# Adding Application proxy address to avoid connection issue **URL:** \ **Category:** SHF Discussion and Questions\ **Tags:** webservice-connector, sailpoint-identity-security\ **Created:** [September 16, 2024, 9:15am UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341 "2024-09-16T09:15:28Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![Divya\_Kusumula03](https://avatars.discourse-cdn.com/v4/letter/d/d07c76/32.png) [@Divya\_Kusumula03](https://developer.sailpoint.com/discuss/u/Divya_Kusumula03)\ **Post date:** [September 16, 2024, 9:15am UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/1 "2024-09-16T09:15:28Z")
Hi Team, We have issue with test connection for webservice connectors, as part of that we are asked to add one proxy address in VA. I would greatly appreciate if someone could guide me the process of adding that . Thanks, Divya ---
**Author:** ![Manish4031](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/manish4031/32/14030_2.png) [@Manish4031](https://developer.sailpoint.com/discuss/u/Manish4031)\ **Post date:** [September 16, 2024, 9:18am UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/2 "2024-09-16T09:18:17Z")
Hi Divya, [Virtual Appliance HTTP Proxy Configuration proxy.yaml File - Compass (sailpoint.com)](https://community.sailpoint.com/t5/IdentityNow-Connectors/Virtual-Appliance-HTTP-Proxy-Configuration-proxy-yaml-File/ta-p/74866) ---
**Author:** ![Manish4031](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/manish4031/32/14030_2.png) [@Manish4031](https://developer.sailpoint.com/discuss/u/Manish4031)\ **Post date:** [September 16, 2024, 9:20am UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/3 "2024-09-16T09:20:13Z")
Uncomment the lines below and enter URL values, with port for both the http and https proxy Note: You must reboot the VA for these settings to take effect (‘sudo restart’) http\_proxy: http://:@:8080/ http\_proxy: https://:@:8080/ ---
**Author:** ![Divya\_Kusumula03](https://avatars.discourse-cdn.com/v4/letter/d/d07c76/32.png) [@Divya\_Kusumula03](https://developer.sailpoint.com/discuss/u/Divya_Kusumula03)\ **Post date:** [September 16, 2024, 9:24am UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/4 "2024-09-16T09:24:22Z")
Hi @Manish4031 , Thank you for the suggestion. We have other proxy added in proxy.yaml file. if i need to add other one with TCP 443 . how can i add? Thanks, Divya ---
**Author:** ![MeKhalbi](https://avatars.discourse-cdn.com/v4/letter/m/2acd7d/32.png) [@MeKhalbi](https://developer.sailpoint.com/discuss/u/MeKhalbi)\ **Post date:** [September 16, 2024, 9:27am UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/5 "2024-09-16T09:27:26Z")
Hi @Divya_Kusumula03 , Can’t you add your web server’s hostname to the whitelist of the proxy you’re already using? ---
**Author:** ![Divya\_Kusumula03](https://avatars.discourse-cdn.com/v4/letter/d/d07c76/32.png) [@Divya\_Kusumula03](https://developer.sailpoint.com/discuss/u/Divya_Kusumula03)\ **Post date:** [September 16, 2024, 9:29am UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/6 "2024-09-16T09:29:25Z")
Hi @MeKhalbi Could you please suggest on how can i add that? Thanks, Divya ---
**Author:** ![MeKhalbi](https://avatars.discourse-cdn.com/v4/letter/m/2acd7d/32.png) [@MeKhalbi](https://developer.sailpoint.com/discuss/u/MeKhalbi)\ **Post date:** [September 16, 2024, 9:55am UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/7 "2024-09-16T09:55:01Z")
You might need support from your network admin to whitelist the URL for your web server same as you did for the tenant URL or the other URL that need to be whitelisted as part of the VA config [System and Network Requirements - SailPoint Identity Services](https://documentation.sailpoint.com/saas/help/va/requirements_va.html#allowing-va-traffic-to-required-urls). If your web server is hosted internally in the same network as the VA, I would just configure the hostname in the proxy config file as per the documentation: > For example, you might have a custom connector that needs to reach locally-hosted APIs. In this case, add the following line to the `proxy.yaml` file: > > `no_proxy: |` ---
