Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No Proxy support for DynamoDB streams #2917

Closed
ThinkBriK opened this issue Aug 12, 2019 · 2 comments
Closed

No Proxy support for DynamoDB streams #2917

ThinkBriK opened this issue Aug 12, 2019 · 2 comments
Labels
aws Used for AWS Related Issues.

Comments

@ThinkBriK
Copy link

ThinkBriK commented Aug 12, 2019

DynamoDB streams do not honor HTTPS_PROXY env variable.
What happened:
Tried to set HTTP_PROXY and HTTPS_PROXY to use dynamoDB backend in a private environment, and I've got the error :

ERRO [DYNAMODB]  "Poll streams returned with error: RequestError: send request failed\ncaused by: Post https://streams.dynamodb.eu-west-3.amazonaws.com/: dial tcp 52.46.68.12:443: connect: connection timed out." dynamo/shards.go:62

When using aws cli from the same VM :

[~]$ export NO_PROXY=169.254.169.254
[~]$ export HTTP_PROXY=http://proxy.my.cloud:8080
[~]$ export HTTPS_PROXY=http://proxy.my.cloud:8080
[~]$ aws dynamodbstreams list-streams
{
    "Streams": [
        REDACTED
}

What you expected to happen:
Working HTTP Proxy support for DynamoDB streams

How to reproduce it (as minimally and precisely as possible):
Add HTTPS_PROXY and HTTP_PROXY variable to the SystemD unit and NO_PROXY=169.254.169.254 for metadata access in AWS.
Check logs

Environment:

  • Teleport version (use teleport version): Teleport v4.0.4 git:v4.0.4-0-g1a2ed507 go1.12.1
  • Tsh version (use tsh version): Teleport v4.0.4 git:v4.0.4-0-g1a2ed507 go1.12.1
  • OS (e.g. from /etc/os-release): Centos 7

Relevant Debug Logs If Applicable

ERRO [DYNAMODB]  "Poll streams returned with error: RequestError: send request failed\ncaused by: Post https://streams.dynamodb.eu-west-3.amazonaws.com/: dial tcp 52.46.68.12:443: connect: connection timed out." dynamo/shards.go:62
@ThinkBriK
Copy link
Author

Basically this issue prevent any private deployment with a proxified internet proxy : As DynamoDB Streams are not available via VPC endpoints and Teleport code doesn't support using a proxy, cluster members never reload their conf.

@zmb3 zmb3 added the aws Used for AWS Related Issues. label Oct 14, 2022
@zmb3
Copy link
Collaborator

zmb3 commented Feb 21, 2023

Looks like this was fixed in #4271

@zmb3 zmb3 closed this as completed Feb 21, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
aws Used for AWS Related Issues.
Projects
None yet
Development

No branches or pull requests

2 participants