Python / Zeep / SOAP 代理问题（我认为）

Question

我试图让它发挥作用：

从业者笔记 -> 用于 NA 自动化的 Python 脚本 -> 调用 NA SOAP API 的 Python 客户端

这是我的代码（稍微消毒）：

#! /usr/bin/env python3
from requests import Session
from zeep import Client
from zeep.transports import Transport

session = Session()
session.verify = False

transport = Transport(session=session)

client = Client( 'https://SERVER_FQDN/soap?wsdl=api.wsdl.wsdl2py', transport=transport)

# I added this for the network proxy
client.transport.session.proxies = {
        'http': '10.0.0.1:80',
        'https': '10.0.0.1:80',
        }

# Then found I needed this because "localhost" is hard-coded in the WSDL 
client.service._binding_options['address'] = 'https://SERVER_FQDN/soap' 

login_params = { 
            'username':'user',
            'password':'PASSWORD',
        }
loginResult = client.service.login(parameters=login_params )

sesnhdr_type = client.get_element('ns0:list_deviceInputParms')

sesnhdr = sesnhdr_type(sessionid=loginResult.Text)

devices = client.service.list_device(_soapheaders=[sesnhdr], parameters=sesnhdr)

print('\n\n ----------------------------- \n')
for i in devices.ResultSet.Row:
    print(i.hostName + ' ---> '+i.primaryIPAddress)
    params = {
            "ip":i.primaryIPAddress,
            "sessionid": loginResult.Text
            }
    device = client.service.show_deviceinfo(parameters=params)
    print(device.Text)
    print('\n\n ----------------------------- \n')

这是我的输出：

Traceback (most recent call last):
  File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 667, in urlopen
    self._prepare_proxy(conn)
  File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 932, in _prepare_proxy
    conn.connect()
  File "/usr/local/lib/python3.6/site-packages/urllib3/connection.py", line 317, in connect
    self._tunnel()
  File "/usr/lib64/python3.6/http/client.py", line 929, in _tunnel
    message.strip()))
OSError: Tunnel connection failed: 503 Service Unavailable

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/local/lib/python3.6/site-packages/requests/adapters.py", line 449, in send
    timeout=timeout
  File "/usr/local/lib/python3.6/site-packages/urllib3/connectionpool.py", line 727, in urlopen
    method, url, error=e, _pool=self, _stacktrace=sys.exc_info()[2]
  File "/usr/local/lib/python3.6/site-packages/urllib3/util/retry.py", line 439, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='SERVER_FQDN', port=443): Max retries exceeded with url: /soap (Caused by ProxyError('Cannot connect to proxy.', OSError('Tunnel connection failed: 503 Service Unavailable',)))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "./na-1.py", line XX, in <module>
    loginResult = client.service.login(parameters=login_params )
  File "/usr/local/lib/python3.6/site-packages/zeep/proxy.py", line 51, in __call__
    kwargs,
  File "/usr/local/lib/python3.6/site-packages/zeep/wsdl/bindings/soap.py", line 127, in send
    response = client.transport.post_xml(options["address"], envelope, http_headers)
  File "/usr/local/lib/python3.6/site-packages/zeep/transports.py", line 107, in post_xml
    return self.post(address, message, headers)
  File "/usr/local/lib/python3.6/site-packages/zeep/transports.py", line 74, in post
    address, data=message, headers=headers, timeout=self.operation_timeout
  File "/usr/local/lib/python3.6/site-packages/requests/sessions.py", line 578, in post
    return self.request('POST', url, data=data, json=json, **kwargs)
  File "/usr/local/lib/python3.6/site-packages/requests/sessions.py", line 530, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/local/lib/python3.6/site-packages/requests/sessions.py", line 643, in send
    r = adapter.send(request, **kwargs)
  File "/usr/local/lib/python3.6/site-packages/requests/adapters.py", line 510, in send
    raise ProxyError(e, request=request)
requests.exceptions.ProxyError: HTTPSConnectionPool(host='SERVER_FQDN', port=443): Max retries exceeded with url: /soap (Caused by ProxyError('Cannot connect to proxy.', OSError('Tunnel connection failed: 503 Service Unavailable',)))

如果我使用“localhost”并在相关服务器上运行脚本，我会遇到相同的错误。 系统设置了代理环境值。 服务器有正确的正向和反向 DNS 条目。 服务器的名称和 IP 也在 /etc/hosts 中

问题在于：如果我使用 IP 地址而不是服务器的 FQDN，则代码会运行。

供应商支持说问题不在他们提供端点的应用程序中：

503错误表示服务不可用，有3种情况会调用此行为：1.服务器正在维护中，2.服务器过载，3.在极少数情况下，DNS配置错误。 如果我们看到，这个问题与 NA 无关，因为请求在 IP 上工作正常。

对此有何想法？

为什么只有 IP 有效，而 FQDN 或 localhost 无效？

Answer 1

我的问题在于客户端的初始化想要继续并建立连接，但我需要在开始时进行代理设置。 因此，我拼凑了官方文档中的两个示例，以在建立连接时设置代理。

from zeep import Client
from zeep.transports import Transport
from requests import Session

session = Session()
session.proxies = {
    'http': 'http://username:password@proxy.example.com:8080',
    'https': 'http://username:password@proxy.example.com:8080'
}
transport=Transport(session=session)
client = Client(URL,transport=transport)

Answer 2

我看到的关于在 Zeep 中使用代理的大多数文档都以client = Client(url)开头，但是如果url位于防火墙后面并且只能通过代理访问，则这不起作用！ 我根据文档尝试做的事情除了超时（当然）之外什么也没做。

关键是要理解 Zeep 是建立在requests之上的，并且请求可以使用代理来启动会话。 因此，您需要构建一个代理会话，然后将该会话传递给传输，并使用该传输初始化 Zeep 客户端。 这对我有用：

session = requests.Session()
session.auth = requests.auth.HTTPBasicAuth(soap_username, soap_password)
session.proxies = {"https": f"socks5://{settings.STATIC_PROXY}"}
transport = zeep.transports.Transport(session=session, timeout=(5, 30))
client = zeep.Client(url, transport=transport)