Question Plesk in intranet and outgoing traffic through a proxy

[marcemi]

Server operating system version

Linux Debian 11

Plesk version and microupdate number

Obsidian 18.0.56.1

In my infrastructure all outgoing traffic needs to transit through an http proxy.
Is there a way to configure plesk in order to use an http proxy for outgoing traffic?

Marcello

 

[Peter Debik]

Here are some thoughts on this. I think you'll at least need this

Running Plesk Behind a Router with NAT

If your Plesk server is behind NAT, you can match private IP addresses on the server to the corresponding public IP a...

docs.plesk.com

because in that configuration your Plesk web server IP addresses won't be the public IP addresses of the network. You'll probably also need to edit the virtual host templates so that Nginx (if you use Nginx+Apache) will not listen on ports 80/443, but on the ports that your http proxy sends requests to.

 

[marcemi]

Hi Peter, thanks

In my scenario the Plesk panel will not exposed to Internet, neither directly nor configuring a NAT for incoming traffic.

My question was about outgoing traffic. I'm new on Plesk software, I noticed that Plesk needs to contact external services at least to check license and I think also for other activities (plugin, updates...).

In my infrastructure all outgoing traffic needs to transit through a proxy for security reason.

I would like to configure Plesk in order to use a proxy server for any connection to internet.

 

[Peter Debik]

Sounds like an unsupported scenario. I am afraid that there is no documentation by Plesk on how to configure your network, because it is an unsupported configuration and use. Plesk does not behave any different when it is installed in a local network, but, as you already mentioned, it needs to communicate with other servers on the Internet, and that is not only for license reasons.

 

[mek]

Hi,

I had a real headache for 3 days searching for every solution I could...
I'm in the same scenario marcemi.

I want to expose Plesk behind LB and FW, but outgoing traffic is allowed only through proxies.

When I wanted to install all feature or updates, I could not go any further and stopped with errors.

The way I resolved this was is a bit twisted, using a squid in transparent mode and upstreaming to the main proxy.

Hope this helps.