Skip to content
This repository was archived by the owner on Jul 15, 2021. It is now read-only.

Running the RPKI Validator behind an HTTP and Rsync proxy

Jump to bottom
Mikhail Puzanov edited this page Jan 8, 2020 · 4 revisions

RPKI Validator needs to have access to RPKI repositories using HTTP(S) and Rsync. For that reasons it is recommended that is has access to internet using ports 80, 443 and 873. However, there is a way for the RPKI Validator access repositories.

For setting up HTTP/HTTPS proxy there are settings in the /etc/rpki-validator-3/application.properties file

rpki.validator.http.proxy.host=<your_proxy_hostname_or_ip>
rpki.validator.http.proxy.port=<your_proxy_port>

For setting up Rsync proxy currently there are no setting in the config file, so one would have to set up it in the environment, by using one of the ways

  • Add Environment=RSYNC_PROXY=<rsync_proxy_hostname_or_ip>:<rsync_proxy_port> to the /etc/systemd/system/rpki-validator-3.service file or use preferred systemd environment machinery, e.g this way.
  • Add export RSYNC_PROXY=<rsync_proxy_hostname_or_ip>:<rsync_proxy_port> to the /usr/bin/rpki-validator-3.sh script
Clone this wiki locally