Proxy Setup¶
By default hosts at CERN and therefor also microservices on a CERN host are only accessible from within the CERN network. To access them from outside the CERN network one has to setup a ssh tunnel. This instruction will show you how to do this.
Start ssh tunnel¶
To start the ssh tunnel use the following command:
It is now available on localhost:8080.
Configure browser¶
To use the tunnel with your browser you have to configure it to use the tunnel as a proxy.
Broswer addons¶
There are also browser addons available that can be used to easily switch between different proxy configurations. You can set this up to tunnel only specific websites. We recommend SwitchyOmega for chrome and firefox.
Setup switchyomega¶
After installing the addon you can configure it to use the tunnel. For this you have to create a new profile and set the proxy configuration to SOCKS5 and localhost:8080.
In addition you should setup the "auto switch" profile. Here you can define witch hosts/urls should you the tunnel and which should not. For example you can set it up to tunnel all cern.ch hosts and not tunnel all other hosts. You should also add the hostnames of the microservices hosts without the cern top-level domain.
Select the "auto switch" profile as the active profile. You can set this to the default profile (used on startup) in the SwitchyOmega settings. Remember that the ssh tunnel must be open for this to work. Note: setup for other addons should be similar.
Browser wide tunnel (not recommended)¶
In firefox this can be done in the settings under "Network Settings". There you have to select "Manual proxy configuration" and enter localhost as the SOCKS Host and 8080 as the port. See also here.