Https front end and http backend

Hi there....I am having a small issue....I have a web app that is https based....I have installed the cert on the CSS, and DNS for this app points to the VIP....the client is wanting to have an https front end, and then load balance in http to the backend servers....the issue I am running into is that this only works if I have an active port 80 rule on that same VIP....if I suspend the port 80 rule and only leave the port 443 rule active on that VIP, it doesn't work....please see appropriate config portions below....Thanks in advance!
Sandeep
ANy suggestions? I have been trying this for a couple of days now...it works fine if the backend sessions are also https, but the client has changed their requirement....
ssl-proxy-list SSL1
ssl-server 1
ssl-server 1 rsakey app1-test
ssl-server 1 rsacert app1-test
ssl-server 1 vip address 10.19.55.10
ssl-server 1 cipher rsa-with-rc4-128-md5 10.19.55.10 81
backend-server 1
backend-server 1 port 81
backend-server 1 server-ip 10.19.55.132
backend-server 1 ip address 10.19.55.132
backend-server 2
backend-server 2 port 81
backend-server 2 server-ip 10.19.55.133
backend-server 2 ip address 10.19.55.133
backend-server 3
backend-server 3 port 83
backend-server 3 server-ip 10.19.55.132
backend-server 3 ip address 10.19.55.132
backend-server 4
backend-server 4 port 83
backend-server 4 server-ip 10.19.55.133
backend-server 4 ip address 10.19.55.133
backend-server 5
backend-server 5 port 85
backend-server 5 server-ip 10.19.55.132
backend-server 5 ip address 10.19.55.132
backend-server 6
backend-server 6 port 85
backend-server 6 server-ip 10.19.55.133
backend-server 6 ip address 10.19.55.133
active
service webserver002:81
ip address 10.19.55.132
port 81
keepalive port 2199
keepalive type tcp
protocol tcp
active
service webserver003:81
ip address 10.19.55.133
port 81
keepalive port 2199
keepalive type tcp
protocol tcp
add ssl-proxy-list SSL1
active
service webserver002:83
ip address 10.19.55.132
port 83
add ssl-proxy-list SSL1
keepalive port 2399
keepalive type tcp
protocol tcp
active
service webserver003:83
ip address 10.19.55.133
port 83
keepalive port 2399
keepalive type tcp
protocol tcp
add ssl-proxy-list SSL1
active
service webserver002:85
ip address 10.19.55.132
port 85
add ssl-proxy-list SSL1
keepalive port 2599
keepalive type tcp
protocol tcp
active
service webserver003:85
ip address 10.19.55.133
port 85
keepalive port 2599
keepalive type tcp
protocol tcp
add ssl-proxy-list SSL1
active
service SSL_Front
slot 2
type ssl-accel
keepalive type none
add ssl-proxy-list SSL1
active
owner app1-test
content app-test_back
vip address 10.19.55.10
add service webserver002:81
add service webserver003:81
add service webserver002:83
add service webserver003:83
add service webserver002:85
add service webserver003:85
balance aca
protocol tcp
port 81
active
content app1-test_front
vip address 10.19.55.10
application ssl
add service SSL_Front
protocol tcp
port 443
advanced-balance ssl
balance aca
active

Thanks for the quick reply....there is another port 80 rule setup for that vip....I was using that to test with the app until I got the front end https rules working....
my port 80 rules just says listen to 10.19.55.10 on port 80 and load balance btwn the webervers on port 8x in the back end...
I am trying to do https front end and http backend....
no where in my SSL config have I configured port 80....but when I suspend that rule it all fails....
I am wondering if the backend server sessions are happening properly?
I don't fully get what you mean by "You need to have the rule in port 443 to match traffic coming from the client and the clear text rule (port 81) to match traffic already decrypted coming from the SSL module"
Haven'tI done that?
Thanks again!
Sandeep

Similar Messages

Lotus notes as a front end and oracle as backend

Dear All,
Can i use lotus notes as a front end and oracle as backend atleast for few forms in my application.
If Yes how to go about it.
I have not tried it even once
Kindly also advice if this is appropriate forum to ask this question
Best Regards,
Devendra Shelke

Dear All,
Context for asking above question :
We use Form 6i and Report 6i, Application Server 9i and 9i DB.
But for some forms we want the user to enter the data through Lotus Notes but get updated in 9i DB used by Form 6i.
Best Regards,
Devendra

