Absolute and relative addressing (Reverse Proxy)

Hi,
we want to use a Reverse Proxy Envirement with EP 6 SP15.
Are the standard links (e.g. navigation) from EP working with relative adressing?
sample:
Real address:
http://www.myserver.com/myapp/mypage.jsp
address on reverse proxy:
http://www.otherserver.com/some/other/url/help/index.jsp
Want to link to the origin page
http://www.myserver.com/myapp/help/index.jsp (origin)
over
http://www.otherserver.com/some/other/url/help/index.jsp
This means behind a reverse-proxy I have to address the page as follows:
../mypage.jsp
Got anyone experience with this envirement - and is it working?
Regards
Thomas
Message was edited by: Thomas Schilling

Hi Thomas,
I guess you will be using Apache as your Reverse Proxy?
Configure your Apache something like this:
My httpd.conf file looks like this:
<VirtualHost IPAddress:80>
Redirect / https://server.domain/
</VirtualHost>
I then have a ssl.conf file that looks like this:
<VirtualHost IPAddress:443>
***Lots of other entries***
ProxyPass /irj/ https://virtualhost/irj/
ProxyPassReverse /irj/ https://virtualhost/irj/
ProxyPass / https://virtualhost/
ProxyPass /webdynpro/ https://virtualhost/webdynpro/
</VirtualHost>
Now obviously edit these ProxyPass, and ProxyPassReverse to suit your needs.
This should help.
Regards
Ian

Similar Messages

Absolute and relative addressing for stylesheets: issue with IE6 and pages not in the root

The following conditional comment gives me a problem when I arrange my site into folders (instead of all pages in one directory, or all in the root). The directories are built according to the site hierarchy.


</style>
What do you suggest I do to get the pages not in the root to read the dropdown_ie.css file when using IE6?
And I have a feeling that the way I import the styles may not be right, but I am not sure.
Any help will be greatly appreciated.
Erik

I solved this one by changing the relative addressing of my stylesheet location in absolute addressing. And I had to do this not only for the stylesheet, but for all addressing in the html related to this drop down menu:
href="http://mysafety.be/styles/dropdown_ie.css"
Changing the location of my files into subdirectories (and removing the spaces in the file names) also means that all my google indexing got screwed up; I submitted to google the whole list of addresses for removal from their cache. It will be another 4 weeks before everything is indexed correctly again, but I guess I better do this now before the site becomes fully operational.

Problems with apex and anychart (using reverse proxy)

Hi,
Im using 2 Servers. The first with Apache2 and the /i/ directory and the second with a Oracle XE Database.
The imagedirectory is at the first server.
Heres my Apache Setup:
<Location /apex>
Options None
Order allow,deny
allow from all
ProxyPass http://..(remote_ip)..:8080/apex
ProxyPassReverse http://..(remote_ip)..:8080/apex
</Location>
Alias /i/ /var/i/
<Directory "/var/i/">
Options None
AllowOverride None
Order allow,deny
Allow from all
</Directory>
if I open a page with a anychart chart I get this error:
"Flash Security Error
Anychart can not be launched due to Flash Security Settings violation.
Please refer to Security error Article in Anychart Documentation..."
http://www.anychart.com/products/anychart/docs/users-guide/index.html?security-error.html
I think I have to place a crossdomain.xml
Placing the crossdomain.xml in example.com/ root-directory doesn't work?
thanks for any help

Hi Christoph,
Yes, the APEX Listener works with Oracle XE. The APEX Listener is currently an Early Adopters release, and is available for download from here: http://www.oracle.com/technology/products/database/application_express/html/apex_listener_download.html. I would recommend reviewing the accompanying Installation Guide before proceeding. There's an 'APEX Listener Feedback' thread - APEX Listener Feedback - which may also proof useful to you. There's also another related thread on this topic: Re: #HOST# Substituin incorrect for charts via Reverse Proxy which discusses the replacement of the #HOST# substitution string.
Regards,
Hilary

