Flex - AMFPHP - Transparent Web Proxy

Hello,
I developed a Flex3 application with AMFPHP to communicate
with PHP. At home no problem everything work but when I try to my
office I have this type of error sometime :
code:
Channel.Call.Failed
Message:
error
Detail:
NetConnection.Call.Failed: HTTP: Failed
I checked with the administor and this is an error with the
transparent web proxy. (I work under MacOsX)
I don't know if I can specify the proxy configuration
somewhere. Please find below my service configuration file :
<services-config>
<services>
<service id="amfphp-flashremoting-service"
class="flex.messaging.services.RemotingService"
messageTypes="flex.messaging.messages.RemotingMessage">
<destination id="amfphp">
<channels>
<channel ref="my-amfphp"/>
</channels>
<properties>
<source>*</source>
</properties>
</destination>
</service>
</services>
<channels>
<channel-definition id="my-amfphp"
class="mx.messaging.channels.AMFChannel">
<endpoint uri="
http://www..nouveausens.fr/Services/gateway.php"
class="flex.messaging.endpoints.AMFEndpoint"/>
</channel-definition>
</channels>
</services-config>
Someone had this problem ? or can help me ?
Thanks a lot,
Marc

maybe because
http://www..nouveausens.fr/Services/gateway.php
has 2 points after
http://www. :-)

Similar Messages

Flex 3 - AMFPHP - Transparent Web Proxy

Hello,
I developed a Flex3 application with AMFPHP to communicate
with PHP. At home no problem everything work but when I try to my
office I have this type of error sometime :
code:
Channel.Call.Failed
Message:
error
Detail:
NetConnection.Call.Failed: HTTP: Failed
I checked with the administor and this is an error with the
transparent web proxy. (I work under MacOsX)
I don't know if I can specify the proxy configuration
somewhere. Please find below my service configuration file :
<services-config>
<services>
<service id="amfphp-flashremoting-service"
class="flex.messaging.services.RemotingService"
messageTypes="flex.messaging.messages.RemotingMessage">
<destination id="amfphp">
<channels>
<channel ref="my-amfphp"/>
</channels>
<properties>
<source>*</source>
</properties>
</destination>
</service>
</services>
<channels>
<channel-definition id="my-amfphp"
class="mx.messaging.channels.AMFChannel">
<endpoint uri="
http://www..nouveausens.fr/Services/gateway.php"
class="flex.messaging.endpoints.AMFEndpoint"/>
</channel-definition>
</channels>
</services-config>
Someone had this problem ? or can help me ?
Thanks a lot,
Marc

maybe because
http://www..nouveausens.fr/Services/gateway.php
has 2 points after
http://www. :-)

HTTP failed - Transparent web proxy

Hello,
I developped an application with Flex 3 B1, it works at my
home but when I tried it in my office I have this type of message
sometime
code:
Channel.Call.Failed
Message:
error
Detail:
NetConnection.Call.Failed: HTTP: Failed
Sometime the application works, sometime not... I think this
is a web proxy problem. I called the person in charge of this and
for him some program cannot works with a transparent proxy.
Somebody have the same problem ?
Best regards,
Marc

Thank you Ken for you whitepaper.
I read the configuration and it is mentioned that the IronPort and clients are not on the same interface (segment). I also read that the IronPort Appliance and clients must be on the same ASA interface to avoid passing trough the ASA itself again.
Which of these two is right ?
In my architecture I'm not able to set the IronPort on the same interface as clients (2 differents interfaces and subnet).
I attached a document explaining the architecture
My bad I saw that the WSA and clients are on the same ASA interface in the inside networks. Still, in my configuration is it possible to enable WCCP ?
I also so that it is possible to implement a route-map which perfrom PBR by changing the next-hop ip for specific traffic but this function is not avalaible on ASA as i heard. Can anyone confirm that ?
Ce message a été modifié par: Maxime GERGES

Cisco WSA : Is it possible to use web proxy in transparent mode without WCCP router ?

Hello !
I would like to use Cisco WSA as a web proxy in a transparent way (without any configuration in client's web browsers) but i don't have a WCCP router. So, is it possible ?
If yes, how to do this ?
Thank you,
Stephane Walker

Hi Stephane
The only alternative to WCCP is PBR (Policy Based Routing). With a simple configuration on the router you can redirect traffic defined as interesting by access list to WSA. On the WSA you need to configure transparent mode (Security Services -> Web Proxy -> Edit Settings -> Proxy Mode: Transparent). You also need to assure that proxy is listening on the port 80 and that HTTPS proxy is enabled (on port 443) if you want to redirect the HTTPS traffic as well.
Sample configuration for Cisco router
access-list 110 permit tcp any any eq www
route-map proxy-redirect permit 10
match ip address 110
set ip next-hop xxx.xxx.xxx.xxx
interface ethernet0/1
ip policy route-map proxy-redirect
xxx.xxx.xxx.xxx is the proxy IP in such case and access-list 110 defines web traffic (HTTP TCP/80) as interesting.
The biggest disadvantage of such solution is lack of failure detection. If the proxy will go down for some reason router will keep redirecting the traffic causing internet access outage.
Routers other than Cisco equipment should also have an option to configure policy based routing.
/Artur
Ps. It's not possible to place the WSA in-line between clients and the internet.

