Using Docker with TLS-Inspecting Proxy Servers

In Ansys HPC Platform Services deployments, outbound internet access is often controlled by a corporate proxy that performs TLS inspection. These proxies terminate encrypted connections and reissue certificates signed by an enterprise root Certificate Authority (CA).

Docker image builds require HTTPS access to external container registries and package repositories to:

  • Pull base images

  • Install operating system dependencies

  • Retrieve application libraries

When TLS inspection is enabled, Docker operations can fail unless trust is explicitly configured. To operate correctly, trust must be established at three distinct layers:

  • The host operating system running Ansys HPC Platform Services

  • The Docker daemon responsible for pulling container images

  • Build‑time containers that install external dependencies

This layered trust model preserves security boundaries while allowing reliable container image builds in secured enterprise networks.