Required Connectivity, Proxies & Certificates

Connectivity

To be able to communicate with Lacework, installed agents must be allowed to reach the following URLs:

packages.lacework.net
updates.lacework.net : TCP/443
api.lacework.net : TCP/443 (for US accounts)
aprodus2.agent.lacework.net : TCP/443 (for US accounts)
api.fra.lacework.net : TCP/443 (for EMEA accounts)
auprodn1.agent.lacework.net : TCP/443 (for ANZ accounts)

If URLs cannot be used for rule writing,

api.lacework.net resolves to the following rotating IPs:

209.102.252
212.241.15
212.79.17
164.176.181
225.189.230
230.246.102
35.54.98
43.136.187
185.31.7
159.137.89
159.138.89
100.6.0/23

aprodus2.agent.lacework.net resolves to the following rotating IPs:
```
162.159.137.89
162.159.138.89
168.100.6.0/23
```
api.fra.lacework.net resolves to the following rotating IPs:
```
162.159.134.54
162.159.135.54
168.100.6.0/23
```
and auprodn1.agent.lacework.net resolves to the following IP:
```
162.159.137.89
162.159.138.89
168.100.6.0/23
```

If required, the agent can be configured to use a network proxy by adding proxy information to the config.json agent configuration file or by creating an https_proxy environment variable.

note

Agent versions 5.0.0 and below require access to s3-us-west-2.amazonaws.com.

Proxies

Add Proxy Information to the Lacework Agent Configuration

To include proxy information, edit the proxyurl key in the config.json file:

{
  "proxyurl": "http://Your_Proxy_Server:Your_Port"
}

Or if your proxy requires a password:

{
  "proxyurl": "http://username:password@Your_Proxy_Server:Your_Port"
}

Add Proxy Information for Kubernetes

To include proxy information in a Kubernetes ConfigMap, you can use the same definition of a proxy as above, as illustrated in this sample lacework-cfg-k8s.yaml:

apiVersion: v1
kind: ConfigMap
metadata:
  name: lacework-config
data:
  config.json: |
    {"tokens":{"AccessToken":"${LaceworkAccessToken}"}, "proxyurl":"http://Your_Proxy_Server:Your_Port"}

Add an `https_proxy` Environment Variable

From the shell on the host where the agent resides, use the following command to add your proxy URL:

export https_proxy="http:Your_Proxy_Server:Your_Port"

Or if your proxy requires a password:

export https_proxy="http://username:password@Your_Proxy_Server:Your_Port"

Add a Certificate

Certificate for the US Cloud

The GoDaddy certificate, which Lacework uses for the api.lacework.net US cloud, is as follows:

Certificate for the APRODUS2, ANZ, and EU Cloud

For the APRODUS2, ANZ, and EU cloud, instead of the GoDaddy certificate, Lacework uses Cloudflare and its Digicert Baltimore CyberTrust Root. It is also well supported by most operating systems. If the Cloudflare certificate is not in trusted root store, the agent will not be able to communicate with Lacework. Most current Linux distributions include the required certificate by default. In certain older distributions, the certificate might need to be added.

The Cloudflare certificate is as follows:

Connectivity​

note

Proxies​

Add Proxy Information to the Lacework Agent Configuration​

Add Proxy Information for Kubernetes​

Add an https_proxy Environment Variable​

Add a Certificate​

Certificate for the US Cloud​

Certificate for the APRODUS2, ANZ, and EU Cloud​

Connectivity

Proxies

Add Proxy Information to the Lacework Agent Configuration

Add Proxy Information for Kubernetes

Add an `https_proxy` Environment Variable

Add a Certificate

Certificate for the US Cloud

Certificate for the APRODUS2, ANZ, and EU Cloud