Caching issue in Web proxy 4.0.13

I have the following settings in the obj.conf but i still see my http requests go back to the origin server. I have the Web proxy installed on Solaris 10
# more obj.conf
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
Init fn="flex-init" access="$accesslog" format.access="%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvh
drs.clf-status% %Req->srvhdrs.content-length% \"%Req->headers.referer%\" \"%Req->headers.user-agent%\" \"%Req->headers.cookie%\" %Req->reqpb.method
% %Req->reqpb.uri% %Req->reqpb.query% \"%Req->reqpb.protocol%\" %vsid% %Req->headers.x-forwarded-for%"
Init fn="init-proxy" timeout="300" timeout-2="15"
Init profiling="on" fn="stats-init"
<Object name="default">
AuthTrans fn="match-browser" browser=".*MSIE.*" ssl-unclean-shutdown="true"
NameTrans fn="assign-name" name="stats-xml" from="(/stats-xml|/stats-xml/.*)"
PathCheck fn="url-check"
ObjectType fn="block-ip"
ObjectType fn="cache-enable" cache-auth="1"
ObjectType fn="cache-setting" max-uncheck="86400"
Service fn="proxy-retrieve"
AddLog fn="flex-log" name="access"
Route fn="set-origin-server" server="origin.server.com" sticky-cookie="JSESSIONID" sticky-param="jsessionid" route-hdr="Proxy-jroute" route-cooki
e="JROUTE" rewrite-host="false" rewrite-location="true" rewrite-content-location="true"
</Object>
<Object name="file">
PathCheck fn="unix-uri-clean"
PathCheck fn="find-index" index-names="index.html"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service fn="send-file"
</Object>
<Object ppath="ftp://.*">
ObjectType fn="cache-enable" query-maxlen="10" log-report="off"
ObjectType fn="cache-setting" lm-factor="0.10" max-uncheck="7200"
Service fn="proxy-retrieve"
</Object>
<Object ppath="http://.*">
ObjectType fn="cache-enable" query-maxlen="32" log-report="off" min-size="0" max-size="512000"
ObjectType fn="cache-setting" lm-factor="1.00" max-uncheck="1209600"
Service fn="proxy-retrieve" method="*"
Route fn="set-origin-server" server="origin.server.com" sticky-cookie="JSESSIONID" sticky-param="jsessionid" route-hdr="Proxy-jroute" route-cooki
e="JROUTE" rewrite-host="false" rewrite-location="true" rewrite-content-location="true"
</Object>
<Object ppath="https://.*">
Service fn="proxy-retrieve"
</Object>
<Object ppath="gopher://.*">
ObjectType fn="cache-enable" query-maxlen="10" log-report="off"
ObjectType fn="cache-setting" lm-factor="0.10" max-uncheck="7200"
Service fn="proxy-retrieve"
</Object>
<Object ppath="connect://.*:443">
Service fn="connect" method="CONNECT"
</Object>
<Object ppath="connect://.*:563">
Service fn="connect" method="CONNECT"
</Object>
<Object name="stats-xml">
Service fn="stats-xml"
</Object>looks like i am missing something obvious but i can't figure it out..suggestions/thoughts would be appreciated.
thanks
JB
Edited by: hello343 on Feb 26, 2010 9:18 PM
more info:
I have the proxy running on port 8000. when i make request via the browser, i cannot get those pages to show up in the url database - these are the lines form the error log
[26/Feb/2010:16:11:28] fine ( 9416): for host 192.168.1.153 trying to GET /licensees/licensee1/images/IRParents/layout/Nemours_logo.png, set-origin-server reports: using server origin.server.com:80
[26/Feb/2010:16:11:28] fine ( 9416): for host 192.168.1.153 trying to GET /licensees/licensee1/images/IRParents/layout/Nemours_logo.png, service-http reports: attempting to contact origin.server.com:80
[26/Feb/2010:16:11:28] fine ( 9416): for host 192.168.1.153 trying to GET /licensees/licensee1/images/IRParents/layout/Nemours_logo.png, reusing existing persistent connection to origin.server.com:80
[26/Feb/2010:16:11:54] fine ( 9416): GC: partition index : 0, changed blocks : 0
[26/Feb/2010:16:12:39] fine ( 9416): GC: partition index : 0, changed blocks : 0
[26/Feb/2010:16:13:24] fine ( 9416): GC: partition index : 0, changed blocks : 0
[26/Feb/2010:16:14:09] fine ( 9416): GC: partition index : 0, changed blocks : 0
[26/Feb/2010:16:14:54] fine ( 9416): GC: partition index : 0, changed blocks : 0but i did get the url database to populate when i setup a "cache batch update" but even those urls, are not served from the cache when i try to access them via the browser - I am using Firefox - seems like when i make the request via the browser, the cache is not being used.
Edited by: hello343 on Feb 26, 2010 9:29 PM
Edited by: hello343 on Feb 26, 2010 9:33 PM

i was missing the reverse mapping - that fixed the issue.