Need in depth knowledge about Certficate request and install for Reverse proxy and CAS role

Hi,
I have few confusions about Exchange 2010/13 certificate request and install. As per my understanding best practise is to assign public CA certificate to Reverse proxy and Local CA certificate to CAS servers but need to know that what should be the format
of certificate request? Do we need to order public certificate just for mail.domain.com and add SAN for other web services URLs and is it required to add CAS array and server names to this certificate ? In what case we will add server names and what will happen
if we don't add in it ? How the outlook clients connecting from internet will be using this certificate? I have very limited knowledge in certificates and it always pisses me off. Please help me with explanations and articles. I tried to google and gone through
many articles but didn't get a fair idea. Thanks in advacnce. :)

Hi,
Here are my answers you can refer to:
1. Use the New-ExchangeCertificate cmdlet to generate a new certificate request:
New-Exchangecertificate -domainname mail.domain.com, autodiscover.domain.com -generaterequest:$true -keysize 1024 -path "c:\Certificates\xxxx.req” -privatekeyexportable:$true –subjectname "c=US o=domain.com, CN=server.domain.com"
2. CAS array name doesn’t need to be added in the certificate:
http://blogs.technet.com/b/exchange/archive/2012/03/23/demystifying-the-cas-array-object-part-1.aspx
3. It depends on the situation that you configured to add the server name.
4. Outlook clients use certificate for authentication.
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support

Difference between Absolute and Relative in scales

Hi Experts,
I am creating scales to calculate price in charge calculation for shippers and LSPs.
Here I have a doubt on calculation type (Absolute, Relative) and the impact of these 2 types.
So anyone who already gone through same way can tell about the impact of these 2 calculation types ( Absolute, Relative).
Points will be given for replies.
Thanks,
Shakti

Hi Shaktiprasad,
Consider this example.
Rate table
For 0-100 KM - Fixed Charge $50
101-200 KM $ 0.75 per KM
201-300 KM $0.65 per KM
300+ KM $0.5 per KM
For the above rate table,
Scales would be defined as follows.
>= 0 - Absolute
>= 100 - Relative
>= 200 - Relative
>=300 - Relative.
When there is a fixed charge, we would use Absolute Calculation type for that Scale.
Hope this helps.
Thanks,
Michael.

Jdbc and fire walls (reverse proxy)

Can jdbc use reverse proxy to get through the corporate firewall? This is to provide access to other companies outside the corporate firewall. How?
Are there any other secure ways of providing jdbc thru the firewall?

Only a type 3 driver that can use port 80 or 443. In addition the driver needs to wrap the data in HTTP to get thru the firewall. These ports are about the only guaranteed to be open.
This is why a type 4 will not work since the middleware is required to pull off the HTTP wrappers.
See JDataConnect at www.j-netdirect.com
null

Setting Absolute and Relative Cell References

OK - new to Numbers, but am an advanced spreadsheet user.
I am trying to do a formula where I sum the product of numbers from two other tables. In one I take a row vector and in the other a column vector. Since I am replicating this sum of products across a table, both across and down, I need to set the absolute column in one (the row vector) and absolute row in the other (the column vector).
In Excel, it was easy - use command-T to cycle through the options until I got the $ to show up where I needed it.
In Numbers, I really like the drop down menu, and in reading the manual, I should be able to achieve the same using command-K. Right?
OK - here is my issue and why I need help.
When I select the first cell of my column vector, the drop down menu gives me access to all four options, but I can only select two that will stick (the others can be selected, but they revert back to the original). The two are "relative" - the default one; and "absolute column". I cannot pick the other options. When I use command-K, it also cycles through only those two options.
Am I doing something wrong, missing a setting or not catching a reference in the manual?
Or do I need to enter things manually by typing in cell references?
Hmmm - this is either a bug or something simple that I just cannot see the solution to...
Thanks,
Andrew

