Proxy Agents

In many cases, you may need to deploy pipelines or connect resources that reside within a private or restricted network environment. This includes:

• Servers in private VPCs or VPNs
• On-premise infrastructure
• Servers located in private data centers
• Cloud resources without public IP addresses
• Environments restricted by compliance rules preventing data from leaving the network

Buddy’s Server Agent lets you securely connect such environments to your Buddy workspace through an outbound tunnel, without the need to open inbound ports.

Agent Installation

First, you have to install the agent. You can learn more about the process in the following article.

How it Works?

Once installed, the agent securely connects your private network to Buddy:

1. The agent runs on a server inside your private network.
2. It opens an outbound SSH connection to Buddy.
3. A reverse SSH tunnel is established and remains active.
4. Buddy can now initiate connections to this server through the tunnel.
5. No inbound ports need to be opened in your firewall.
6. All communication occurs over an encrypted SSH channel.

This setup allows Buddy to interact with private resources safely, acting as a bridge between your workspace and on-prem or internal infrastructure.

Using agent as a proxy

When creating an agent, please make sure to select the Expose this server agent as a target option. When an agent is exposed as a target, it can also serve as a proxy for SFTP and SSH targets. To configure this:

1. When adding a new SFTP/SSH target, choose your agent in the Proxy section.
2. Enter the local address and authentication details of the resource you want to reach. For example if you have a database at 10.0.1.50:5432, you can configure it as a target using the agent as a proxy.
3. The agent will securely forward all traffic between Buddy and your internal resources via the proxy.

Image loading...

You can use this setup to multiple targets within the same private network.