Socks services errors in web proxy server

Using SunOne web proxy server 3.6+sp1, the socks service frequently out of service. Sometime its process is still alive , but can't response the client request; sometime the process is gone! The following is the errors log:
[25/Oct/2002:11:18:06] 8269 debug: io_loop: killing tunnel after rollover, lastactivity == 1966619898,PR_IntervalNow says 2026622109
[25/Oct/2002:11:20:31] 8269 debug: io_loop: killing tunnel after rollover, lastactivity == 1981101717,PR_IntervalNow says 2041102282
[25/Oct/2002:11:20:48] 754 error: unknown request type 0x47 from 10.160.8.159:30 83
[25/Oct/2002:11:41:07] 14946 debug: ACCEPT RETURNED NULL! io_total = 63 dead =-1
Any infomation is welcome!

what's the software name of socks? how i can download it?
you mean it's not good?
And the following is the issue in detail:
The socks service frequently out of service. Sometime its process is still alive , but
can't response the client request; sometime the process is gone.It occurs once a
day, and after restart, its go away. And the last issue about must reconnect the gameroom
is gone now, and was identified as the network's problem.
mangus.conf:
#ServerRoot /iPlanet/proxy/proxy-proxy-proxy
ServerName proxy
ServerID proxy-proxy
Address 10.160.1.14
Port 8080
User root
LoadObjects obj.conf
RootObject default
ErrorLog /iPlanet/proxy/proxy-proxy-proxy/logs/errors
LDAPConnPool 5
SearchDepth 30
Dyngroups ON
SearchTimeLimit 30
BindTimeLimit 15
LdapCheckUp 30
CertificateChecking OFF
PidLog /iPlanet/proxy/proxy-proxy-proxy/logs/pid
MaxProcs 1024
ProcessLife 128
DNS on
Security off
Ciphers rc4,rc4export,+rc2,+rc2export,+des,+desede3
SSL3Ciphers
rsa_rc4_128_md5,rsa_3des_sha,+rsa_des_sha,+rsa_rc4_40_md5,+rsa_rc2_40
md5,-rsanull_md5
ACLFile /iPlanet/proxy/httpacl/generated.proxy-proxy-proxy.acl
obj.conf
# Netscape Communications Corporation - obj.conf
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
Init funcs="icp-init,icp-route" shlib="/iPlanet/proxy/plugins/icp/icp.so" fn="load-
modules"
Init funcs="pa-init-proxy-array,pa-init-parent-array,pa-enforce-internal-routing,pa-set-
parent-route,pa-set-member-status"
shlib="/iPlanet/proxy/plugins/parray/parray.so" fn="load-modules"
Init fn="load-types" mime-types="mime.types"
Init access="/iPlanet/proxy/proxy-proxy-proxy/logs/access" format.access="%
Ses->client.ip% - %Req->vars.pauth-user% [%SYSDATE%] \"%Req->reqpb.proxy-
request%\" %Req->srvhdrs.clf-status% %Req->vars.p2c-cl%" fn="flex-init"
Init fn="init-proxy" timeout="300" timeout-2="15"
Init fn="init-dns-cache" status="on" dir="/tmp" semas="4" size="4096"
expire="28800"
Init fn="init-cache" status="on" ndirs="256" dir="/iPlanet/proxy/cache"
Init fn="init-partition" status="on" name="p1" dir="/iPlanet/proxy/cache/p1" max-
size="8000" min-avail="5"
Init status="on" dir="/iPlanet/proxy/cache/p2" name="p2" max-size="8000" min-
avail="5" fn="init-partition"
Init status="on" dir="/iPlanet/proxy/cache/p3" name="p3" max-size="8000" min-
avail="5" fn="init-partition"
Init status="on" dir="/iPlanet/proxy/cache/p4" name="p4" max-size="8000" min-
avail="5" fn="init-partition"
Init status="on" dir="/iPlanet/proxy/cache/p5" name="p5" max-size="8000" min-
avail="5" fn="init-partition"
Init status="on" dir="/iPlanet/proxy/cache/p6" name="p6" max-size="8000" min-
avail="5" fn="init-partition"
Init status="on" dir="/iPlanet/proxy/cache/p7" name="p7" max-size="8000" min-
avail="5" fn="init-partition"
Init status="on" dir="/iPlanet/proxy/cache/p8" name="p8" max-size="8000" min-
avail="5" fn="init-partition"
Init fn="init-urldb" status="on" dir="/iPlanet/proxy/cache/urldb"
Init fn="init-batch-update" status="off" dir="/tmp" conf-file="bu.conf"
Init status="on" dir="/tmp" hash-size="17191" table-size="85955" expire="3600"
fn="init-pauth-cache"
Init config_file="icp.conf" status="off" fn="icp-init"
Init set-status-fn="pa-set-member-status" file="/iPlanet/proxy/proxy-proxy-
proxy/config/parray.pat" status="off" fn="pa-init-proxy-array"
Init set-status-fn="pa-set-member-status" file="/iPlanet/proxy/proxy-proxy-
proxy/config/parent.pat" status="off" fn="pa-init-parent-array"
<Object name="default">
NameTrans fn="map" from="file:" to="ftp:" cont="yes"
NameTrans fn="pfx2dir" from="/ns-icons" dir="/iPlanet/proxy/ns-icons" name="file"
NameTrans fn="pac-map" from="/" to="/iPlanet/proxy/proxy-proxy-
proxy/pac/proxy.pac" name="file"
PathCheck fn="url-check"
PathCheck fn="check-acl" acl="proxy-proxy-proxy_formgen-READ-ACL_deny-
5619"
PathCheck fn="check-acl" acl="proxy-proxy-proxy_formgen-WRITE-ACL_deny-
5619"
Service fn="deny-service"
AddLog fn="flex-log" name="access" iponly="1"
AddLog fn="urldb-record"
</Object>
<Object name="file">
PathCheck fn="unix-uri-clean"
PathCheck fn="find-index" index-names="index.html"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service fn="send-file"
</Object>
<Object ppath="ftp://.*">
ObjectType fn="cache-enable"
