DMZ in R12

Hi Experts,
I am upgrading the Instance from 11.5.10.2 to 12.1.3
I have 6 nodes
2 nodes for Database- sunclustered
2 nodes for Application Services-- connected with cisco load balancer
2 nodes for DMZ runing on web services --> connectd with another cisco load balancer ( for all imodules)
There should be two urls at the end 1 for internal users and another url for external users accessing outside the network.
I am planing to implement shared appl-top for all the 4 nodes..
during rapidwiz will provide all the 4 node information for 2 nodes all services enabled and for DMZ web nodes only web entry and root services enabled.
pls advise if I am plannig in a correct way .
Thanks,
Waseem

Hello Hussein,
I confirmed from Oracle for my architecture I cannot have one shared APPL_TOP for all the four nodes.
So Oracle suggested to go with two shared APPL_TOP one for 2 internal nodes runing all services another one for 2 external web nodes i.e 2 DMZ nodes.
I need your inputs how to setup shared APPL_TOP for external nodes during addition of nodes.
During laying down of R12 file system I will use shared APPL_top for 2 internal nodes and then will upgrade till 12.1.3
then I am planing to implement and add 2 external web nodes. pls suggest how to do that.
Thanks
Waseem

Similar Messages

IProcurement over DMZ in R12

Hi,
We have a requirement to implement iProcurement for external users over DMZ. I have followed the note
Oracle E-Business Suite R12 Configuration in a DMZ [ID 380490.1] and implemented Option 2.2: Using Separate Oracle E-Business Suite Release 12 Web Tiers (without reverse proxy or load balancer).
I have plethora of doubts on taking this forward after DMZ configuration
1. Now what setups needs to be done for iProcurement ?
2. Is iProcurement and iSupplier portal both same ?
3. What URL do I need to expose externally (for iRec it is http://hostname:port/OA_HTML/IrcVisitor.jsp, like wise what can be there for iProcurement )
My Env:
Red hat Linux , 11g R2, EBIZ R12
Following notes are only little useful
Enable Web Access By External Supplier Users to Oracle iSupplier Portal and Oracle Sourcing [ID 308271.1]
NOTE:782247.1 - Forgot Password Email URL for Supplier Wrongly Pointing to Internal Server
NOTE:445315.1 - Incorrect iSupplier Portal User Registration Url For External Users After Single Sign On (SSO)
NOTE:988001.1 - Supplier User Encounters Blank Screen When Log In to iSupplier Portal From External URL
Any suggestion would be more helpful.
Thanks and regards,
Charan
Edited by: charan on Dec 12, 2012 10:29 PM

Hi,
With note,
Oracle E-Business Suite R12 Configuration in a DMZ [ID 380490.1]
I have created a DMZ server.
With note,
Enable Web Access By External Supplier Users to Oracle iSupplier Portal and Oracle Sourcing [ID 308271.1]
I changed the mentioned profile options and ran the specified script (even through the note is for 11i)
Now, what next should I do? Where can I check the things ? To what external page users should access ?

Shared file system between Int and ext server(DMZ) in R12.1.3 for iRec

Dear Friends,
we are using R12.1.3 and we planned to use iRec module.
so we decided to go with External web tier and it will be placed in DMZ for external users.
Is it possible to have shared file system between internal and external web server when external server is in DMZ?
Is it safe to go with shared application Tier file system between internal and external server (or) to have seperate file system in externel web tier?
Regards,
DB

Take a look at Note 380490.1 DMZ Deployment for R12.
Also For Specific Load balancer 727171.1 Up to 12.x but alot of the information is still usefull based on hardware loadbalancer
Also Note 1309013.1 has some good information on SSO/OAM Intergration with E-Business Suite

