Implement Cloud Metadata Bypass Proxy Config

newrelic-agent/src/main/java/com/newrelic/agent/config/AgentConfig.java

@@ -200,6 +200,11 @@ public interface AgentConfig extends com.newrelic.api.agent.Config, DataSenderCo
      */
     AttributesConfig getAttributesConfig();
 
+    /**
+     * Get the cloud related configuration.
+     */
+    CloudConfig getCloudConfig();
+
     ObfuscateJvmPropsConfig getObfuscateJvmPropsConfig();
 
     /**

newrelic-agent/src/main/java/com/newrelic/agent/config/AgentConfigImpl.java

@@ -46,6 +46,7 @@ public class AgentConfigImpl extends BaseConfig implements AgentConfig {
 
     public static final String ADAPTIVE_SAMPLER_SAMPLING_TARGET = "adaptive_sampler_sampling_target";
     public static final String ADAPTIVE_SAMPLER_SAMPLING_PERIOD = "adaptive_sampler_sampling_period";
+    public static final String CLOUD = "cloud";
     public static final String CODE_LEVEL_METRICS = "code_level_metrics";
     public static final String COMPRESSED_CONTENT_ENCODING_PROPERTY = "compressed_content_encoding";
     public static final String CPU_SAMPLING_ENABLED = "cpu_sampling_enabled";
@@ -253,6 +254,7 @@ public class AgentConfigImpl extends BaseConfig implements AgentConfig {
     // nested configs (alphabetized)
     private final AttributesConfig attributesConfig;
     private final AuditModeConfig auditModeConfig;
+    private final CloudConfig cloudConfig;
     private final TransactionTracerConfigImpl backgroundTransactionTracerConfig;
     private final BrowserMonitoringConfig browserMonitoringConfig;
     private final ClassTransformerConfig classTransformerConfig;
@@ -359,6 +361,7 @@ private AgentConfigImpl(Map<String, Object> props) {
         keyTransactionConfig = initKeyTransactionConfig(apdexTInMillis);
         sqlTraceConfig = initSqlTraceConfig();
         auditModeConfig = initAuditModeConfig();
+        cloudConfig = initCloudConfig();
         browserMonitoringConfig = initBrowserMonitoringConfig();
         classTransformerConfig = initClassTransformerConfig(litemode);
         crossProcessConfig = initCrossProcessConfig();
@@ -800,6 +803,11 @@ private AuditModeConfig initAuditModeConfig() {
         }
     }
 
+    private CloudConfig initCloudConfig() {
+        Map<String, Object> cloudProps = nestedProps(CLOUD);
+        return new CloudConfigImpl(cloudProps);
+    }
+
     private BrowserMonitoringConfig initBrowserMonitoringConfig() {
         Map<String, Object> props = nestedProps(BROWSER_MONITORING);
         return BrowserMonitoringConfigImpl.createBrowserMonitoringConfig(props);
@@ -1024,6 +1032,9 @@ public AuditModeConfig getAuditModeConfig() {
         return auditModeConfig;
     }
 
+    @Override
+    public CloudConfig getCloudConfig() { return cloudConfig; }
+
     @Override
     public boolean liteMode() {
         return litemode;

newrelic-agent/src/main/java/com/newrelic/agent/config/CloudConfig.java

@@ -0,0 +1,16 @@
+/*
+ *
+ *  * Copyright 2025 New Relic Corporation. All rights reserved.
+ *  * SPDX-License-Identifier: Apache-2.0
+ *
+ */
+
+package com.newrelic.agent.config;
+
+/**
+ * Interface for cloud configuration options.
+ */
+
+public interface CloudConfig extends Config {
+    boolean isCloudMetadataBypassProxyEnabled();
+}

newrelic-agent/src/main/java/com/newrelic/agent/config/CloudConfigImpl.java

@@ -0,0 +1,26 @@
+/*
+ *
+ *  * Copyright 2025 New Relic Corporation. All rights reserved.
+ *  * SPDX-License-Identifier: Apache-2.0
+ *
+ */
+
+package com.newrelic.agent.config;
+
+import java.util.Map;
+
+public class CloudConfigImpl extends BaseConfig implements CloudConfig {
+
+    public static final String SYSTEM_PROPERTY_ROOT = "newrelic.config.cloud.";
+    public static final String METADATA_BYPASS_PROXY = "metadata_bypass_proxy";
+    public static final boolean DEFAULT_METADATA_BYPASS_PROXY = false;
+
+    public CloudConfigImpl(Map<String, Object> cloudProps) {
+        super(cloudProps, SYSTEM_PROPERTY_ROOT);
+    }
+
+    @Override
+    public boolean isCloudMetadataBypassProxyEnabled() {
+        return getProperty(METADATA_BYPASS_PROXY, DEFAULT_METADATA_BYPASS_PROXY);
+    }
+}

newrelic-agent/src/main/java/com/newrelic/agent/utilization/AwsFargateMetadataFetcher.java

@@ -6,9 +6,13 @@
  */
 package com.newrelic.agent.utilization;
 
+import com.newrelic.agent.Agent;
+import com.newrelic.agent.config.CloudConfig;
+
 import java.io.IOException;
 import java.io.InputStream;
 import java.net.MalformedURLException;
+import java.net.Proxy;
 import java.net.URL;
 import java.net.URLConnection;
 
@@ -17,13 +21,23 @@
  */
 public class AwsFargateMetadataFetcher {
     private final URL url;
+    private final CloudConfig cloudConfig;
 