ObjectType fn="cache-setting" max-uncheck="21600"
Service fn="proxy-retrieve"
</Object>
<Object ppath="http://.*">
ObjectType fn="cache-enable"
ObjectType fn="cache-setting" max-uncheck="7200" lm-factor="0.100"
Service fn="proxy-retrieve"
</Object>
<Object ppath="https://.*">
Service fn="proxy-retrieve"
</Object>
<Object ppath="gopher://.*">
ObjectType fn="cache-enable"
ObjectType fn="cache-setting" max-uncheck="14400"
Service fn="proxy-retrieve"
</Object>
<Object ppath="connect://.*:443">
Service fn="connect" method="CONNECT"
</Object>
<Object ppath="connect://.*:563">
Service fn="connect" method="CONNECT"
</Object>
socks5.conf
# Netscape Communications Corporation - socks5.conf
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
auth 10.160.0.0/255.255.224.0 - -
auth - - u
permit u,- - - - - - -
set SOCKS5_BINDPORT 1080
set SOCKS5_LOGFILE /iPlanet/proxy/proxy-proxy-proxy/logs/socks5.log
set SOCKS5_DEBUG 1
set SOCKS5_WORKERS 100
set SOCKS5_ACCEPTS 5
set SOCKS5_NOIDENT
set SOCKS5_NOREVERSEMAP
socks5.log
[19/Nov/2002:11:31:14] 830 debug: request from 10.162.169.176:2305
[19/Nov/2002:11:31:15] 830 debug: auth: userpass
[19/Nov/2002:11:31:15] 830 debug: authentication type 2 successful for hs
[19/Nov/2002:11:31:15] 830 debug: request 1 to jason314.3322.org:21
[19/Nov/2002:11:31:15] 830 request: hs 5 connect: ok 10.162.169.176:2305 ->
jason314.3322.org:21
[19/Nov/2002:11:31:15] 831 debug: request from 10.162.169.176:2306
[19/Nov/2002:11:31:15] 831 debug: auth: userpass
[19/Nov/2002:11:31:15] 831 debug: authentication type 2 successful for hs
[19/Nov/2002:11:31:15] 831 debug: request 1 to jason314.3322.org:21
[19/Nov/2002:11:31:15] 831 request: hs 5 connect: ok 10.162.169.176:2306 ->
jason314.3322.org:21
access
10.160.115.222 - scy-tl [19/Nov/2002:11:32:33 +0800] "GET
http://www.eefoo.com/c
ommunity/images/bbs0gg.gif HTTP/1.0" 200 146
10.160.115.79 - whh-tl [19/Nov/2002:11:32:33 +0800] "GET
http://fayhoo.com/image
/blank HTTP/1.0" 404 276
10.160.19.151 - lhb [19/Nov/2002:11:32:33 +0800] "POST HTTP://rich-bj.stockstar.
com:8892/1 HTTP/1.0" 200 81
10.160.160.130 - gsp-ld [19/Nov/2002:11:32:33 +0800] "GET
http://images.sohu.com
/cs/button/sony/12060.swf?clickthru=http://goto.sohu.com/goto.php3?code=sony-
sh2
40-fr12050 HTTP/1.0" 200 8302
10.160.23.141 - wyn [19/Nov/2002:11:32:33 +0800] "POST HTTP://rich-
bj.stockstar.
com:8891/1 HTTP/1.0" 200 81
10.161.159.40 - - [19/Nov/2002:11:32:33 +0800] "PUT http://204.177.92.204/w/getc
lientid?srv=china_sex&ver=0,0,0,62 HTTP/1.0" 407 271
10.160.17.108 - weizc [19/Nov/2002:11:32:33 +0800] "GET
http://www.guosen.com/cg
i-bin/RHStockGraphics.dll?GetTLine?code=10000001&cx=150&cy=70&am=0
HTTP/1.0" 200
1004
10.161.130.3 - czy-ykj [19/Nov/2002:11:32:34 +0800] "GET http://ad4.sina.com.cn/
btn/dbtel-tlhp.swf HTTP/1.0" 304 -
10.161.159.40 - - [19/Nov/2002:11:32:34 +0800] "PUT http://204.177.92.204/w/getc
lientid?srv=china_sex&ver=0,0,0,62 HTTP/1.0" 407 271
errors
[19/Nov/2002:11:33:13] failure: for host 10.160.80.148 trying to GET http://myjh
xp.com/bbs/forums.cgi?forum=4, retrieve-exit-routine reports: proxy retrieve fai
led: Proxy server's network connection was refused by the server: myjhxp.com.
The server may not be accepting connections or may be busy. Try connecting
agai
n later.
[19/Nov/2002:11:33:13] warning: last-modified in future (not caching): Tue Nov 1
9 03:51:01 2002
[19/Nov/2002:11:33:13] failure: for host 10.160.80.148 trying to GET http://myjh
xp.com/bbs/forums.cgi?forum=4, retrieve-exit-routine reports: proxy retrieve fai
led: Proxy server's network connection was refused by the server: myjhxp.com.
The server may not be accepting connections or may be busy. Try connecting
agai
n later.
[19/Nov/2002:11:33:13] failure: for host 10.162.101.73 trying to GET ftp://202.1
15.144.37/software/special/WinPE-9down.rar, retrieve-exit-routine reports: proxy
retrieve failed: Proxy server's network connection was refused by the server:
202.115.144.37. The server may not be accepting connections or may be busy. Tr
y connecting again later.
[19/Nov/2002:11:33:13] warning: last-modified in future (not caching): Tue Nov 1
9 18:21:00 2002
[19/Nov/2002:11:33:13] warning: last-modified in future (not caching): Tue Nov 1
9 03:51:01 2002
The logs is so large, i only can give you some of them typically.
and the types of log's record when problem occurs i have supplied to you, also i
pasted here
[25/Oct/2002:11:18:06] 8269 debug: io_loop: killing tunnel after rollover, lastactivity
== 1966619898,PR_IntervalNow says 2026622109
[25/Oct/2002:11:20:31] 8269 debug: io_loop: killing tunnel after rollover, lastactivity
== 1981101717,PR_IntervalNow says 2041102282
[25/Oct/2002:11:20:48] 754 error: unknown request type 0x47 from
10.160.8.159:30 83
[25/Oct/2002:11:41:07] 14946 debug: ACCEPT RETURNED NULL! io_total = 63
dead =-1
------------------------------------------------------------------