**Author:** ![Divya\_Kusumula03](https://avatars.discourse-cdn.com/v4/letter/d/d07c76/32.png) [@Divya\_Kusumula03](https://developer.sailpoint.com/discuss/u/Divya_Kusumula03)\ **Post date:** [September 20, 2024, 10:10am UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/8 "2024-09-20T10:10:12Z")
Hi @MeKhalbi , Thank you for the reply! We tried with no\_proxy Option, unfortunately it didnt work. Thanks, Divya ---
**Author:** ![shaileeM](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shaileem/32/15314_2.png) [@shaileeM](https://developer.sailpoint.com/discuss/u/shaileeM)\ **Post date:** [September 20, 2024, 10:15am UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/9 "2024-09-20T10:15:48Z")
Hi @Divya_Kusumula03 , Please ensure that the hostnames are used as is. The paramter no\_proxy is case sensitive. Thanks, Shailee ---
**Author:** ![Divya\_Kusumula03](https://avatars.discourse-cdn.com/v4/letter/d/d07c76/32.png) [@Divya\_Kusumula03](https://developer.sailpoint.com/discuss/u/Divya_Kusumula03)\ **Post date:** [September 20, 2024, 10:35am UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/10 "2024-09-20T10:35:44Z")
Hi @shaileeM , Yes, it is added as is. However our proxy.yaml file looks like this before and after adding new proxy before (Sample Values) https\_proxy: [http://11.44.112.0:80/](http://11.44.112.0:80/) http\_proxy: [http://11.44.112.0:80/](http://11.44.112.0:80/) After (Sample Values) https\_proxy: [http://11.44.112.0:80/](http://11.44.112.0:80/) http\_proxy: [http://11.44.112.0:80/](http://11.44.112.0:80/) no\_proxy: webproxy.abc.xyx.services Is this correct way of adding the new proxy? please advise. Thanks, Divya ---
**Author:** ![MeKhalbi](https://avatars.discourse-cdn.com/v4/letter/m/2acd7d/32.png) [@MeKhalbi](https://developer.sailpoint.com/discuss/u/MeKhalbi)\ **Post date:** [September 20, 2024, 10:46am UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/11 "2024-09-20T10:46:07Z")
Hi @Divya_Kusumula03 can you try changing the host on the no\_proxy input from the web proxy hostname to your web web server’s one. ---
**Author:** ![suraj\_gorle](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/suraj_gorle/32/35158_2.png) [@suraj\_gorle](https://developer.sailpoint.com/discuss/u/suraj_gorle)\ **Post date:** [September 20, 2024, 11:39am UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/12 "2024-09-20T11:39:16Z")
Hi @Divya_Kusumula03 Please refer below post for proxy related doubt. > [@Multiple URL exemption in proxy.yaml using no\_proxy with WebService Connector](https://developer.sailpoint.com/discuss/t/multiple-url-exemption-in-proxy-yaml-using-no-proxy-with-webservice-connector/69479): > > Hi All, wanted to check someone has faced this issue before and can help us. We are trying to exempt multiple URLs to go via proxy using no\_proxy config paramter in proxy.yaml. However it works for one host i.e. we can only exempt one host from going via proxy. Below configuration is expected to exempt both host1 and host2 from going via proxy, however it doesnt exempt any of them. Connections to both of them are going via proxy URL only. no\_proxy: \|\ When we define on… ---
**Author:** ![Divya\_Kusumula03](https://avatars.discourse-cdn.com/v4/letter/d/d07c76/32.png) [@Divya\_Kusumula03](https://developer.sailpoint.com/discuss/u/Divya_Kusumula03)\ **Post date:** [September 20, 2024, 3:10pm UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/13 "2024-09-20T15:10:37Z")
Hi @MeKhalbi , I tried, couldn’t resolve the issue. Below is the error message found in logs for test connection. **message":“I/O exception (org.apache.http.NoHttpResponseException) caught when processing request to {tls}-\>http://11.44.222.6:80-\>https://domain.dev.gig.com:443: The target server failed to respond”** Error in UI ![image](https://global.discourse-cdn.com/sailpoint/original/3X/5/a/5ab2869c6dc131718229cb1b2d361dac21438bdf.png) Please advise if we can try other ways. Thanks, Divya ---
**Author:** ![shaileeM](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shaileem/32/15314_2.png) [@shaileeM](https://developer.sailpoint.com/discuss/u/shaileeM)\ **Post date:** [September 20, 2024, 3:43pm UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/14 "2024-09-20T15:43:02Z")
Hi Divya, What are the two hosts that you are trying to expemt and so declare in no\_proxy? Are they : 1. webproxy.abc 2. xyz.services If so, its should be as below in proxy.yaml `no_proxy: webproxy.abc|xyz.services` After changing it, you need to restart the ccg services, before trying the test connection Thanks, Shailee ---
