I have a Jenkins setup that is running inside a private network together with the agents. A SNI proxy forwards outside connections to the internal address.

When agents connect via JNLP, they first connect to the https port, which is properly forwarded back into the internal network, but then they attempt to connect to the agent port using the public IP of the inbound proxy/firewall, which fails.

It would be nice if it were possible to configure an IP address for agents to connect to, in addition to a port number, so agents could be instructed to connect to the internal IP.