Purpose

By default, Bamboo Server and Elastic Agent communication is all tunnelled via a SSL tunnel on port 26224. The tunnel server is started on the Elastic Agent and the tunnel client on the Bamboo Server periodically attempts connection to it until it is established. More information here:

• Elastic Bamboo Security

Some users may prefer to route this tunnel via a forward/outbound proxy such as Squid as it is the only route available between certain subnets/VPCs. By default, Bamboo will not use a forward proxy for this tunnel even if one is configured. This solution will show you how to have Bamboo establish this tunnel via the forward/outbound proxy.

Solution

Ensure the following route can be established:

Bamboo Server → (HTTP proxy port) → Forward Proxy → Bamboo tunnel port (26224) → Elastic Agent

• HTTP proxy port outbound from the Bamboo server (as configured in the system property below).
• Bamboo tunnel port (26224) outbound from the forward proxy server.
• Bamboo tunnel port (26224) inbound on the Elastic Agent. By default, this is managed by Bamboo within the elasticbamboo security group.

Configuration:

1. Configure the below system properties, you can check where to configure this for your Bamboo setup here: Configuring your system properties
   
   1. E.g. For Linux, in $BAMBOO_INSTALL/bin/setenv.sh within the JVM_SUPPORT_RECOMMENDED_ARGS

   : ${JVM_SUPPORT_RECOMMENDED_ARGS:="-Dcom.atlassian.bamboo.agent.elastic.tunnel.http.proxyTunnelSocketFactory=true -Dhttp.proxyHost=somehost -Dhttp.proxyPort=someport"}

2. Restart Bamboo