Configure proxies for on-premises environments

Some organizations require that all server traffic goes through a proxy server for tracking or packet inspection. This section describes how to configure your environment in these cases.

Configure the proxy

Perform the following steps in each node of type OrchestratorType in the Microsoft Azure Service Fabric cluster.

1. Use remote access to connect to the Orchestrator virtual machine (VM).

2. Run the following PowerShell script to retrieve the path of the machine.config file.

   [System.Runtime.InteropServices.RuntimeEnvironment]::SystemConfigurationFile
   

3. Edit the machine.config file to add the following code example.

   <system.net>
    <defaultProxy>
      <proxy usesystemdefault="true" proxyaddress="http://<PROXYADDRESS>:<PROXYPORT>" bypassonlocal="true" />
    </defaultProxy>
   </system.net>
   

4. Save the file.

5. Restart the virtual machine.

Perform the preceding procedure for all Orchestrator node VMs.

Safe list URLs

The LocalAgent needs to communicate with Azure resources and Microsoft Dynamics Lifecyle Services. As a result, add some URLs to a safe list on the proxy or firewalls so that all OrchestratorType nodes can access them. The URLs vary depending on which region your environment is being deployed from.

Lifecyle Services Global

- lcsapi.lcs.dynamics.com
- login.windows.net
- uswelcs1lcm.queue.core.windows.net
- www.office.com
- login.microsoftonline.com
- dc.services.visualstudio.com
- uswelcs1lcm.blob.core.windows.net

Lifecyle Services EU

- lcsapi.eu.lcs.dynamics.com
- login.windows.net
- euweprodlcm.queue.core.windows.net
- www.office.com
- login.microsoftonline.com
- dc.services.visualstudio.com
- euweprodlcm.blob.core.windows.net