Proxy Notes

Where are the logs?

cat /var/log/squid/access.log | grep 10.20.0.81

Splunk Query on Moose

Where are the proxy logs? index=web sourcetype="squid:access:json"

Is my traffic making it through the proxy? index=web sourcetype="squid:access:json" client_ip="10.2.2.17" request="reports.office365.com:443"

Troubleshoot Proxy Issues

Remove environmental variables and hit it with curl.

env -u http_proxy -u https_proxy -u HTTP_PROXY -u HTTPS_PROXY -u no_proxy -u NO_PROXY curl --verbose https://dynamodb.us-gov-east-1.amazonaws.com/

What variables are in the actual process environment (2289 process ID) tr '\000' '\n' < /proc/2289/environ

Where are the proxy configurations?

cat /etc/profile.d/proxy.sh