Pac file multiple ironport proxy servers

ironport proxy, is their away to automatically load a pac file on multiple ironport proxy servers

It looks like your missing an else command. Below is how I have it configured and it is working. Without the else command I would think it would just return direct always.
(host == "127.0.0.1") ||
(host == "localhost"))
return "DIRECT"
else
return randomProxy();
function randomProxy()

Similar Messages

PAC file support for Proxy Servers

When will AIR support PAC files for proxy servers?
In our network, we can't point to a PAC file because the AIR app simply ignores it, and we experience comms issues because of it. The workaround is to configure the network settings to point directly at the proxy, bypassing the PAC file.
This is a big problem as pointing directly at the proxy means a lot of manual configuration for each user that requires the use of the AIR app.
Any clues or suggestions?

Hi,
Additional configurations (DHCP and DNS) are required when you use Automatically detect settings.
For details, please refer to:
Automatic Detection and Configuration of Browser Settings
http://technet.microsoft.com/en-us/library/dd361887.aspx
Hope this helps.
Jeremy Wu
TechNet Community Support

Parse JavaScript '.pac' file and get proxy details using C# code

Hi,
I have PAC file --> (A proxy auto-config (PAC) file defines how web browsers and other user agents can automatically choose the appropriate proxy server (access method) for a given URL (inbound request)).
This PAC file contains a JavaScript function “FindProxyForURL(url, host)”. This function returns a string with one or more access method specifications. These specifications cause the user agent to use a particular proxy server or to connect directly.
Eg:
function FindProxyForURL(url, host)
                // declare variable strings
                //incorrect proxy value
                var use_proxy_yes = "PROXY MyWrongServerAddress:8080";
                //correct proxy value
                //var use_proxy_yes = "PROXY MyCorrectServerAddress:8080";
                var use_proxy_no = "DIRECT";
                //we can keep adding all the url here for which we do not want proxy
                if (shExpMatch(url, "*.MyWebsite.com*")) { return use_proxy_no; }
                // Proxy anything else
                return use_proxy_yes;
} This method will be saved as 'proxy.pac' file.
From C# code i have to parse the above 'proxy.pac' file and get the proxy value that it returns based some condition specified in above method.
Please someone help me know how i can achieve the above requirement. Thanks in advance.
Chetan Rajakumar

Hi,
    HTTP Connection created in ECC is used for retrieving the SWC components of IR....but it cannot be used by PI for psoting the data to Proxy...
so in this need to provide the needed details at XI adapter level ...
chk the below blog which can give u an idea...
/people/siva.maranani/blog/2005/04/03/abap-server-proxies
Also for the above error check below threads
SLD_NO_OWN_BS
error: SLD_NO_OWN_BS, proxy scenario
HTH
Rajesh
Edited by: Rajesh on Apr 15, 2010 12:04 PM

Proxy.pac file not working for using proxy for selected websites

After changing my ISP, i cant connect to Bluenest.org directly but with proxy. I can also connect by setting manual proxy server for all websites. But I dont want to do that as there is a bit security problem. I just wrote Proxy.pac files to use proxy sever for that particular website & put its location on Automatic Proxy Configuration. But its not working. I va tried with two types of .pac files. Given the code of the files below.....
First one..........
<pre><nowiki>
function FindProxyForURL(url, host)
if (shExpMatch(url, "http://bluenest.org") || localHostOrDomainIs(host, "http://www.bluenest.org"))
return "PROXY 204.45.138.4:80";
else
return "DIRECT";
</nowiki></pre>
Second one......
<pre><nowiki>function FindProxyForURL(url, host)
if(!isResolvable(host))
return "DIRECT";
return "PROXY 204.45.138.4:80";
}</nowiki></pre>
but none of them working. Please help.
Can you please tell which proxy server is fastest & safest.
Thanx in advance

I submitted a bug report to Apple. The problem is present since 10.9.2, now with 10.10 and iOS. I hope they will take this problem seriously.

How to configure Network proxy to use PAC file on Multiple machines ?

