CODEWITHSUNDEEP
azure-devopsazure-pipelinesazure-devops-self-hosted-agent
Dhan
Dhan

Reputation: 3

Azure pipelines - running a self-hosted agent behind firewall

I am trying to set up a self-hosted agent behind a firewall. I tried to get the IPs or URLs to be whitelisted so the agent will be able to communicate with Azure DevOps services.

I tried this microsoft docs which has information on the URLs and IPs required to whitelist. It actually works except the DownloadPipelineArtifact task is failing. I guess I need to whitelist additional URLs.?! if yes, kindly point me to the official documentation. Thanks in advance.

Upvotes: 0

Views: 6234

Answers (2)

Edward Han-MSFT
Edward Han-MSFT

Reputation: 3185

By reference to this doc: Azure Artifacts, you need to add additional URL “https://*.visualstudio.com” into the whitelist.

In addition, if you have set up any IP restriction on your self-hosted agent machine, you need to weekly check and update the Azure IP ranges from the weekly file into the whitelist.

Upvotes: 0

wallezzi
wallezzi

Reputation: 359

As this doc: Run a self-hosted agent behind a web proxy stated, the agent will talk to Azure DevOps/TFS service through the web proxy specified in the .proxy file.

Since the code for the Get Source task in builds and Download Artifact task in releases are also baked into the agent, those tasks will follow the agent proxy configuration from the .proxy file.

Upvotes: 1

Related Questions