Sorry - had to figure out how to put images into this forum (still trying to see how they get displayed...)
Here is what I am doing:
Multiplying this (cell by cell)
Image: !http://public.me.com/andrewvignuzzi/Screen1.jpg!
by this:
Image: !http://public.me.com/andrewvignuzzi/Screen2.jpg!
to get this:
Image: !http://public.me.com/andrewvignuzzi/Screen3.jpg!
So, for each row vector and column vector I get one result in a cell in the third table.
(In this case, the answer is: 30,000,0000.09470*0.1099+00.3557... = 2,841,265; if you take the next row vector (one line down) and multiply it by the same column vector, you would get the 4,047,087 result in the last table, and so on..)
My problem was that when I used the title "Series E" instead of "E Series" in the Column Vector table and I tried to set it to "absolute row" - it would not work. When I changed it to "E Series" it did. Why? While I use "Series E" as a title elsewhere, I would assume that Numbers has an internal reference that includes the table name as part of the identifier so that there is no conflict.
Anyway - I seem to have solved it, but not in a way that makes sense to me and I sure would like to know what, if anything, I am doing wrong.
Thanks!
Andrew
Message was edited by: AndrewVee

Omniportlet and reverse proxy

I have an Oracle Portal installation behind a reverse proxy with Portal on 1 server, SSO/OID on another server, and the database on a 3rd server.
Portal works fine, but Omniportlet and Webclipping are using the server name and port for the Portal server and not the reverse proxy URL. The Portal server name and port are, of course, not accessible to users.
There is no proxy between the Portal and the database.

Originally Posted by ghuertae
Hi.. I have one server with one IP internal 10.x.x.x with reverse proxy to one ip public 159.x.x.x why ?? because we need that server can be used for public and internal users.
For example user external had a server 200.x.x.x and they need connect to my server 159.x.x.x to diferente ports like 8020, 8000 and the port 22 (ssh)
With the port 8000 and 8020 no problem they can connect.. but with 22 port
I did the next filter in my border manager 3.8 (novell 6.0)
Src Interface : ALL
Dest Interface : ALL
Packet Type: ssh (default 22)
Src Port: ALL
Protocol: TCP
Dest Port: 22
Src Add Type: Host
Src IP Add: 200.X.X.X
Dest Add Type: Host
Dest IP Add: 159.X.X.X
and
Src Interface : ALL
Dest Interface : ALL
Packet Type: ssh2 (default 22)
Src Port: 22
Protocol: TCP
Dest Port: ALL
Src Add Type: Host
Src IP Add: 159.X.X.X
Dest Add Type: Host
Dest IP Add: 200.X.X.X
In the server BorderManager setup "Aceleration -> Http Aceleration" I put WeB server port 22 / Named IP Address ip internal and in Proxy IP Addr the ip Public.
If i did a Tel 159.X.X.X 22 I can connect, but if use a program putty �
ssh 159.X.X.X commad i can not connect..!!!
Is there an error in my filter? o is there something else that i have to do ?
thanks a lot.
ok the solution that i find is... use the reverse proxy and Nat for the same ip and it works fine.
I can access to ssh without problem..!

Sun Web Server Reverse Proxy and Weblogic HTTP to HTTPS redirection

Hi,
I am currently testing reverse-proxy from SJSW 7.0 update 5 to Weblogic server but I have encountered an issue.
I have configured a context root to be forwarded to weblogic:
Web Server: www.server.com
URI: /path
Reverse Proxy URL: wlserver:9000
When I access https://www.server.com/path, I am getting the correct page. The issue is, the weblogic server is configured to redirect HTTP access to HTTPS, i.e., when I access http://www.server.com/path, it should be redirected to https://www.server.com/path. However, that is not the case. What happens is that I am being redirected instead to https://www.server.com/.
If I don't use reverse proxy, that is, if I use the libproxy.so from weblogic, I get the correct redirection.
Would appreciate it very much if someone can help me troubleshoot this issue.
Thanks in advance!
Edited by: agent_orange on Jul 29, 2010 2:30 AM
Edited by: agent_orange on Jul 29, 2010 2:31 AM