Lync 2013 Enterprise load balancing on the front end and edge pool

Hi,
I am setting up a Lync 2013 Enterprise deployment consisting of a Front End pool (x2 FE servers) and an Edge pool (x2 Edge servers). I'm seeing some conflicting advice regarding load balancing using hardware or DNS for the front end and the edge.
On the front end I have 2 internal DNS records 'lyncfepool1.contoso.local' each of which map to one of the IPs of the FE servers. I've used my details to populate the Detailed Design Planner excel spreadsheet and am told that I require a HLB to load
balance my front end pool. I'm aware of the need to load balance HTTPS traffic internally (which will be done by TMG) however other traffic to the front end (SIP, etc) can be balanced by DNS only, and not require a HLB?
Can someone clarify the front end requirement?
Also - looking now at the edge pool - this site again have two edge servers in a pool. We are using a total of six private IP addresses, two per edge service (2 x av.contoso.com, 2 x sip.contoso.com and 2 x webcon.contoso.com). These will be
NAT'ed by the external firewall and directed to the respective external (DMZ) IP addresses on the Edge servers on port 443. I know this isn't true roundrobin due to the intelligence of the Lync client when connecting (in that the Lync client will connect
to one of the public IPs and if it can't connect, it will know to connect to the other service IP), however I want to clarify this set up, particularly the need to direct the external public IP traffic at the DMZ Edge IP specified in the topology builder.
I've attached a basic diagram of the external/DMZ/Edge side which hopefully helps with this question
Persevere, Persevere, Per..

That is because you will always need HLB for a front-end server since it hosts the Lync webservices which use HTTP/HTTPS traffic.
The description on the calculation tool also describes this correctly:
Supports Standard and Enterprise pools (up to 12 nodes), with pure device-based load balancing or a combination of DNS load balancing and device-based load balancing (for
Lync web services)
You can use either Hardware or DNS loadbalancing for SIP traffic only, but you will always need a HLB for the webservices. Both are applicable for the Front-End so you have either
full HLB for both SIP and HTTP(S) traffic
DNS LB for SIP traffic and HLB for HTTP(S) traffic
Hope this is more clear :-)
Lync Server MVP | MCITP Lync Server 2010 | If you think my post is the answer to your question, please mark it as answer so future visitors can easily find it.

Lync Front End and Edge on same host

Hey guys can anyone confirm if having a front end and edge on single host is supported, providing of course the ram and cpu requirements are met.
Thank you.

The Front End and Edge must be on separate computers and can't be collocated. Both servers can coexist on the same Virtual Host if using VMware or Hyper-V.
See: http://technet.microsoft.com/en-us/library/gg398131.aspx
Please mark posts as answers/helpful if it answers your question.
Blog
Lync Validator - Used to assist in the validation and documentation of Lync Server 2013.

Authentication with UME separation of front end and back end

My webdynpro project has 2 application. One for Admin one for Rating.
Is it possible to create a java class at Webdynpro level and share it between the 2 applications?
Why the need?
Created a custom class (lets called it CommonEJB), to point to the right pages and set of UI controls after the initial login with UME. This class utilizes the IWDClientUser.getSAPUset() method to get IUser object.
If it is not possible to create a java class at Webdynpro, then this ejb will need to be deployed to the backend.
Putting it at the backend is not good as security wise, its always better to separate the authentication between front and back end.
Any ideas/solutions?
thanks

s0003358504
au-?Krup
LDAP
==============================================
Computer Associates Int'l [eTrust Directory]
Critical Path [CP Directory Server (CP DS)]
Microsoft [Windows 2000 Active Directory Server]
Microsoft [Windows 2003 Server - Active Directory]
Netscape Communications [Netscape Directory Server]
Novell [DirXML Driver for User Management]
Novell [Novell DirXML Driver for SAP HR/PA]
Novell [Novell eDirectory]
Oracle Deutschland [Oracle Internet Directory (OID)]
Siemens [DirX Directory Server]
Siemens [DirX Extranet Edition]
Sun Microsystems [Sun Java System Directory Server]
     Test Objectives
     Testing Scope
     Test Approach
     Test Environment
     Test Data
     Entry / Exit Criteria
     Risks
     Schedule and Resources
     SIT Deliverables
     Test Planning Source Documents
Well, i wish to create a java class that can separate the view areas depending on their login.
lets say you're a manager, u can see certain views. and if you're a supervisor u see another. This is achieved using the java class with information from getSAPUser() position. After retrieving the position, using the java class will programmatically assigned the appropriate views, buttons, tabs etc.
so this class need to in front end, and not back end. problem is we have 2 application.
if the class is created front end in one application can it be shared with another.

