Backport 4.3: HTTP OSI level 7 proxy #27330

.changelog

@@ -4,6 +4,8 @@
 # - Fixed error in Bat section of Upgrade Guide (bsc#1234567)
 # For guidelines: https://en.opensuse.org/openSUSE:Creating_a_changes_file_(RPM)#Changelog_section_.28.25changelog.29
 
+- Updated Network Requirement section to add settings for server
+  configuration behind HTTP OSI level 7 proxy.
 - Clarified that NFS with Cobbler is not supported (bsc#1240666)
 - Fixed the link in Common Workflows Guide (bsc#1242911)
 - Documented uptodate action in Common Workflows Guide as

modules/installation-and-upgrade/pages/network-requirements.adoc

@@ -35,3 +35,50 @@ For a comprehensive list of the required ports, see xref:installation-and-upgrad
 
 
 For more information on disconnected setup and port configuration, see xref:administration:disconnected-setup.adoc[].
+
+
+
+
+== Deployment behind HTTP or HTTPS OSI level 7 proxy
+
+Some environment enforce internet access through a HTTP or HTTPS proxy.
+This could be a Squid server or similar.
+To allow the {productname} Server internet access in such configuration, you need to configure the following.
+
+.Procedure: Configuring HTTP or HTTPS OSI level 7 proxy
+
+. For operating system internet access, modify [path]``/etc/sysconfig/proxy`` according to your needs:
+
++
+
+[source,shell]
+----
+PROXY_ENABLED="no"
+HTTP_PROXY=""
+HTTPS_PROXY=""
+NO_PROXY="localhost, 127.0.0.1"
+----
+
+. For Java application internet access, modify [path]``/etc/rhn/rhn.conf`` according to your needs.
+  For example, set:
+
++
+
+[source,shell]
+----
+# Use proxy FQDN, or FQDN:port
+server.satellite.http_proxy =
+server.satellite.http_proxy_username =
+server.satellite.http_proxy_password =
+# no_proxy is a comma seperated list
+server.satellite.no_proxy =
+----
+
+. Restart spacewalk services to enforce the new configuration:
+
++
+
+[source,shell]
+----
+spacewalk-services restart
+----