I am not sure, how you have configured your reverse proxy since you didn't attach / refer your current configuration file. this is how I would do it..
- create a new configuration (using web server 7 admin gui , within configuration wizard, disable java option if you plan to use web server 7 only for reverse proxy)
- select this new configuration and go to reverse proxy and try to reverse proxy / to the origin server.
that is all it should need.
your obj.conf or <hostname>-obj.conf depending on your configuration should look like following snippet
<Object name="default">
AuthTrans..
NameTrans fn=map from="/" to="/path" name="reverse-proxy-/"
</object>
<Object name="reverse-proxy-/">
Route fn=....
Service ..
</Object>
this is all you should need..
However, if you wanted to add complexity to your configuration, you could do some thing like
<Object name="default">
Auth..
<If defined $security>
NameTrans fn=map from="/" to="/path" name="reverse-proxy-/"
</If>
</Object>
<Object name="reverse-proxy-/">
Route...
</Object>

Correctly combining an absolute and a relative URL

Hello everyone!
I've been messing around with combining absolute and relative URLS in java and have found the task to be a little more confusing than I originally thought. For example:
/wallpapers/17i/Lotus_Exige_Mk_II,_2004.jpg
http://wallpapers.diq.ru/ru/17__Peugeot_Moonster_Concept%2C_2001.html
Firefox and other browsers see this as: http://wallpapers.diq.ru/wallpapers/17i/Lotus_Exige_Mk_II,_2004.jpg
I don't understand why the /ru/ is taken out; and was wondering if there was already a class written in Java that combined urls, or if someone could explain to me why the end result is not http://wallpapers.diq.ru/ru/wallpapers/17i/Lotus_Exige_Mk_II,_2004.jpg
Thanks

The web page could have a <head> section that contains a [<base>|http://www.w3schools.com/tags/tag_base.asp].
This specifies the base that will be used when resolving urls. It may not be the url of the page itself. For instance it could be that the "ru" bit collects together all the Russian langauge pages parallel to a "en" duplicate that has the same pages in English. Clearly both sets would want to access the same image resources so they have a <base> setting that points one level higher up.
If this is the case and you want to get the url for the images you will have to parse the <head> of the web page and figure out what the <base>is.

Solution: iPad/iPhone Login issues with IIS as Reverse Proxy (Android and Windows Phone works)

Hi,
I had issues with iPad/iPhone access from external and tried a lot. Now I found my solution I like to share.
I setup a IIS on Windows Server 2012 with ARR 2.5 and Android and Windows Phone could login but not iPad and iPhone.
The IIS Log on the reverse proxy showed:
2013-02-26 12:03:31 <IP> POST /webticket/webticketservice.svc X-ARR-CACHE-HIT=0&X-ARR-LOG-ID=1996c8d7-09d0-4310-8da4-a8dfb7940e28 443 - <ClientIP> Lync%202010/1.6+CFNetwork/609+Darwin/13.0.0 - 401 0 0 124
2013-02-26 12:03:31 <IP> POST /webticket/webticketservice.svc X-ARR-CACHE-HIT=0 443 - <ClientIP> Lync%202010/1.6+CFNetwork/609+Darwin/13.0.0 - 502 3 12018 93
First Request gets a 401 while anonymous. Second try would be with authentication but it never reached the internal front end server.
After I installed a fix for ARR
http://forums.iis.net/t/1195560.aspx/1?ARR+502+3+Bad+Gateway+0x80072ef2+2147954418+The+supplied+handle+is+the+wrong+type+for+the+requested+operation the Apple Devices could login.

