[wishlist, enhacement] Support for custom proxy rules

[Alvaro Uria]

When MAAS' own proxy is used, /var/lib/maas/maas-proxy.conf is generated from the template at /usr/lib/python3/dist-packages/provisioningserver/templates/proxy/maas-proxy.conf.template

Sometimes, customers need extra rules to be allowed (ie. a single IP from a different network block to have access to a certain resource). In those cases, maas-proxy.conf.template is manually modified to avoid custom changes to be overwritten.

As a wishlist, very useful to about 5 BootStack customers now, a textarea could be added to the settings section to allow custom Squid ACLs. This could present a security risk, so as an alternative, a more complex form could be added to allow "acl" text input (only the network blocks) as well as limited http_access allow and deny rules.

[Andres Rodriguez (andreserl)]

Hi Alvaro,

Can you please details what custom rules where you looking MAAS to support?

[Andres Rodriguez (andreserl)]

Please provide all of the things you would need to customize.

[Björn Tillenius (bjornt)]

Hi Alvaro. We've started to track feature request on discourse instead, https://discourse.maas.io/, since it's a better forum for that.

Could you please post your request there instead? Don't forget to add the actual use case your trying to support. If possible, we'd like to avoid custom text config and instead making a nicer UI that removes the risk of the user breaking the proxy configuration.

If all you need are ACLs, I'm sure we could do it without having the user write any squid config, but it depends on exactly what you're trying to achieve.