Log Out Page is Not working in R12.1.3 DMZ

Hi Everyone ,
Good Evening.
Apps Version : 12.1.3
DB Version 11.2.0.3
PLatform : AIX 6.1
Arch : LBR ---> Reverse Proxy ----> EXternal Middle Tier (DMZ) --- DB
I am able to login to External Middle tier using the URL ( https://LBR.Domain/OA_HTML/AppsLocalLogin.jsp. I am able to navigate the links like preferences , Diagnostic , Home. But As soon as I am clicking on the log out link , I am getting http 500 error.
One this Which I have Observer that Lou out Url is changing to the host name of the server instead of LBR Name as
( https://hostname.domain/OA_HTML/AppsLocalLogin.jsp?cancelUrl=/OA_HTML/AppsLocalLogin.jsp&_logoutRedirect=y&langCode=US)
I have already followed the doc on Metalinks but no luck. Have tried to run the Autoconfig and bouncing of application but no luck. Enabled the Debug for OC4J but couldn't get any thing
Advanced Configurations and Topologies for Enterprise Deployments of E-Business Suite 11i [ID 217368.1]
Oracle E-Business Suite R12 Configuration in a DMZ (Doc ID 380490.1)
MOS Doc 380489.1 (Using Load-Balancers with Oracle E-Business Suite Release 12)
Tips and Queries for Troubleshooting Advanced Topologies (Doc ID 364439.1)
Enabling SSL in Oracle E-Business Suite Release 12 (Doc ID 376700.1)
Case History: Implementing a Reverse Proxy Alone in a DMZ Configuration - R12 (Doc ID 726953.1)
Regards
Sourabh Gupta