Transparent TCP Proxy

Has anyone used a transparent TCP Proxy solution as a performance enhancement tool (via caching or buffering)?
Does Cisco has anything? WAAS looks the closest but it more like a point to point solution (wan acceleration). I am looking after something like a PROXY (device in the middle).
Thanks

Hello Tivig,
look for WCCPv2 it allows one or more routers to redirect to a group of web caches
It is supported also on multilayer switches and it is not limited to WEB traffic
see
http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/31sga/configuration/guide/wccp.html
Hope to help
Giuseppe

WLC - Redirect Traffic to Web Proxy

Hi,
We need to create Guest WLAN on WLC 5508 which will be used for internet access only.
My questions are:
1. Is it possible to use our external web proxy server to authenticate users?
2. Can we also forward all traffic to the external web proxy to filter the websites that can be accessed (without configuring it on the browser)?
3. Can this be achieved using the L3 webauth?
Our topology:
WLC -- Switch -- ASA Firewall -- Internet -- External Web Proxy
We are using WLC as DHCP server for Guest WLAN with ASA Firewall as the gateway.
Any inputs and ideas are appreciated.
Many thanks.

Otiynomed,
I have come across this problem recently as well and ended up using an Internal DHCP server with Option 252 configured which will point Users towards our proxy for authentication. Unfortunately it isn't a perfect setup as the following issues occurred:
If using Option 252, make sure the wpad file has an internal re-direction for the virtual interface of your anchor controller to allow web-auth redirection otherwise devices will try to get to that address externally
Some devices don't support Option 252
You have to set the devices to 'auto proxy discover' whether Windows or Apple
If using devices running less than iOS 6 then embedding authentication in the proxy settings upon initial connection will still end up with users being prompted for HTTPS authentication constantly. HTTP traffic will work fine however.
Android devices don't like Option 252 and most of the applications don't work with authentication via a proxy except browsing
Alternatively, use web-auth but link it to an LDAP server or RADIUS server for authentication and use a transparent proxy. Problem solved

Web Proxy Server - Cache Windows Updates

I''ve just installed Sun Java System Web Proxy Server 4.0.9 on our Network, but I'm having a hard time getting it to cache Windows updates.
Any help?

