Add or edit the proxy server configuration to control outbound HTTPS connections from the HCX Manager.

A proxy server can be set up during HCX system installation and activation. Alternatively, you can add or update the proxy server at any time through the HCX system management interface. Setting up a proxy server has the following consideration and limitations:

When adding or updating a proxy server the following considerations and limitations apply:

Prerequisites

Adding or updating a proxy server has the following exclusion requirements:
  • By default, when you configure a proxy server, the HCX Manager sends it all HTTPS connections, including the local vCenter Server, ESXi, NSX, and HCX-IX. These local systems must be encompassed in the list of exclusions.
  • Site paired HCX Cloud Manager URLs must be included in the exclusions when the proxy server is not traversed to reach them.
  • Authenticated proxies are supported when they use local authentication. Proxies with delegated authentication (like Kerberos or NTLM ) are not supported. The HCX connect.hcx.vmware.com and hybridity-depot.vmware.com URLs must be added as exclusions on the proxy server.

Procedure

  1. Log in to the HCX management interface: https://hcx-ip-or-fqdn:9443.
  2. Navigate to the Administration tab, and select Proxy.
  3. Enter or edit the proxy server settings:
    1. Proxy Server IP address or FQDN.
    2. Proxy Server Port.
    3. Proxy Server User.
    4. Proxy Server Password.
    5. Proxy Exclusions.

      Using a comma separated list to define all related proxy server exclusions, enter any IP, subnet, host, and/or domain names. Use * for wildcard values and do not include complete URLs (no https://).

      Note:

      By default, when you configure a proxy server, the HCX Manager sends it all HTTPS connections, including the local vCenter Server, ESXi, NSX, and HCX-IX. These local systems must be encompassed in the list of exclusions. The site-paired HCX Cloud Manager also should be excluded when it is local and the proxy server is not traversed.

  4. To verify the configuration, click Test Connection and enter the test URL.
  5. Click Save.
  6. Restart the HCX services.

    Restarting HCX services is required for the proxy exclusions to take effect. For more information, see Monitoring HCX Services from the Appliance Management Interface.