Access LOG
192.25.91.72 - - [12/Jan/2013:03:19:51 -0800] "GET /OA_HTML/AppsLocalLogin.jsp HTTP/1.1" 302 654
192.25.91.72 - - [12/Jan/2013:03:20:09 -0800] "GET /OA_HTML/RF.jsp?function_id=33375&resp_id=-1&resp_appl_id=-1&security_group_id=0&lang_code=US&params=Qs-5KmFWI7wTvCh5zUbV0Q&oa
s=kukIe_oeKd3-mIFqpYDc-g.. HTTP/1.1" 200 36832
192.25.91.72 - - [12/Jan/2013:03:20:12 -0800] "GET /OA_MEDIA/nlsgb.gif HTTP/1.1" 404 224
192.25.91.72 - - [12/Jan/2013:03:20:13 -0800] "GET /favicon.ico HTTP/1.1" 404 217
192.25.91.72 - - [12/Jan/2013:03:20:43 -0800] "POST /OA_HTML/OA.jsp?page=/oracle/apps/fnd/sso/login/webui/MainLoginPG&_ri=0&_ti=1178971693&language_code=US&requestUrl=&oapc=2&oa
s=yYEcdVDqcyn1J76kQdGvIg.. HTTP/1.1" 302 297
192.25.91.72 - - [12/Jan/2013:03:20:49 -0800] "GET /OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE HTTP/1.1" 200 23961
192.25.91.72 - - [12/Jan/2013:03:20:51 -0800] "GET /favicon.ico HTTP/1.1" 404 217
192.25.91.72 - - [12/Jan/2013:03:20:51 -0800] "POST /OA_HTML/RF.jsp?function_id=MAINMENUREST&security_group_id=0 HTTP/1.1" 200 527
192.25.91.72 - - [12/Jan/2013:03:20:58 -0800] "GET /OA_HTML/OALogout.jsp?menu=Y HTTP/1.1" 302 255
192.25.91.72 - - [12/Jan/2013:03:20:59 -0800] "GET /OA_HTML/AppsLogout HTTP/1.1" 302 474
192.25.91.72 - - [12/Jan/2013:03:21:21 -0800] "GET /OA_HTML/xxatatgibeCAcdLogin.jsp HTTP/1.1" 200 4955
192.25.91.72 - - [12/Jan/2013:03:21:22 -0800] "GET /favicon.ico HTTP/1.1" 404 217
Error-Log ====================
[Sat Jan 12 05:27:42 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997262:192.25.89.136:17825804
:0:16,0] mod_oc4j: Response header 3, Key: Location, Value: https://LBR:443/OA_HTML/AppsLogout
[Sat Jan 12 05:27:42 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1748): [client 192.25.91.72] [ecid: 1357997262:192.25.89.136:17825804
:0:16,0] mod_oc4j: sending response chunk to client: 243 bytes
[Sat Jan 12 05:27:42 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_main.c(554): [client 192.25.91.72] [ecid: 1357997262:192.25.89.136:17825804:0:16,0]
mod_oc4j: Successfully serviced the request by worker: home.
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(845): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Sending request to: hostname.cos.domain.com:21530
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(900): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: num request headers: 13
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 0, Key: Accept, Value: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 1, Key: Accept-Charset, Value: ISO-8859-1,utf-8;q=0.7,*;q=0.3
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 2, Key: Accept-Encoding, Value: gzip,deflate,sdch
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 3, Key: Accept-Language, Value: en-US,en;q=0.8
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 4, Key: Connection, Value: Keep-Alive
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 5, Key: Cookie, Value: OTST_pses=ZGF3942C49577C19434B20BB2BFC38217F24B83798344666F7EBDA8A2CE821953ED87BB7860DF6137DC51AB7F3AB1DD1D7; JSESSIONID=
1d74eb5633089116f24c2c69ae565cbadc116765f9bbba7ef053c2d31f9f18a2.e38QahiPbxuObi0LbxeKaN0Kch0Re0; rvprod=; AGRL=thcgn_ivteb36%40lnubb.pb.va%7C%3A%3Bbde49ffdb22662e94721e6e73d7c20
f4%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D%3D%3A%3B57f4c9dc1bf265e6378a7ea00a65338f%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D%3D%3A%3B4ed5d2eaed1a1fadcc41ad1d58ed603e%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D
%3D%3A%3Bdb486e4cdf8b2048591e59f683319c4c%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D%3D%3A%3B459d9fca17e3a950deae755d13578292%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D%3D%3A%3Bed89387bcd11937a7a92a99a
2cbfb5d7%3A%3Dox20hZArLI714LpPDtK%2Fhw%3D%3D%3A%3Bef21925fada6dfb684b5d8ec72114bb1%3A%3DATXmBagSN%2B8f817OiRKOyg%3D%3D%3A%3Bf7a42fe7211f98ac7a60a285ac3a9e87%3A%3DUmaluUp4qT5fgOw
L8NFUGg%3D%3D%3A%3B851f5ac9941d720844d143ed9cfcf60a%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D%3D%3A%3B9ed39e2ea931586b6a985a6942ef573e%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D%3D%3A%3Becfdd0a8fcb7da
c5ef0e651b7a6bb24c%3A%3DUmaluUp4qT5fgOwL8NFUGg%3D%3D; AGWL=; s_vi=[CS]v1|2834C339851633B7-600001A68017C480[CE]; treemenu1=none open; OTST=t3ThpFHMpGPbJV3neU811CUwTg; oracle.uix=
0^^GMT+5:30^p
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 6, Key: Host, Value: hostname.cos.domain.com:4493
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 7, Key: Referer, Value: https://LBR/OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 7, Key: Referer, Value: https://LBR/OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 8, Key: User-Agent, Value: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.17 (KHTML, like Gecko) Chrome/24.0.1312.52 Safari/537.17
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 9, Key: X-Forwarded-For, Value: 192.25.91.88
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 10, Key: X-Forwarded-Host, Value: LBR
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 11, Key: X-Forwarded-Server, Value: LBR
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(914): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: Request header 12, Key: Oracle-ECID, Value: 1357997264:192.25.89.136:12451862:0:52,0
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(980): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:
0:52,0] mod_oc4j: jvm_route: e38QahiPbxuObi0LbxeKaN0Kch0Re0
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1117): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: uri4oc4j: /OA_HTML/AppsLogout
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1668): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] Number of response headers: 8
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 0, Key: Date, Value: Sat, 12 Jan 2013 13:27:43 G
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 1, Key: Content-Type, Value: text/html
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 2, Key: Set-Cookie, Value: JSESSIONID=1d74eb5633089116f24c2c69ae565cbadc116765f9bbba7ef053c2d31f9f18a2.e38QahiPbxuObi0LbxeKaN0Kch0Re0; path=/O
A_HTML; secure
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 3, Key: Set-Cookie, Value: OTST=-1; Domain=.domain.com; Path=/; Secure
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 4, Key: Cache-Control, Value: no-cache
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 5, Key: Pragma, Value: no-cache
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 6, Key: Expires, Value: Thu, 01 Jan 1970 00:00:00 GMT
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1700): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: Response header 7, Key: Location, Value: https://hostname.cos.domain.com/OA_HTML/AppsLocalLogin.jsp?cancelUrl=/OA_HTML/AppsLocalLogin.jsp&_logoutRedirect=y&l
angCode=US
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_ajp13_worker.c(1748): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862
:0:52,0] mod_oc4j: sending response chunk to client: 462 bytes
[Sat Jan 12 05:27:44 2013] [debug] /ade/plebld_ascore_467553/oracle/asg_apache/oc4j/src/oc4j_main.c(554): [client 192.25.91.72] [ecid: 1357997264:192.25.89.136:12451862:0:52,0]
mod_oc4j: Successfully serviced the request by worker: home.