And here is the obj.conf file:
I would like it to cache as most as possible, inlculding windows updates.
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
# Use only forward slashes in pathnames--backslashes can cause
# problems. See the documentation for more information.
Init fn="init-proxy" timeout="300" timeout-2="15"
Init profiling="on" fn="stats-init"
Init byteranges="On" fn="tune-cache"
Init access="$accesslog" format.access="%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status% %Req->vars.p2c-cl% %Req->vars.remote-status% %Req->vars.r2p-cl% %Req->headers.content-length% %Req->vars.p2r-cl% %Req->vars.c2p-hl% %Req->vars.p2c-hl% %Req->vars.p2r-hl% %Req->vars.r2p-hl% %Req->vars.xfer-time% %Req->vars.cch-status%" no-format-str.access="yes" fn="flex-init"
Init cache-size="1024" expire="3600" negative-dns-cache="yes" fn="host-dns-cache-init"
<Object name="default">
AuthTrans fn="match-browser" browser=".*MSIE.*" ssl-unclean-shutdown="true"
NameTrans fn="assign-name" name="stats-xml" from="(/stats-xml|/stats-xml/.*)"
PathCheck fn="url-check"
ObjectType fn="block-ip"
ObjectType fn="cache-enable" cache-auth="1" min-size="0" max-size="512000" cache-local="1"
ObjectType fn="cache-setting" term-percent="100"
Service fn="proxy-retrieve"
AddLog fn="flex-log" name="access"
</Object>
<Object name="file">
PathCheck fn="nt-uri-clean"
PathCheck fn="find-index" index-names="index.html"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
ObjectType fn="cache-enable"
Service fn="send-file"
</Object>
<Object ppath="ftp://.*">
ObjectType fn="cache-enable" query-maxlen="10" log-report="off"
ObjectType fn="cache-setting" lm-factor="0.10" max-uncheck="43200"
Service fn="proxy-retrieve"
</Object>
<Object ppath="http://.*">
ObjectType fn="cache-enable" log-report="off" min-size="0" max-size="512000" cache-auth="1"
ObjectType fn="cache-setting" lm-factor="0.00" max-uncheck="43200" term-percent="100"
Service fn="proxy-retrieve" method="*"
</Object>
<Object ppath="https://.*">
Service fn="proxy-retrieve"
</Object>
<Object ppath="gopher://.*">
ObjectType fn="cache-enable" query-maxlen="10" log-report="off" cache-auth="1" min-size="0" max-size="512000"
ObjectType fn="cache-setting" lm-factor="0.10" max-uncheck="43200"
Service fn="proxy-retrieve"
</Object>
<Object ppath="connect://.*:443">
ObjectType fn="cache-enable" cache-auth="1" min-size="0" max-size="512000"
Service fn="connect" method="CONNECT"
</Object>
<Object ppath="connect://.*:563">
ObjectType fn="cache-enable" cache-auth="1" min-size="0"
ObjectType fn="cache-setting" term-percent="100"
Service fn="connect" method="CONNECT"
</Object>
<Object name="stats-xml">
Service fn="stats-xml"
</Object>

Steps to enable Web Proxy for https

I have an S160 WSA and want to enable the Web service for http and https. I am using transparent mode with WCCP.
This is part of the router configuration:
ACL:
access-list 110 permit tcp 192.168.80.0 0.0.7.255 any eq 80
access-list 120 permit tcp 192.168.80.0 0.0.7.255 any eq 443
ip wccp 97 redirect-list 110
ip wccp 98 redirect-list 120
interface FastEthernet0/0.380
ip wccp 97 redirect in
ip wccp 98 redirect in
It is the same configuration for http and for https, but only http traffic is working. When I see the logs in the WSA, it looks like accepted connections for https.
In Security Services -> Web Proxy it is enabled, when I put the port 443, I get an https error in the end user laptop; when I dont, it keeps trying and I get a timeout.
I tried enabling https proxy but some sites (as gmail), wont work with self-generated certificates.
Would you please, list me the steps to enable Proxy services for https.
Thanks!!!
Sergio L.

