[NIFI-11366] MiNiFi/C2 - Support access via LB / Proxy

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0-M1, 1.22.0
• Component/s: C2, MiNiFi
• Labels: minifi-java
• Assignee: Ferenc Kis
• Reporter: Ferenc Kis
• Created: 30/Mar/23 14:11
• Updated: 26/Apr/23 17:35
• Resolved: 26/Apr/23 17:35

Description

While the Heartbeat and Acknowledge communication from the agents can be configured via reverse proxy / load balancer currently the agents are not aware of the host

For flow and asset download full urls are generated in the operation requests by the C2 server so the actual download happens via direct node access bypassing the proxy / LB.

For backwards compatibility we are not touching the existing configuration. We could introduce 3 new properties:

c2.rest.path.base=http://c2host/c2-server/api
c2.rest.path.heartbeat=/heartbeat
c2.rest.path.acknowledge=/acknowledge

If these are set then use them if not then fall back to the old properties and parse the host from there

 

Issue Links

• links to: GitHub Pull Request #7125