R12 External Access

Hi Hussein,
In my test env, I have one single node instance of R12 (12.0.6) running over RHEL 5.3. This instance environment is wrapped within a VPN. I want to give access to R12 instance to some users for testing who are outside the VPN (through internet). I want to build a test environment to learn DMZ. R12 is configured using a dummy test domain for test instance by putting entries in hosts file at server as well as client side internally. I don't need any load balancing requirement at this point as it is only for testing.
I just want to build a very simple configuration with minimum additional HW/SW which can meet my above requirement. Please help me with the following. Any step by step instructions or guide will be really appreciated.
http://r12.west.domain.com - Current VPN access URL
http://r12.domaon.com - Proposed external access URL
Do I need a seperate server outside the VPN.
How many additional public and Private IPs (VPN) needed.
Do I need to have any Public Domain.
Do I need to have any network component like switch/router.
Any additional software component need to be installed.
I have the following note for 11i from your previous post which I did not have a chance to implement as I upgraded the instance to R12.
Note: 287176.1 - DMZ Configuration with Oracle E-Business Suite 11i
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=287176.1
Please suggest/advise.
Thanks
-Samar-

Hi Samar,
There are many deployment options available for making Oracle E-Business Suite R12 accessible via the internet. The following document outlines these different scenarios in details.
Note: 380490.1 - Oracle E-Business Suite R12 Configuration in a DMZ
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=380490.1
The simplest configuration to make your TEST server accessible via internet is to change the IP Address to public and that is all, but as you know this option is not acceptable as it is unsecure, plus you are not gaining any extra knowledge when implementing it. Since you want to avoid reverse proxy and load balancers, then the only option you have is configuring an external web tier behind a DMZ external firewall (please refer to the document referenced above for details -- Option 2.2: Using Separate Oracle E-Business Suite Release 12 Web Tiers).
Web cache could be used here as it can act as a reverse proxy, web caching, and load balancer. More details about this configuration can be found in the following document.
Note: 380486.1 - Installing and Configuring Web Cache 10g and Oracle E-Business Suite 12
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=380486.1
I would suggest you go through the documents/links referenced in this reply, and see if you could reconsider the configuration of this test environment you want to build. If you go with web cache for example, you may implement a reverse proxy or load balancer, and hence go with a different deployment option.
What Does "DMZ Certification" Mean?
http://blogs.oracle.com/stevenChan/2007/04/what_does_dmz_certification_me.html
Troubleshooting DMZ Setups for Apps
http://blogs.oracle.com/stevenChan/2007/09/troubleshooting_dmz_setups_for.html
In-Depth: Demilitarized Zones and the E-Business Suite
http://blogs.oracle.com/stevenChan/2006/05/indepth_demilitarized_zones_an.html
Advanced Deployment Architectures for Oracle E-Business Suite
http://blogs.oracle.com/stevenChan/2008/11/advanced_deployment_architectures_for_oracle_ebs.html
Advanced Deployment Architectures for Oracle E-Business Suite
http://www.oracle.com/technology/products/applications/events/oow-2008/EBS-Advanced-Configurations-IvoDujmovic.pdf
Regards,
Hussein

EBS R12 forms over Internet...???

