Can ITCAM WRT agent monitor response time if the http request is routed through a proxy server in the middle?

We have ITCAM for Transactions, Web Response Time (WRT, t5) agent. Agent is configured the “Monitor HTTPS transactions”. We have configured https keystore path, and added the ipaddresses of t5, destination and proxy ip addresses to the Certificate to Server mapping as per following documentation.
https://www.ibm.com/support/knowledgecenter/SS5MD2_7.4.0.1/com.ibm.itcamt.doc/rt/Install_Guide/wrt_config_unix.html

In this environment, the web requests to the target application server are routed via a proxy server.
For example, running curl command to target URL https://mydest.ibm.com:443/myapp, shows the routing through the proxy-ipaddress as follows:

* About to connect() to proxy isp port 3128 (#0)
* Trying proxy-ipaddress… connected
* Connected to isp (proxy-ipaddress) port 3128 (#0)
* Establish HTTP proxy tunnel to mydest.ibm.com:443
> CONNECT mydest.ibm.com:443 HTTP/1.1
> Host: mydest.ibm.com:443

In the kfcm120 logs we see following error:
kfcm120_*-01.log

(59529974.00BD-5:kfckutil.cpp,416,”KFCK_ExtractRecord”) SSL Session
proxy-ipaddress[3128]> Abort Unknown SSL record type 67

The t5 agent is not collecting response time data in this environment. What is causing this problem?

Related:

Leave a Reply