Hi Sergio,
When WSA is configured as transparent proxy, it also accepts explitcit connections. So in order to test HTTPS proxy, you can configure client browser to explicitly use WSA as proxy and see if it is working before testing in transparent mode.
When WSA is used as HTTPS proxy, it uses its self-generated certificate to encrypt the connection between itself and the client browser. Since this certificate is not trusted by browser, it'll throw SSL certificate error when connecting via WSA. In order to get rid of this error, download the self-generated certificate from WSA and install it in your browser as a trusted certificate. That should resolve SSL issue with gmail also.
Hope this helps.
Thanks,
Chetan

Mac Adobe Flash Player not supporting Web Proxy Authentication

Anyone else got an enterprise network where you use web proxies with web authentication and no traffic allowed out except through the proxies?
You may need to be in the UK for this, but try accessing BBC iPlayer content - http://www.bbc.co.uk/iplayer and you should discover that the content won't play. the error says "This content doesn't seem to be working. Try again later.". The content will never work as the Mac version of Flash (currently 10.1.53.64) is not able to respond to web proxy authentication requests. The BBC use various streaming server which are randomly selected when a user starts a stream and they have no DNS. Just IP addresses. They don't publish a list for security reasons. So it is almost impossible to exempt all their servers from authentication.
I've logged a bug with Adobe. If you have this issue too, please add a comment and vote so that they can begin to grasp the impact of this problem:
https://bugs.adobe.com/jira/browse/FP-5161

I have the same issues in Australia trying to access flash content from the ABC website. The strange thing is the content will play if your leave the browser open for 5min.
After several packet data captures we identified that it has to do with the amount of time it takes the Mac timeout from the proxy before it plays the video content.
No solution yet.

Error while creating web proxy

Hi,
I've created a web service in ProjectsManagement workspace (jws). Now, I'm trying to invoke that service from ProjectsFinancialsEss workspace (jws) by creating a web-proxy. However, I'm getting the following error when I'm creating the web-proxy:
oracle.jdeveloper.webservices.model.WebServiceException: Error creating model from wsdl
"file:/ade/amrmishr_amr_feb12_03_v2/fusionapps/prj/components/projectsManagement/resourceManagement/reporting/model/src/oracle/apps/projects/resourceManagement/reporting/model/UpdateResourceUtilizationDataService.wsdl": no !/ in spec
Please find the jDev stack trace below:
oracle.jdeveloper.webservices.model.WebServiceException: Error creating model from wsdl "file:/ade/amrmishr_amr_feb12_03_v2/fusionapps/prj/components/projectsManagement/resourceManagement/reporting/model/src/oracle/apps/projects/resourceManagement/reporting/model/UpdateResourceUtilizationDataService.wsdl": no !/ in spec
     at oracle.jdeveloper.webservices.model.java.JavaWebService.createPortTypes(JavaWebService.java:1635)
     at oracle.jdeveloper.webservices.model.WebService.createServiceFromWSDL(WebService.java:2846)
     at oracle.jdeveloper.webservices.model.WebService.createServiceFromWSDL(WebService.java:2611)
     at oracle.jdeveloper.webservices.model.java.JavaWebService.<init>(JavaWebService.java:509)
     at oracle.jdeveloper.webservices.model.java.JavaWebService.<init>(JavaWebService.java:461)
     at oracle.jdeveloper.webservices.model.proxy.WebServiceProxy$ProxyJavaWebService.<init>(WebServiceProxy.java:2268)
     at oracle.jdeveloper.webservices.model.proxy.WebServiceProxy.updateServiceModel(WebServiceProxy.java:1701)
     at oracle.jdeveloper.webservices.model.proxy.WebServiceProxy.setDescription(WebServiceProxy.java:525)
     at oracle.jdevimpl.webservices.wizard.jaxrpc.proxy.ProxyJaxWsSpecifyWSDLPanel.setDescription(ProxyJaxWsSpecifyWSDLPanel.java:238)
     at oracle.jdevimpl.webservices.wizard.jaxrpc.common.SpecifyWsdlPanel.buildModel(SpecifyWsdlPanel.java:1109)
     at oracle.jdevimpl.webservices.wizard.jaxrpc.common.SpecifyWsdlPanel$5.run(SpecifyWsdlPanel.java:661)
     at oracle.ide.dialogs.ProgressBar.run(ProgressBar.java:655)
     at java.lang.Thread.run(Thread.java:619)
Caused by: oracle.jdeveloper.webservices.tools.WsdlValidationException: Error creating model from wsdl "file:/ade/amrmishr_amr_feb12_03_v2/fusionapps/prj/components/projectsManagement/resourceManagement/reporting/model/src/oracle/apps/projects/resourceManagement/reporting/model/UpdateResourceUtilizationDataService.wsdl": no !/ in spec
     at oracle.jdevimpl.webservices.tools.wsa.WsaAdaptor.newWsdlValidationException(WsaAdaptor.java:825)
     at oracle.jdevimpl.webservices.tools.wsa.WsaAdaptor.getSeiInfo(WsaAdaptor.java:515)
     at oracle.jdeveloper.webservices.tools.WebServiceTools.getSeiInfo(WebServiceTools.java:523)
     at oracle.jdeveloper.webservices.model.java.JavaWebService.getSeiInfo(JavaWebService.java:1741)
     at oracle.jdeveloper.webservices.model.java.JavaWebService.createPortTypes(JavaWebService.java:1496)
     ... 12 more
Caused by: oracle.j2ee.ws.common.tools.api.ValidationException: Error creating model from wsdl "file:/ade/amrmishr_amr_feb12_03_v2/fusionapps/prj/components/projectsManagement/resourceManagement/reporting/model/src/oracle/apps/projects/resourceManagement/reporting/model/UpdateResourceUtilizationDataService.wsdl": no !/ in spec
     at oracle.j2ee.ws.tools.wsa.jaxws.JaxwsWsdlToJavaTool.getJAXWSModel(JaxwsWsdlToJavaTool.java:679)
     at oracle.j2ee.ws.tools.wsa.WsdlToJavaTool.createJAXWSModel(WsdlToJavaTool.java:478)
     at oracle.j2ee.ws.tools.wsa.Util.getJaxWsSeiInfo(Util.java:1360)
     at sun.reflect.GeneratedMethodAccessor1137.invoke(Unknown Source)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at oracle.jdevimpl.webservices.tools.wsa.Assembler$2$1.invoke(Assembler.java:218)
     at $Proxy90.getJaxWsSeiInfo(Unknown Source)
     at oracle.jdevimpl.webservices.tools.wsa.WsaAdaptor.getSeiInfo(WsaAdaptor.java:505)
     ... 15 more
Caused by: oracle.j2ee.ws.common.tools.api.ValidationException: no !/ in spec
     at oracle.j2ee.ws.tools.wsa.SchemaTool.genValueTypes(SchemaTool.java:188)
     at oracle.j2ee.ws.tools.wsa.jaxws.JaxwsWsdlToJavaTool.getJAXWSModel(JaxwsWsdlToJavaTool.java:662)
     ... 23 more
Caused by: oracle.j2ee.ws.common.databinding.common.spi.DatabindingException: no !/ in spec
     at oracle.j2ee.ws.common.tools.databinding.jaxb20.JAXB20TypeGenerator.generateJavaTypes(JAXB20TypeGenerator.java:124)
     at oracle.j2ee.ws.tools.wsa.SchemaTool.genValueTypes(SchemaTool.java:186)
     ... 24 more
Any help on this will be greatly appreciated.
Thanks and regards,
Amrit