Hii All,
Can we deploy EBS R12 forms over internet?
Is it supported by oracle..?
will there be any issues in accessing EBS forms through internet...?
Will there be any security issues...??
Did anybody implemented this already..?
or using VPN is safe...?
Please help me out finding right stratagy...!!
Thanks
RB
Edited by: R12DBA on Nov 5, 2010 1:39 PM

Hi,
Can we deploy EBS R12 forms over internet?Yes.
Is it supported by oracle..?Yes.
will there be any issues in accessing EBS forms through internet...?
Will there be any security issues...??If you follow the steps in the DMZ documents, it should be OK.
Did anybody implemented this already..?Yes.
or using VPN is safe...?This is also a valid option.
Please help me out finding right stratagy...!!See these docs/links.
Oracle E-Business Suite R12 Configuration in a DMZ [ID 380490.1]
Case History: Implementing a Reverse Proxy Alone in a DMZ Configuration - R12 [ID 726953.1]
iHelp in R12 Not Working With Load Balanced or DMZ Environments [ID 604843.1]
What Does "DMZ Certification" Mean?
http://blogs.oracle.com/stevenChan/2007/04/what_does_dmz_certification_me.html
Additional Configuration and Deployment Options in Release 12
http://blogs.oracle.com/stevenChan/2007/02/additional_configuration_and_d.html
Troubleshooting DMZ Setups for Apps
http://blogs.oracle.com/stevenChan/2007/09/troubleshooting_dmz_setups_for.html
Thanks,
Hussein

VIrtual host and reverse proxy FOR EBIZ R12.0.6

we have 4 dev EBIZ instances on a single hp_ux itanium server on which I have to setup one instance for virtual hosting and to work behind a reverse proxy .
any particular documents or steps for this.
Thanks
mn

we have 4 dev EBIZ instances on a single hp_ux itanium server on which I have to setup one instance for virtual hosting and to work behind a reverse proxy .
any particular documents or steps for this.Implementing Virtual Host, Concurrent Managers and EM DBconsole on Oracle Applications R12 [ID 603883.1]
Conc-System Node Name Not Registered After Fresh Install Using Virtual Name [ID 948644.1]
Is Auto Failover With Virtual Hostnames For Concurrent Processing Servers Supported In 11i Or R12? [ID 456540.1]
Case History: Implementing a Reverse Proxy Alone in a DMZ Configuration - R12 [ID 726953.1]
Oracle E-Business Suite R12 Configuration in a DMZ [ID 380490.1]
Thanks,
Hussein

Implementing a Reverse Proxy Alone in a DMZ Configuration....???

Hii All ,
have anybody implemented this configuration..??
Implementing a Reverse Proxy Alone in a DMZ Configuration - R12 [ID 726953.1]
we planning to implement this configuration, please guide me if anybdy implemented and working with this configuration.
Thanks
RB

Hi,
1)in that document they have used 10g webcache as reverse proxy... but in my case already modproxy in place can i use this modproxy in place of 10g webcache..?A number of options exist for choosing a reverse proxy -- See (Oracle E-Business Suite R12 Configuration in a DMZ [ID 380490.1]), Appendix D: Reverse Proxy Configuration
It is also explained in this article.
In-Depth: Demilitarized Zones and the E-Business Suite
http://blogs.oracle.com/stevenChan/2006/05/indepth_demilitarized_zones_an.html
2)i have 2 web nodes loadbalancing through reverseproxy, do i need to configure the external web node on both the web nodes ..according to the above doc..?You do not need to have a dedicated reverse proxy for each web tier node (see the second diagram in this doc).
Advanced Deployment Architectures for Oracle E-Business Suite (OpenWorld 2008 Recap)
http://blogs.oracle.com/stevenChan/2008/11/advanced_deployment_architectures_for_oracle_ebs.html
Thanks,
Hussein