Hello all,
If I've posted in the wrong Forum let me know and I'll move ...
I have been asked by my Network team to change the proxy setting to use a .pac file on all our Macs.
I use ARD a lot and know I can change a lot settings using the networksetup command line tool inside the ARD package and that's great! But I can't see a command listing for changing to use a PAC file.
Any suggestions here people ?
Regards
Mitch

I think you have the right Forum personaly!
With no experiemce or knowledge of .pac files, do either one of these help you?
http://www.byteclub.net/blog/cwoodward/category/macos-x/
Scroll to... Wrong proxy settings? Write your own .pac!
http://www.macosxhints.com/article.php?story=20040101095553265
Says Panther, but perhaps Tiger is the same.

IronPort S160/ASA5510 integration - PAC file and blocking Port 80

We have successfully integrated our ASA5510 and IronPort S160 appliance with Active Directory and eDirectory. We've configured AD to push IE settings to use the IronPort proxy.pac file. Now we need to "Block" un-configured IE access to Port 80 traffic.
In my ASA i have a firewall exception for our WAN IP ranges (source) to any Destination port tcp/http, tcp/https and domain. If I remove the tcp/http from the exception "ALL" port 80 traffic stops, including those PCs configured to use the IronPort Poxy.pac file.
So where have I gone wrong? I want to block un-configured IE access to Port 80, forcing all users to pass through the IronPort appliance.

I hate this job. About 11:10 PM as I was trying to get ready for bed, I had the same thought. Of course I had to test it out, so back to the VPN connection I went and added the filter permit for port 80 for the Ironport's ip address and viola it worked. Thanks for answering my post just the same.

Proxy auto-configuration (PAC) files

After some advice on how to create and serve proxy auto-configuration (PAC) files..?
How to set one up. Syntax, etc.
Thanks in advance,
Tim.

Proxy auto config files are Javascripts that parse the requested URL and return a response to the browser telling it where to go to get the content.
More info is available in multiple formats

Proxy.PAC file not working after upgrade to 10.9.2

I have a local proxy.pac file and it was working happily before 10.9.2.
It was loaded under "Network > Proxies > Automatic Proxy Configuration" and effective for all browsers (Chrome, Safari and Firefox).
After upgrade to 10.9.2 seems like it's being totally ignored. I have a CNTLM proxy in my machine and can see the traffic coming in. Looking at logs, no traffic really comes in and all browsers try to access internet directly.
If I set the proxy.pac directly in Firefox, it works but I want all my browsers and application. I want the same functionality as of 10.9.1 and before.

I submitted a bug report to Apple. The problem is present since 10.9.2, now with 10.10 and iOS. I hope they will take this problem seriously.

Lync 2013 client doesn't read proxy.pac file Lync exclusions

Hi all,
I have a very annoying issue where by the Lync 2013 client ignores the proxy.pac file exclusions set below:
(host == "lync.test.domain") || (host == "lyncdiscoverinternal.test.domain") ||
(host == "lyncwacdca.test.domain") ||
(host == "lyncwacdcb.test.domain") ||
(host == "lyncwebintdca.test.domain") ||
(host == "lyncwebintdcb.test.domain")
IE is set to use automatic configuration script of
http://proxy.test.domain:8083/proxy.pac This file can be reached through and IE browser, downloaded and it's syntax read.
If I set my proxy server and exclusions manually within IE9 then they are adhered to. That is Lync 2013 is able to read.
My thinking: that some application may be iterferring with Lync 2013 getting to
http://proxy.test.domain:8083/proxy.pac or reading in the exclusions set within the file.
If I enter https://lync.test.domain into the browser URL search field I can see that it is being sent straight out to the proxy as opposed to bypassing it.
Does anyone have an example of their proxy.pac exclusion set for Lync 2013 just in case my syntax is not looking the best.
Cheers

Update to this issue - solution was to move the proxy exclusions to the top of the proxy.pac
Outcome resulted in Windows WinHTTP processing the the Lync proxy exclusions prior to the Lync.exe firing during logon. I don't believe you would see this in a typical infrastructure. Since initially looking into this issue I have been
able to show through packet traces, large periods of latency in delivery of desktop profile items due to backend profile storage issues.
In eddition this moving the exclusions to the top of the pac file I made use of substrings. I don't believe the use of substrings is any better or worst, but just easier for others to understand what the exclusion allows specifically.
Example of pac exclusion now:
if (url.substring(0,39) == "http://lyncdiscoverinternal.testdomain.") { return "DIRECT"; } //matches 31 characters including last . or period
I entered similar entries for all required exclusions. The result was Lync signing in within 6 seconds as opposed to the 40 second (through the user of legacy SRV records).

