Proxy Configuration

Your organization may require devices deployed on enterprise or restricted networks to connect through a proxy server to reach Density’s cloud services. Updating proxy settings ensures that your device can securely communicate with the cloud and synchronize time with the correct NTP servers.

To configure the proxy, you will need a client certificate and its private key. Optionally, a .pfx certificate can be used if the setup is done through a web browser.

There are two options for providing the certificate:

• Customer-supplied certificate: The customer provides their own certificate and private key (not shared with Density). They generate the .pfx file used during setup.
• Density-signed certificate: Density signs the certificate with its root CA and provides the certificate, private key, and .pfx file (including the password).

Proxy settings can be updated in two ways:

• Via Web UI: https://<device_ip>/ — requires a .pfx certificate installed in the browser.
• Via console (curl command): requires a client certificate and private key.

Methods for Updating Proxy Settings

Option 1: Using the Web UI

1. Open a browser and go to:
   https://<DEVICE_IP>/
2. When prompted, install or select the .pfx client certificate.
3. Navigate to Network Settings > Proxy.
4. Enter the following information:
   • FQDN: The proxy hostname or IP address
   • Port: Proxy port number
   • NTP Servers (optional): Space-separated list of NTP servers

5. Click Save to apply the changes.

The device will restart its network service automatically after saving.

Option 2: Using the Console (curl command)

You can also update proxy settings via a command-line interface using the following curl command:

curl -k \

  --cert <CERT_PATH> --key <KEY_PATH> --pass <PASS> \

  -F "action=update_network" \

  -F "FQDN=<PROXY_ADDRESS>" \

  -F "PORT=<PROXY_PORT>" \

  -F "NTP=<NTP_SERVERS>" \

  -F "FORCE=true" \

  https://<IP_ADDRESS>/cgi-bin/webui

Example:

curl -k \

  --cert ./client.crt --key ./client.key --pass mypassword \

  -F "action=update_network" \

  -F "FQDN=proxy.corpnet.local" \

  -F "PORT=8080" \

  -F "NTP=time.google.com" \

  -F "FORCE=true" \

  https://192.168.1.50/cgi-bin/webui

Verification

After applying changes, verify the update by performing one of the following:

• In the Web UI, go to Network Status and confirm the proxy and NTP configurations are displayed correctly.
• Or, from the console, run curl -k https://<IP_ADDRESS>/status
• Confirm that the proxy address and port are listed in the response.
   

Troubleshooting

If the proxy update fails:

• Ensure the .pfx or client certificate and private key are valid and not expired.
• Confirm that the proxy FQDN and port are reachable from the device’s network.
• Check that the password for the .pfx file matches the one provided by Density.
• Retry the update with FORCE=true to overwrite existing settings.