Reverse Proxy only in DMZ Node

Hi Everyone,
We are implementing reverse only proxy in DMZ in R12.1.1 option 2.4 in DMZ note. I have few doubts regarding the setup. I would appreciate if anyone could clarify those.
I have a reverse proxy server in DMZ with a public IP and internal IP( We have built apache from souce as reverse proxy)
I have a MT(Linux box) with Two IP's one for Internal Webentry (port 8001)and second IP for external webentry(port 8002). These two have been registered in DNS the first ip would resolve to appsmt and second one would resolve to appsrp
We have Created packet filter rule allowing reverse proxy to communicate explicitly with MT(appsrp) on second IP (for external webentry) over TCP port 8002
As per DMZ note 726953.1 or 380490.1
1)what should I give when it prompts for host name when I run adclonectx.pl Step 5.9.1
Target System Hostname (virtual or normal) [dcoll12xc] :
should I give reverse proxy hostname or second host name on the MT for the external webentry
2) What should I give values for below
s_webentryhost
s_webentrydomain
s_active_webport
s_server_ip_address
should they be reverse proxy hostname/Ip or second host name/Ip on the MT for the external webentry?
Thanks

Hi user;
Please follow Oracle E-Business Suite R12 Configuration in a DMZ [ID 380490.1]
For your question 1 please check upper note part *5.9.1: Create a new context file for the external Web Entry Point* , it is explain there what you have to enter
For your question 2 please check upper note part *5.4.1: Update Oracle E-Business Suite Applications Context File*, it is explain there what you have to enter
Hope it helps
Regard
Helios

Unable to activate internal and external urls at the same time

Hi,
We have Configured EBS R12 in DMZ setup as described in Figure F-9 of metalink note 380490.1 ,Option 2.4: Using Reverse Proxy with no External Web Tier.
refering to 726953.1 Case History: Implementing a Reverse Proxy Alone in the DMZ Configuration - R12.
but Not able to activate internal and external urls at the same time in this configuration. Only the node where last autoconfig was run getting activated as web node.
When trying to accees the url of the other node it gets redirected to the url (where autoconfig is last run).and for this error observed is Error Code:502 Proxy Error.The specified Secure Sockets Layer (SSL) port is not allowed.(12204).
For both external and internal services are UP.opmn status is live no error.
Using Apache as reverse proxy.
EXTERNAL Reverse proxy settings:
s_login_page http://LONWEB01.process.com:81/OA_HTML/AppsLogin
<TIER_DB oa_var="s_isDB">NO</TIER_DB>
<TIER_ADMIN oa_var="s_isAdmin">NO</TIER_ADMIN>
<TIER_WEB oa_var="s_isWeb">YES</TIER_WEB>
<TIER_FORMS oa_var="s_isForms">YES</TIER_FORMS>
<TIER_NODE oa_var="s_isConc">NO</TIER_NODE>
<TIER_FORMSDEV oa_var="s_isFormsDev">YES</TIER_FORMSDEV>
<TIER_NODEDEV oa_var="s_isConcDev">NO</TIER_NODEDEV>
<TIER_WEBDEV oa_var="s_isWebDev">YES</TIER_WEBDEV>
INTERNAL Middle Tier settings:
s_login_page http://stprojapp01.test.com:8005/OA_HTML/AppsLogin
<TIER_DB oa_var="s_isDB">NO</TIER_DB>
<TIER_ADMIN oa_var="s_isAdmin">YES</TIER_ADMIN>
<TIER_WEB oa_var="s_isWeb">YES</TIER_WEB>
<TIER_FORMS oa_var="s_isForms">YES</TIER_FORMS>
<TIER_NODE oa_var="s_isConc">YES</TIER_NODE>
<TIER_FORMSDEV oa_var="s_isFormsDev">YES</TIER_FORMSDEV>
<TIER_NODEDEV oa_var="s_isConcDev">YES</TIER_NODEDEV>
<TIER_WEBDEV oa_var="s_isWebDev">YES</TIER_WEBDEV>
Are we missing anything....
Thanks & Regards

