Configuring CA Experience Collector HTTPS configuration

Products

• DX Application Performance Management

Issue/Introduction

DxC for HTTPS web services is possible only with reverse proxy/LB which terminate TLS/HTTPS encryption

Can you provide a summary of steps how to continue DxC for HTTPS?

Environment

APM 10.8 and DxC 2.4

Cause

Perform the below steps after DxC Installation has been completed

Prerequisites: Order TLS certificate for LB machine which is acceptable from all web browsers which used BA extension 

1.  Install haproxy on DxC machine as it is better solution compared with nginx in LB mode

On SUSE 15

#optional

zypper add repo

zypper refresh

zypper install haproxy

On RH

yum install haproxy

2.  Config haproxy

a) add the following lines to /etc/haproxy/haproxy.cfg

#optional stats

listen stats

  bind 0.0.0.0:9000

  bind :::9000 v6only

  stats enable

  stats uri     /

  stats refresh 15s

frontend dxc_https   

    bind <dxc>:<https_port> ssl crt /etc/haproxy/<certname>.pem

    mode http

    default_backend dxc_http

backend dxc_http

    mode http

    option tcp-check

    server dxc <dxc>:<dhc_port> check

b) check if haproxy could be started

systemctl start haproxy

systemctl enable haproxy

NOTE: port 443 must be open between the server where the Browser is opened with the URLs that has the BrowserAgent Extention basnippet loaded. 

 

3.  Adjust the collectorUrl parameter in dxc profile.json file

replace protocol and port

4.  Upload the changes on dxc_http

Example:

  ./uploadBA.sh -baDir /APM107/ExCol/EC/DxC/browserAgent/wa/

5.  Adjust the snippet file, replace protocol and port to https and haproxy frontend

sed example:

sed 's/http/https/g;s/8089/443/g' /APM107/ExCol/EC/default.basnippet >/APM107/ExCol/EC/default.basnippet.https

6. Double-check if the snippet URLs are accessible from the browser in end-user network via HTTPS

7.  Copy the snippet to the target APM BA extension directory and configure the BA extension in the bundle.properties file

Example:

vi browser-agent-ext-8d5cfa63xt140-2023.3.0.4/bundle.properties

introscope.agent.browseragent.autoInjectionEnabled=true
introscope.agent.browseragent.autoInjection.appID=default
introscope.agent.browseragent.autoInjection.default.snippetLocation=<your-basnippet-file>
introscope.agent.browseragent.autoInjection.default.includeURLsRegex=.*
introscope.agent.browseragent.response.decoration.enabled=true
introscope.agent.browseragent.response.decoration.includeURLsRegex=.*
introscope.agent.browseragent.dxchost=<your-dxchost>
introscope.agent.browseragent.dxcport=443

Resolution

CA Experience Collector 2.4 Release Notes

 

Additional Information

Install the Digital Experience Collector on a Multi-Node System