Carbonio CE and HTTP Proxy

Carbonio CE and HTTP Proxy#

Many organisations operate within secured network environments where direct Internet access is restricted and blocked by firewall rules or corporate policies.

Using an HTTP proxy allows administrators to control and monitor outbound connections from the Carbonio CE server, ensuring that only approved services and destinations are accessible.

In a scenario like this, configuring an HTTP proxy is mandatory for Carbonio CE to function properly: this can be achieved using the zimbraHttpProxyURL attribute as follows.

Note

All commands in this section must be executed as the zextras user user.

First, login to the any Node installing the Proxy and check the current configuration of the attribute.

zextras$ carbonio prov getConfig zimbraHttpProxyURL

If there is no output, Carbonio CE tries to use a direct connection to the Internet, which in the scenario depicted above does not work, so we need to configure the attribute as follows.

Unauthenticated proxy
zextras$ carbonio prov modifyConfig zimbraHttpProxyURL http://proxy.example.com:8080

Replace http://proxy.example.com:8080 with the actual proxy that needs to be used.

Authenticated proxy
zextras$ carbonio prov modifyConfig zimbraHttpProxyURL http://username:password@proxy.example.com:8080

Replace http://username:password@proxy.example.com:8080 with the correct values

Finally, restart the service.

Execute, as the zextras user

zextras$ zmcontrol restart

Execute, as the zextras user

zextras$ zmcontrol restart

Execute, as the zextras user

zextras$ zmcontrol restart

Execute, as the root user

# systemctl start/stop/restart carbonio-proxy.target