**Author:** ![Divya\_Kusumula03](https://avatars.discourse-cdn.com/v4/letter/d/d07c76/32.png) [@Divya\_Kusumula03](https://developer.sailpoint.com/discuss/u/Divya_Kusumula03)\ **Post date:** [September 20, 2024, 3:57pm UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/15 "2024-09-20T15:57:51Z")
Hi Shailee @shaileeM , it is single host we are trying to exempt, which is **webproxy.abc.xyx.services**. we did VA reboot after doing the changes. Thanks, Divya ---
**Author:** ![shaileeM](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shaileem/32/15314_2.png) [@shaileeM](https://developer.sailpoint.com/discuss/u/shaileeM)\ **Post date:** [September 20, 2024, 4:40pm UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/16 "2024-09-20T16:40:30Z")
Hi Divya, Seems like no\_proxy environment variable is not getting updated in your VA. Can you check the environment variables using below command : `env | grep -ia "no_proxy"` If the result is empty, I would suggest to manually export the no\_proxy variable : 1. Export the no\_proxy parameter manually using following command : `export no_proxy=webproxy.abc.xyz.services` 1. Restart ccg service 2. Verify the environment variable again above env command 3. Test connection Hope this helps. ---
**Author:** ![Sivakrishna1993](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sivakrishna1993/32/25424_2.png) [@Sivakrishna1993](https://developer.sailpoint.com/discuss/u/Sivakrishna1993)\ **Post date:** [September 22, 2024, 12:13pm UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/17 "2024-09-22T12:13:25Z")
Hi You have to white list your target IP with host name in the hosts.yaml file. Path : /home/sailpoint/hosts.yaml The file looks like below hosts: 10.xx…xx.xx: - [sample.demo.com](http://sample.demo.com) - sample Here first line is your Target app IP address 2nd line is full host name of your target application 3rd line is your host name before the . Value Save the file as hosts.yanl and reboot the VA Thanks, Siva.K ---
**Author:** ![Divya\_Kusumula03](https://avatars.discourse-cdn.com/v4/letter/d/d07c76/32.png) [@Divya\_Kusumula03](https://developer.sailpoint.com/discuss/u/Divya_Kusumula03)\ **Post date:** [September 25, 2024, 2:25pm UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/18 "2024-09-25T14:25:09Z")
Hi @shaileeM , Just a change in the proxy configuration. We need to access the destination Via Proxy and the proxy is **webproxy.abc.xyx.services**. Existing proxy.yaml config file looks like below https\_proxy: [http://11.44.112.0:80/](http://11.44.112.0/) http\_proxy: [http://11.44.112.0:80/](http://11.44.112.0/) Could you please suggest on how can we add the new proxy address in proxy.yaml file to resolve the issue. Thanks, Divya ---
**Author:** ![shaileeM](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/shaileem/32/15314_2.png) [@shaileeM](https://developer.sailpoint.com/discuss/u/shaileeM)\ **Post date:** [September 25, 2024, 4:09pm UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/19 "2024-09-25T16:09:51Z")
Hi @Divya_Kusumula03 , You can add manually by opening the file using vi command and saving it after. Another option is to use the export command suggested above. ---
**Author:** ![Divya\_Kusumula03](https://avatars.discourse-cdn.com/v4/letter/d/d07c76/32.png) [@Divya\_Kusumula03](https://developer.sailpoint.com/discuss/u/Divya_Kusumula03)\ **Post date:** [September 26, 2024, 6:38am UTC](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341/20 "2024-09-26T06:38:26Z")
Hi @shaileeM , We attempted to update the proxy.yaml file as shown below; however, VA went to inactive state with this change. https\_proxy: [http://11.44.112.0:80/](http://11.44.112.0:80/) http\_proxy: [http://11.44.112.0:80/](http://11.44.112.0:80/) https\_proxy: [http://webproxy.abc.xyx.services:443/](http://webproxy.abc.xyx.services:443/) http\_proxy: [http://webproxy.abc.xyx.services:443/](http://webproxy.abc.xyx.services:443/) Could you please update us on the correct way to implement this. Thanks, Divya [Next page](https://developer.sailpoint.com/discuss/t/adding-application-proxy-address-to-avoid-connection-issue/81341.md?page=2)