-    public AwsFargateMetadataFetcher(String metadataUrl) throws MalformedURLException {
+    public AwsFargateMetadataFetcher(String metadataUrl, CloudConfig cloudConfig) throws MalformedURLException {
         url = new URL(metadataUrl);
+        this.cloudConfig = cloudConfig;
     }
 
     public InputStream openStream() throws IOException {
-        URLConnection connection = url.openConnection();
+        URLConnection connection;
+
+        Agent.LOG.debug("Cloud Metadata Bypass Proxy enabled: " + cloudConfig.isCloudMetadataBypassProxyEnabled());
+
+        if (cloudConfig.isCloudMetadataBypassProxyEnabled()) {
+            connection = url.openConnection(Proxy.NO_PROXY);
+        } else {
+            connection = url.openConnection();
+        }
         connection.setConnectTimeout(5000);
         connection.setReadTimeout(5000);
 

newrelic-agent/src/main/java/com/newrelic/agent/utilization/DockerData.java

@@ -9,7 +9,7 @@
 
 import com.google.common.annotations.VisibleForTesting;
 import com.newrelic.agent.Agent;
-import com.newrelic.agent.config.internal.SystemEnvironmentFacade;
+import com.newrelic.agent.config.CloudConfig;
 import org.json.simple.JSONObject;
 import org.json.simple.parser.JSONParser;
 import org.json.simple.parser.ParseException;
@@ -59,6 +59,12 @@ public class DockerData {
     private static final Pattern DOCKER_CONTAINER_STRING_V1 = Pattern.compile("^.*[^0-9a-f]+([0-9a-f]{64,}).*");
     private static final Pattern DOCKER_CONTAINER_STRING_V2 = Pattern.compile(".*/docker/containers/([0-9a-f]{64,}).*");
 
+    private final CloudConfig cloudConfig;
+
+    public DockerData(CloudConfig cloudConfig) {
+        this.cloudConfig = cloudConfig;
+    }
+
     public String getDockerContainerIdForEcsFargate(boolean isLinux) {
         if (isLinux) {
             String result;
@@ -69,7 +75,7 @@ public String getDockerContainerIdForEcsFargate(boolean isLinux) {
                 fargateUrl = System.getenv(AWS_ECS_METADATA_V4_ENV_VAR);
                 if (fargateUrl != null) {
                     Agent.LOG.log(Level.INFO, "Attempting to fetch ECS Fargate container id from URL (v4): {0}", fargateUrl);
-                    result = retrieveDockerIdFromFargateMetadata(new AwsFargateMetadataFetcher(fargateUrl));
+                    result = retrieveDockerIdFromFargateMetadata(new AwsFargateMetadataFetcher(fargateUrl, cloudConfig));
                     if (result != null) {
                         Agent.LOG.log(Level.INFO, "Found container id: {0}", result);
                         return result;
@@ -79,7 +85,7 @@ public String getDockerContainerIdForEcsFargate(boolean isLinux) {
                 fargateUrl = System.getenv(AWS_ECS_METADATA_UNVERSIONED_ENV_VAR);
                 if (fargateUrl != null) {
                     Agent.LOG.log(Level.INFO, "Attempting to fetch ECS Fargate container id from URL (unversioned): {0}", fargateUrl);
-                    result = retrieveDockerIdFromFargateMetadata(new AwsFargateMetadataFetcher(fargateUrl));
+                    result = retrieveDockerIdFromFargateMetadata(new AwsFargateMetadataFetcher(fargateUrl, cloudConfig));
                     if (result != null) {
                         Agent.LOG.log(Level.INFO, "Found container id: {0}", result);
                         return result;

newrelic-agent/src/main/java/com/newrelic/agent/utilization/UtilizationService.java

@@ -58,7 +58,7 @@ public class UtilizationService extends AbstractService {
     private final ExecutorService executor = Executors.newFixedThreadPool(2, new DefaultThreadFactory(THREAD_NAME, true));
     private Future<UtilizationData> future = null;
 
-    private static final DockerData dockerData = new DockerData();
+
     private static final String THREAD_NAME = "New Relic Utilization Service";
 
     /**
@@ -71,6 +71,7 @@ public class UtilizationService extends AbstractService {
     private final boolean detectGcp;
     private final boolean detectAzure;
     private final boolean detectKubernetes;
+    private final DockerData dockerData;
 
     private static final CloudUtility cloudUtility = new CloudUtility();
     private static final AWS aws = new AWS(cloudUtility);
@@ -89,6 +90,7 @@ public UtilizationService() {
         detectGcp = agentConfig.getValue(DETECT_GOOGLE_CLOUD_PROVIDER_KEY, Boolean.TRUE);
         detectAzure = agentConfig.getValue(DETECT_AZURE_KEY, Boolean.TRUE);
         detectKubernetes = agentConfig.getValue(DETECT_KUBERNETES_KEY, Boolean.TRUE);
+        dockerData = new DockerData(agentConfig.getCloudConfig());
 
         hostName = Hostname.getHostname(agentConfig);
         fullHostName = Hostname.getFullHostname(agentConfig);

newrelic-agent/src/main/resources/newrelic.yml

@@ -179,6 +179,14 @@ common: &default_settings
   #proxy_password: password
   #proxy_scheme: https
 
+  # Cloud environment settings for container metadata collection:
+  # When running in containerized environments (like AWS Fargate) with a proxy,
+  # metadata endpoints may need to bypass the proxy to be accessible.
+  #cloud:
+    # Set to true to bypass proxy for cloud metadata endpoint access.
+    # Default is false.
+    #metadata_bypass_proxy: false
+
   # Limits the number of lines to capture for each stack trace.
   # Default is 30
   max_stack_trace_lines: 30