Skip to content

Configuring an Internet Proxy Server

Introduction

Run:AI is installed on GPU clusters. These clusters must have outbound internet connectivity to the Run:AI cloud. Details can be found here: Run-AI-GPU-Cluster-Prerequisites under "Network Requirements".

In some organizations, outbound connectivity requires a proxy. Traffic originating from servers and browsers within the organizations flows through a gateway that inspects the traffic, calls the destination and returns the contents.

Organizations sometimes employ a further security measure by signing packets with an organizational certificate. The software initiating the HTTP request must acknowledge this certificate, otherwise, it would interpret it as a man-in-the-middle attack.

In-case the certificate is not trusted (or is a self-signed certificate), this certificate must be included in Run:AI configuration for outbound connectivity to work.

Run:AI Configuration

The instructions below receive as input a certificate file from the organization and deploy it into the Run:AI cluster so that traffic originating in Run:AI will recognize the organizational proxy server.

A Run:AI cluster is installed by accessing the Administrator User Interface at app.run.ai downloading a yaml file runai-operator.yaml and then applying it to Kubernetes. You must edit the yaml file. Search for httpProxy

global:
httpProxy:
    enabled: false
    tlsCert: |-
    -----BEGIN CERTIFICATE-----
    <CERTIFICATE_CONTENTS>
    -----END CERTIFICATE-----

Set enabled to true and paste the contents of the certificate under tlsCert.


Last update: August 4, 2020