Help Center/ Host Security Service/ Best Practices/ Third-Party Servers Accessing HSS Through a Direct Connect and Proxy Servers/ Process/ Installing an Agent on the Proxy Server
Updated on 2025-06-26 GMT+08:00
View PDF
Share

Installing an Agent on the Proxy Server

Install an agent on the proxy server. Ensure the network is available and configure Nginx.

Installing an Agent on the Proxy Server

  1. Log in to the management console.
  2. Click in the upper left corner and select the region and project.
  3. Click in the upper left corner of the page and choose Security & Compliance > HSS.
  4. In the navigation pane, choose Installation & Configuration > Server Install & Config.
  5. In the upper right corner of the page, click Install HSS Agent.
  6. Select ECS and click Configure Now.
  7. Select an installation mode. For details, see Table 1.

    Figure 1 Installing an agent
    Table 1 Parameters for installing the agent

    Parameter

    Example Value

    Description

    Install Mode

    Command
    • GUI: You need to provide server account password or key for installing the agent. HSS does not save the password file you upload. To install the agent in this mode, ensure there is already an executor ECS - an ECS with an online agent in the same VPC as the target ECS.
    • CLI: You need to log in to the server and run commands or scripts. This method is used when you install the agent for the first time.

    Owner Account

    Current
    • Current: The server and the HSS quota you purchased are under the same account. You can log in to the account to obtain the installation commands or script and install the agent on the server.
    • Other: The server and the HSS quota you purchased are not under the same account. You can log in to account A to obtain the installation command or script, and install the agent on the target server under account B. After the agent is successfully installed, you can view the target server on the Asset Management > Servers & Quota page of account A.

    Server OS

    Linux

    Select the OS type of the server.

    Scale

    Single

    Select a value based on the number of servers where the agent is to be installed.

  8. (Optional) Select the servers that need to be connected to the current HSS region and click Next.

    • Perform this operation only in the CN East 2 and CN Southwest-Guiyang 1 regions. HSS will automatically create a VPC endpoint. It will occupy an IP address of your VPC subnet. Only one VPC endpoint will be created for each of your VPCs to ensure the communication between your servers and HSS.
    • In other regions, ensure the security groups of your servers allow outbound traffic through port 10180 of the 100.125.0.0/16 CIDR block. This port is used to communicate with HSS.

  9. Install the agent as prompted.

    For CN East2 and CN Southwest-Guiyang1 regions, wait until the network communication succeeds (that is, the VPC endpoint is created) before performing the following operations.

    1. On the console page, click in the Install HSS Agent dialog box to copy the installation command.
      Figure 2 Copying the installation command
    2. Log in to the server as the root user and paste the installation command.

      If the command output shown in Figure 3 is displayed, the agent has been installed.

      Figure 3 Agent installed

  10. Wait for 5 to 10 minutes and return to the HSS console. On the Server Install & Config page, click the Agents tab, and click Servers with Agents. Check the agent status of the target server.

    If the Agent Status is Online, the agent is successfully installed.

Parent topic: Process