Strata Copilot
    Next-Gen Trust Security
    : Using Proxy Servers with VSatellite
    Focus
    Focus
    1. Home
    2. Next‑Gen Trust Security
    3. Next-Gen Trust Security
    4. Next-Gen Trust Security Overview
    5. Overview: Venafi VSatellites
    6. Deploying VSatellites
    7. Using Proxy Servers with VSatellite

    Next-Gen Trust Security

    Using Proxy Servers with VSatellite

    Table of Contents

    Using Proxy Servers with VSatellite

    If you plan to use a proxy, review this topic carefully before you install VSatellite.
    Important: VSatellite supports a basic network proxy, but TLS MITM proxies are not supported and will prevent the installation from working.

    Set Environment Variables for VSatellite Installation

    Set the appropriate environment variables for your proxy configuration. To set the necessary proxy variables, use the following commands:
    export http_proxy=IP_OF_PROXY_SERVER:PROXY_SERVER_PORT
export https_proxy=IP_OF_PROXY_SERVER:PROXY_SERVER_PORT
export no_proxy=localhost,127.0.0.0/8,0.0.0.0,10.0.0.0/8,192.168.0.0/16,172.16.0.0/12
    Modify the no_proxy list as needed, based on specific IP ranges or domains that should bypass the proxy. The no_proxy variable is a comma- or space-separated list of domain names or IP addresses, with an optional :port.
    Note: If you're using sudo to install VSatellite, add the -E flag (sudo -E ./vsatctl install) to preserve the environment variables during the installation process.
    If you see connection errors, such as refused connections, verify that you are not mixing uppercase and lowercase forms of HTTP_PROXY and http_proxy.

    © 2026 Palo Alto Networks, Inc. All rights reserved.