Challenges making ProxyAgent work with certificates - [email protected]

[IgorCantos]

I'm migrating from an implementation that uses nodejs 18 http/https for requests and hpagent for proxying (i'm behind a corporate firewall) to nodejs 20 with undici ProxyAgent and fetch.

thats the basic implementation of the proxy

import { ProxyAgent, setGlobalDispatcher, getGlobalDispatcher, Agent } from 'undici'

const proxyAgent = new ProxyAgent({
  uri: 'proxy- url',
  proxyTls: {
    autoSelectFamily: true,
    key: 'my-key',
    cert: 'my-cert',
    ca: 'my - ca',
    rejectUnauthorized: false
  },
  factory: () => new Agent({
    autoSelectFamily: true,
    connect: {
      key: 'my-key',
      cert: 'my-cert',
      ca: 'my- ca',
      rejectUnauthorized: false
    }
  })
})

setGlobalDispatcher(proxyAgent)


undici.fetch('https://example.com'{
  ...options,
  dispatcher: getGlobalDispatcher()
})

For internal requests (inside the company cloud network) it works perfectly. But for external (internet) request, is does not. The request not even hits the proxy (netskope). The log of the request is the following:

Error: connect ENETUNREACH 2606:4700:3033::6812:1b1:443 - Local (:::0)
erno: -101
code: 'ENETUNREACH'
syscall: 'connect'
address: '2606:4700:3033::6812:1b1'
port: 443

i had debug it for days, but didn't find any solutions. The company proxy is working fine and works with curl and hpagent, but not with undici ProxyAgent.

Am i missing something in the implementation? hope someone can help, thanks!

[mcollina]

Why do you need to create an Agent inside the factory? This is the default implementation:

undici/lib/dispatcher/proxy-agent.js

Lines 29 to 34 in ce52425

	function defaultAgentFactory (origin, opts) {
	if (opts.connections === 1) {
	return new Client(origin, opts)
	}
	return new Pool(origin, opts)
	}