Hi,
This resolved our problem too!! So happy after 2 weeks of messing around with just about every setting recommended from all types of forums and rebuilding our reverse proxy I was at a loose end.
Our environment is Lync 2013 Enterprise, Lync 2013 Edge, IIS as Reverse Proxy on Server 2012 using ARR 2.5
We had Android and Windows clients working but no iOS devices at all. In the iOS log we were seeing
<h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>502 - Web server received an invalid response while acting as a gateway or proxy server.</h2> <h3>There is a problem with the page you are looking for, and it cannot be displayed. When the Web server (while acting as a gateway or proxy) contacted the upstream content server, it received an invalid response from the content server.</h3> </fieldset></div></div></body></html>
When the client was trying to retrieve from the webticketservice.svc
2013-04-11 17:19:44.659 Lync[4970:6c61000] INFO TRANSPORT TransportUtilityFunctions.cpp/907:<ReceivedResponse>
POST https://lyncwebext.contoso.com/webticket/webticketservice.svc
Request Id: 0x72cfc18
HttpHeader:Content-Length 1477
HttpHeader:Content-Type text/html
HttpHeader:Date Thu, 11 Apr 2013 16:22:25 GMT
HttpHeader:Server Microsoft-IIS/8.0
HttpHeader:StatusCode 502
Installed the HotFix from here:-
Hotfix for Microsoft Application Request Routing Version 2.5 for IIS7 (KB 2732764) (x64)
Rebooted the Reverse Proxy and iOS clients worked straight away for both Lync 2010 and Lync 2013 on both iPhone 5 and iPad both.
I hope this helps others as I was losing the plot :-)
Cheers
Sam

SJSWS7 Reverse Proxy and SharePoint

Hi,
Is it possible to reverse proxy a SharePoint/WSS application through SJSWS7 Reverse Proxy?
Are there any issues in doing so? How do we take care the NTLM authentication?
Any pointers greatly appreciated.
Thanks,
Esselle
Note: Apologies if this had been already answered in this forum. I tried to run a search but did not find any topics.

Yes, share point can be the origin server and I don't think there is any specific setting that needs to be done within reverse proxy for this. Just treat this as regular origin server and follow our reverse proxy docs or blogs and that is all I believe it should take.
However, we do not (yet) support NTLM authentication in reverse proxy mode . However, we do support Kerberos within web server 7 and that hopefully should allow u to authenticate in the web server 7 land. however,
I have filed a bug to track this issue (reverse proxy + NTLM authentication)
- Sriram

Reverse proxy plugin with SSL

Hi,
I'm trying to set up reverse proxy plugin that forwards requests from plain HTTP port on web server to SSL port on origin-server (sun web console)
I have followed instructions from [http://blogs.sun.com/meena/entry/configuring_reverse_proxy_in_web] to achieve this:
wadm create-reverse-proxy --user=admin --password-file=/.ws7pass --config=test --vs=test --uri-prefix=/console/ --server=https://webconsole:6789And part of my obj.conf related to reverse-proxy:
NameTrans fn="map" from="/console/" to="https:/" name="reverse-proxy-/console"
<Object ppath="https:*">
    Service fn="proxy-retrieve" method="*"
</Object>
<Object name="reverse-proxy-/console">
    Route fn="set-origin-server" server="https://webconsole:6789/"
</Object>When one tries to access http://test/console/ following messages appear in the log file:
fine    (27868): for host x.x.x.x trying to GET https:/, service-http reports: attempting to contact webconsole:6789
fine    (27868): for host x.x.x.x trying to GET https:/, attempting to resolve webconsole
fine    (27868): for host x.x.x.x trying to GET https:/, attempting to connect to 192.168.1.80:6789
fine    (27868): for host x.x.x.x trying to GET https:/, connected to 192.168.1.80:6789
failure (27868): for host x.x.x.x trying to GET https:/, service-http reports: HTTP7765: error reading response header (Server closed connection)
finest (27868): for host x.x.x.x trying to GET https:/, func_exec reports: executing fn="set-origin-server" server="https://webconsole:6789/" Directive="Route" magnus-internal=""
fine    (27868): for host x.x.x.x trying to GET https:/, set-origin-server reports: using server https://webconsole:6789
finest (27868): for host x.x.x.x trying to GET https:/, func_exec reports: fn="set-origin-server" server="https://webconsole:6789/" Directive="Route" magnus-internal="" returned 0 (REQ_PROCEED)
finest (27868): for host x.x.x.x trying to GET https:/, func_exec reports: fn="proxy-retrieve" method="*" Directive="Service" returned -1 (REQ_ABORTED)Any ideas?