Look like you hit Bug 11838224 which should be fixed in 11.1.2.x
If you can't update you can use the following workaround:
@ Details of Workaround
@ =====================
@ Deploy the model project and build the proxy from the wsdl provided from the
@ WLS 10.3.x.0 server.
Timo

'-1' bytes in log file - iPlanet Web Proxy Server 3.6

I'm running iPlanet Web Proxy Server 3.6, and getting strange results in log file using extended format. Where the number of bytes should be (c1 - the content-length sent to the client by the proxy).
I regularly get a '-1' instead of the number of bytes. Anyone tell me where this is coming from and how to stop it?

Someone in the Web Proxy Server forum might. I guess you accidentally posted in the Web Server forum. However, if your question is time- or business-critical, you should probably contact Sun directly: http://www.sun.com/support

Integration of Adobe Flex with SAP Web Dynpro ABAP

I am new to adobe flex development. i am following a tutorial prepared by
Mr. Karthikeyan Venkatesan (Infosys Technologies Limited) Integration of Adobe Flex with SAP Web Dynpro ABAP-for ABAPers
He used flex 3 to develop the flex application. i am using flex 4 downloaded from adobe(At a time Build release I used low version only 3.5). I followed all the steps. At a time of Run the data was not came.
How to fetch the data?
Please Guide how to proceed.

Hi Laxmikanth,
For Adebo Flex help..
Please go through Thomas tutorial..
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/10989ef6-968c-2b10-50a9-eb34a5267163&overridelayout=true
and ...
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/307b434f-ff32-2b10-e885-991247270480?quicklink=index&overridelayout=true
Hope it might helps you
Thanks,
Kris.

Multiple sites on CRM-ISA web proxy IIS

Hello,
We're upgrading to CRM v6 (2007), with Internet Sales / Web Channel B2B in scope. As part of the system landscape, we have a Windows server running IIS acting as a web proxy.
Now, the question is, can we share this web proxy so that it works for multiple sites?
We would like to put the Dev and the QA CRM systems to both use the same web proxy, which would have two sites configured in it.
Has anyone done this before? Success or fail? I could not find any docu from SAP telling whether or not this would work.
Also are there any requirements for the version of the IIS?
We're currently on Win2k / IIS v5 but are going to Win2003 / IIS v6.
Thanks and Regards,
Rasmus

I figured it out:
You need to change which URL the site responds to under the 'Aliases' section.
I haven't seen this anywhere else, so I hope this will help someone along the line...

Flex - AMFPHP - Transparent Web Proxy

Similar Messages

Maybe you are looking for