Performance degradation when using proxy.pac file with FF ESR 31

With Bug 923458 many people complained about a performance issue compared to other browsers when a proxy.pac file is used.
The issue initially reported with the bug was resolved for ESR25 according to the statistics, but the general performance issue remained.
I had the same issue with ESR24 and ESR31.3 .
I was testing with www.bild.de.
It took about 40 seconds to load the content completely. Without the proxy.pac file it took about 10 seconds.
I added a few alerts to the pac-File in order to get logs within the console for some analyses.
I found the following:
1. the pac.file is executed for every request, no matter if the host changed or not.
With us the pac-File checks for IP-Adresses and host-names only.
It is not necessary to execute the pac file for each and every request to the same remote host.
So the question is, if we are able to disable this behaviour via about:config?
2. the content referenced by www.bild.de seems to be loaded sequentially and with a delay
The overall time consumed by the proxy.pac file executions was about 4 Seconds compared to the 40 seconds of overall load time.
So I checked the delay between executions of the pac-file and found an overall delay of 40 seconds. I expect that the delay between the calls to the pac-file is caused by the retrieval of contents from the remote host.
So why are the requests executed sequentially?
Hint: Due to the times necessary for executing the pac-file and downloading the contents from the remote host, I would expect the logs generated by my alerts to be mixed (especially if myIpAddress took 1 Second). But the log is cleanly ordered by URL. (see attachment)

Hi guigs2,
thanks for your response. As we only use myIpAddress once within our pac-File and only rely on dnsDomainIs(), ==-Comparisons and shExpMatch() and the sum of all pac-Executions was about 4 seconds compared to 40 seconds overall load time, I do not think that dns resolving is our issue.
I checked the seetings of the configuration you mentioned above. It is set to "false", so the client would try the resolve the dns names. Our admin told, that we do not use socks-Proxies, only http-Proxies.
Regarding sequential load of the contents included on www.bild.de from other web sites, I attached a screenthot.
Please note the red highlights. These show the start time in milliseconds of the pac-execution. I added this as a kind of id which represents a unique identifier together with the URL if the log items are mixed. But they are not, instead they are cleanly ordered by URL (for all 360 pac-file calls).
Moreover in the picture you can see the delay between the end of the last pac-file execution and the next one (blue timestamp in millisonds compared to the red timestamp of the next row saying "entered proxy.pac"). The delay sum up exactly to the 40 seconds the FF took to load the page completely.
Alone the fragment shown represents a delay of 630ms between the pac-file executions. If the contents would be loaded in parallel, there should be no such delay.

Application Server slowdown with multiple proxy servers ?

Our environment has our iAS boxes talking to iWS web servers which are front-ended with iPlanet Proxy servers (Proxy 3.53 I believe). We are seeing significant slowdown if we try and hit our web apps through the proxy as opposed to going directly to the web server (bypassing the proxy servers). One of our "proxy" guys recalls hearing that there is an issue with the app server's handling of sessions if requests from the same user come in to the web server (and by extension the app server) from multiple proxy servers with different ip's. Has any body ever encountered this or does any body know if the app server has an issue handling the same sessions whose requests come from different ip addresses (different proxies)?