Oh, sorry, when I'm accessing console through reverse proxy, nothing is written to the web console log initially, and these messages appear in the web server log (now loglevel=info):
[15/May/2008:15:52:41] failure (23204): for host x.x.x.x trying to GET https:/, service-http reports: HTTP7765: error reading response header (Server closed connection)
[15/May/2008:15:52:41] info    (23204): for host x.x.x.x trying to GET https:/, set-origin-server reports: HTTP7751: server https://webconsole:6789 offline
[15/May/2008:15:52:41] failure (23204): for host x.x.x.x trying to GET https:/, service-http reports: HTTP7765: error reading response header (Server closed connection)
[15/May/2008:15:52:41] failure (23204): for host x.x.x.x trying to GET https:/, service-http reports: HTTP7765: error reading response header (Server closed connection)After some time this message is written to webserver log:
[15/May/2008:15:53:02] info (23204): trying to OPTIONS https://webconsole:6789, check-http-server reports: HTTP7750: server https://webconsole:6789 onlineAnd simultaneously this message is written to webconsole log:
CoreSessionManagerFilter:doFilter | Request: https-mfwk-zone-6789: /

Disabling normal proxy function in a reverse-proxy server..

If you want to disable the capability to use the server as a "normal" forward proxy and only allow reverse proxying. Based on a section in the admin manual
These additional automatic mappings are for users who connect to the reverse
proxy as a normal server. The first mapping is to catch users connecting to the
reverse proxy as a regular proxy. Depending on the setup, usually the second is the
only one required, but it does not cause problems in the proxy to have them both.
The first mapping reffered to is a mapping rule:
"http://external.ip.address" => "http://proxyied.server.ip"
The second is of the form:
"/" => "http://proxyied.server.ip"
Would it be enough to just have the "/" rule, which it kind of sounds like i the admin text?

You can use the admin GUI to turn on access control and to create/modify
ACLs. Once you save and apply changes, and compare the new obj.conf
to the previous one (do a backup first, if you prefer) you can see a new
PathCheck "check-acl" directive present. You need to wrap this directive
in a <Client> tag:
Here's how to use <Client> tags:
http://docs.sun.com/app/docs/doc/819-5494/6n7isltea?l=ko&a=view

Problem with Apache reverse proxy after applying SP13 NW

Hello,
we have a NW04 EP Portal and a Apache reverse proxy in the DMZ. After applying SP 13 for the portal we get the following error from the reverse proxy:
Proxy Error
The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request GET /irj/.
Reason: Error reading from remote server
Apache/2.0.52 (Win32) mod_ssl/2.0.52 OpenSSL/0.9.7e Server at servername.company.de Port 443
Is is it possible, that there is a problem with sp13?
Best regards
Daniel Holstein

Hi Daniel,
ok I`ll try to find a solution in parallel and keep you up to date.
In the following my settings in case I missed something:
<VirtualHost test.firma.de:443>
SSLEngine on
SSLProxyEngine on
SSLCertificateFile /apache/keys/pac_ssl_qep_dmz_server.crt
SSLCertificateKeyFile /apache/keys/pac_ssl_qep_dmz_server.key
ServerName test.firma.de:443
ServerAdmin [email protected]
LogLevel debug
ErrorLog logs/ssl_443_error
CustomLog logs/ssl_443_access_log common
ProxyVia Off
ProxyPreserveHost On
ReWriteEngine on
ReWriteLogLevel 0
ReWriteLog logs//ssl_443_rewrite_http.log
ProxyPass / https://backend.firma.de:50001/
ProxyPassReverse / https://backend.firma.de:50001/
</VirtualHost>
Regards, Jens

Absolute and relative addressing (Reverse Proxy)

Similar Messages

Maybe you are looking for