preventing outbound connections to port 443 for any of these FQDN's will cause a failure of proper operation of the ASR service.

Checked for currency - 29-May-2018

Attachments

This solution has no attachment