The proxy work with HTTP 1.0 and the webserver with HTTP 1.1.
This difference could be the cause of your problems.
"David Fuelling" <[email protected]> escribio en el mensaje
news:[email protected]..
Our environment has our iAS boxes talking to iWS web servers which are
front-ended with iPlanet Proxy servers (Proxy 3.53 I believe). We
are seeing significant slowdown if we try and hit our web apps through
the proxy as opposed to going directly to the web server (bypassing
the proxy servers). One of our "proxy" guys recalls hearing that
there is an issue with the app server's handling of sessions if
requests from the same user come in to the web server (and by
extension the app server) from multiple proxy servers with different
ip's. Has any body ever encountered this or does any body know if the
app server has an issue handling the same sessions whose requests come
from different ip addresses (different proxies)?
Try our New Web Based Forum at http://softwareforum.sun.com
Includes Access to our Product Knowledge Base!

I want to install CCPL ,but it is not taking PAC file proxy.So please suggest an alternate way to set proxy for this exe file..

I want to install CCPL ,but it is not taking PAC file proxy.So please suggest an alternate way to set proxy for this exe file..

That file might have moved to a different location on the server. I think you'll need to check with RefWorks support or your local IT department on why the install page links do not work.

Use System Proxy Settings - when this is selected in FF v3.6.6, does it adhere to the same local IE proxy setting? We use a pac file configured in "Use automatic configuration script."

Does anyone know what Firefox looks at locally on the PC when the "Use System Proxy Settings" setting is selected? It appears to be the default setting, recently changed from "No Proxy" of versions past...
Our company uses a pac file specified in IE under "Use automatic configuration script" - with this new default, does it adhere to the same setting in:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]

I may be wrong but I think that the "Use System Proxy Settings" makes sense only on Linux and generally speaking "other OSes". As far as I know there is no generic proxy settings in Windows operating system.
The one I know is in the registry part of Internet Explorer.
So in my understanding in Windows, Use System Proxy Settings = No Proxy

Outlook and proxy PAC file

Using Outlook 2010 SP2 connecting to Exchange 2013 SP 1 with a PAC file (configured under Internet Options). When the PAC file is not available, Outlook fails to connect to Exchange initially, upon hitting the retry button (on server unavailable
message), it connects just fine. Not sure if this has to do with Outlook Anywhere or Outlook application in general, but it looks as if it does not fail open cleanly (like IE for example). Is there a way to tell Outlook to connect to Exchange by
ignoring/bypassing the system wide proxy config from Internet Options? I want to ensure that if the PAC file is not available to Outlook, it connects to Exchange without issues.

Thank you for the update.
I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience.
Thank you for your understanding and support.
Steve Fan
Forum Support
Come back and mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback on our support, please click
here

FF unable to comprehend PROXY.PAC file with IPv4 and IPv6 rules in it

My intranet setup involves users going through Squid proxy on a server discoverable by WPAD. Everything worked well until I introduced IPv6 into the network. Now I want their FFs to go IPv4 proxied and go IPv6 direct. I wrote proxy.pac ( http://pastebin.com/UFwVBzcN ) but FF8 throws "XPCSafeJSObjectWrapper is not defined" error. How can this be done?

Hi guigs2,
thanks for your response. As we only use myIpAddress once within our pac-File and only rely on dnsDomainIs(), ==-Comparisons and shExpMatch() and the sum of all pac-Executions was about 4 seconds compared to 40 seconds overall load time, I do not think that dns resolving is our issue.
I checked the seetings of the configuration you mentioned above. It is set to "false", so the client would try the resolve the dns names. Our admin told, that we do not use socks-Proxies, only http-Proxies.
Regarding sequential load of the contents included on www.bild.de from other web sites, I attached a screenthot.
Please note the red highlights. These show the start time in milliseconds of the pac-execution. I added this as a kind of id which represents a unique identifier together with the URL if the log items are mixed. But they are not, instead they are cleanly ordered by URL (for all 360 pac-file calls).
Moreover in the picture you can see the delay between the end of the last pac-file execution and the next one (blue timestamp in millisonds compared to the red timestamp of the next row saying "entered proxy.pac"). The delay sum up exactly to the 40 seconds the FF took to load the page completely.
Alone the fragment shown represents a delay of 630ms between the pac-file executions. If the contents would be loaded in parallel, there should be no such delay.

Pac file multiple ironport proxy servers

Similar Messages

Maybe you are looking for