Hi,
Finally it's resolved...Following is the solution thought to share in the forum:
The configuration of the E-Business Suite environment for DMZ requires profile options hierarchy type to be set
to SERVRESP.
To change the profile options hierarchy type values to SERVRESP, execute the following SQL script as
shown below:
sqlplus / @/patch/115/sql/txkChangeProfH.sql SERVRESP
After successfully completing the above sql script, run Autoconfig in all nodes to complete the profile options configuration.
It's resolved after doing this..

RC-50204: Error: - s_oemweb_port in use: Port Value = 10000

when I am running 'perl adcfgclone.pl appsTier' for the external server DMZ setup I am getting the following error when enter the port pool as 0,
Enter the port pool number [0-99]:
0
Checking the port pool 0
RC-50221: Warning: Port Pool 0 is not free. Please check logfile C:\DOCUME~1\ora
user\LOCALS~1\Temp\\CloneContext_09260349.log for conflicts.
One of the line of the above log file reads,
RC-50204: Error: - s_oemweb_port in use: Port Value = 10000
Please advice.

Hi;
Enter the port pool number [0-99]:
0
Checking the port pool 0
RC-50221: Warning: Port Pool 0 is not free. Please check logfile C:\DOCUME~1\ora
user\LOCALS~1\Temp\\CloneContext_09260349.log for conflicts.What is your EBS verison...It can be possible this port using one another program?Did you try to do this wiht one other port number? Please check C:\DOCUME~1\ora> user\LOCALS~1\Temp\\CloneContext_09260349.log for more details
One of the line of the above log file reads,
RC-50204: Error: - s_oemweb_port in use: Port Value = 10000
Please check :Case History: Implementing a Reverse Proxy Alone in a DMZ Configuration - R12 [ID 726953.1] << part 4c
Hope it helps
Regard
Helios

Reverse Proxy configuration

Hi ,
Shall I know to configure the reverse proxy server in DMZ along with HTTPS to HTTP redirection.
Regards,
Satyanarayana

Please check, this is specific to Oracle EBS, but good doc to understand on Reverse Proxy
Case History: Implementing a Reverse Proxy Alone in a DMZ Configuration - R12 (Doc ID 726953.1)

Virtual External Node and Node Trust Level?

Just wondering if anyone has ever setup the following configuration:
Case History: Implementing a Reverse Proxy Alone in a DMZ
Configuration - R12 [ID 726953.1]
If so, were you able to set the node trust level to EXTERNAL for this virtual tier
to limit the responsibilities it has access to?
If you look at note 380490.1 , all of the options say the following except for option 2.4 which is using a reverse proxy.
In this configuration, the external Applications web tier is required to:
Restrict access to a limited set of Oracle Applications responsibilities for users logging in via the Internet
Allow user access to only Oracle E-Business Suite Release 12 products that can be deployed for Internet access

Hi Nic,
I agree with you.But i want to make sure on the following things:
1.How to generate xml file?
2.What are the things that has to be done from the PS side(like should i consume or provide service operation?)?
3.What are the things that has to be done from blackboard side?
Thanks in advance.

Comparision of DMZ options 2.1 and 2.2 in R12

Hi All,
We are contemplating to implement DMZ in our R12 environment and we are evaluating the option 2.1 and option 2.2 in the R12 DMZ note, could any one tell me the pros & cons of these two options.
Thanks

The only difference is that 2.2 does not use a reverse proxy, while 2.1 does. A reverse proxy is recommended from a security perspective.
HTH
Srini

R12 DMZ server services

What EBS services need to be running on the EBS DMZ application server?
EBS: 12.1.2 (Internal: single DB node + on apps node; external: one-apps node).

Please refer to (Oracle E-Business Suite R12 Configuration in a DMZ [ID 380490.1]).
Thanks,
Hussein

DMZ in R12

Similar Messages

Maybe you are looking for