Front end and Back end experience in SAP BW

Hi Friends...
Can ne1 plz explain wht things in SAP BW come under Front end and Back end experience......Thanks in advance

Generally, back-end would consist of the taks associated with configuration of data targets (ODS, Cubes), working with extractors, mapping data to the data targets, writing transfer/start rtn/update rules, and creating Infopkgs/ Process Chains.
Front-end deals with the use of the BW - writing queries, workbooks, web (although I think some of the infrastructure aspects of web reporting. e.g. javascript/templates might really could be considered backend). Think of Front-end as all of the client/customer/user facing components.

What is BW Front-end and Whats BW Back-end? Technica ? Functional?

Hi Gurus,
Can some one throw light on the diff between a BW Front-end and BW BAck-end? How will u diff the responsibilities of a Functional BW Consultant and Technical BW Consultant?
thanks
kishore karnati

Hi,
BW Front end is the one that deals with reporting. Eg: BEx
BW back end is the one that deals with the components that stores data which is used for the reporting purpose.
Eg: R3
Functional consultant comes into picture when there is a need to understand the functional aspects of a requirement, say for example, you have a requirement to use Sales Order in your BW application, as a pure BW person, you wont know what a Sales Order is about. A functional consultant has the ability here to map the sales order requirement in the BW application. This means that, he knows what field and what table this sales order relates to. This way, a functional consultant maps the user requirements to the technical detail in the system.
A pure BW consultant is one who knows how to setup data extraction from source system , how to build various components in a BW system, how to schedule a load, how to troubleshoot in case of any issues in the BW application.
Hope this helps..
Assign points if this helps...
Thanks,
Raj

Front end and console ports are down for switch WS-C3750X-48PF-S

We have a switch WS-C3750X-48PF-S in the stack and front end and console ports stopped working and are down.
I have tried to replug power cable but this didn't help, please let me know if I could replug stack power for this switch without outage of other switches in the stack, since switches are connected into the ring
Please let me know what might be the possible root cause
#sh switch stack-ports
  Switch # Port 1 Port 2
    2 Down Ok
    3 Ok Ok
    4 Ok Down

Hello,
There is a problem with the stacking connection between switch 4 and 2. Can you try replacing the stacking cable between these switches?

Hello there, I am creating a database of all our companies press contacts. I would like to create a form that would act as the front end and feed the database which is obviously the back end. The database is in Access 2013. My question is to whether this

Hello there, I am creating a database of all our companies press contacts. I would like to create a form that would act as the front end and feed the database which is obviously the back end. The database is in Access 2013. My question is to whether this is indeed possible?

This forum thread appears to point towards the problem.
Re: Unable to Switch Audio Sync Settings

Connecting to SQl server ( MS acess front end) and pull the data into BI

Dear all,
i need to extract the data from SQl server ( MS acess front end) and pull the data into BI .
i need to know what are the steps need to follow on this..
can any one help me on this...!
Thanks,
Siva

Hi,
1. login to sql server u2013 with ur server credentials and connect.
2. select ur sql for ex: sap bw
3. Right click u2013 sapbw - task - export data From sql to excel I m exporting So give sql details
4. Destination u2013 select excel.. and browse where u want to save the fileu2026
5. give next
6. select from which table u want to export
7. click on next
8. click on finish
9. close
10. go to desktop and open the xyz.xls file
11. not make it as csv file and load the data to BI as a flat file
Hope it will help you.
Regards,

Removing admin password form Access 2003 database front end and back end

We have a legacy database that has been passed down from the original creator, who is no longer with the organization. It was created in Access 2003. It has a front end and a back end. The original admin password can not be located and we are in the process
of upgrading this application to 2010. Is there a way to remove that password so we can make changes to the original files?

Hi,
What password are you talking about, the one created with the workgroup manager? That will be difficult since 2010 doesn't have the workgroup manager anymore. You can still use the database in the 2010 environment but you can't make any changes to the original
database without the password.
Maurice

Https for SOAP and HTTP Receiver adapters in PI 7.1

Hi,
We need HTTPS Transport protocol is required to send the message to receiver systems.
Currently we are using below procedures for https:
1) HTTP with SSL (= HTTPS) without client authentication
2) HTTP with SSL (= HTTPS) with client authentication
But client donu2019t want this procedure.
Here my question is How to enable the https Transport protocol in SOAP and HTTP Receiver adapters.

>>Here my question is How to enable the https Transport protocol in SOAP and HTTP Receiver adapters.
What I see is your client wants PI to send communication via HTTPS transport protocol. That means you have to apply for trusted certificate and import that certificate root node in Netweaver keystore.
Then change the transport protocol from http to https in soap and http receiver communication channel and communicate to client via certificate authentication.
Plenty of documents available in sdn about https certificate authentication. Please go through those links.
check this thread.. might be helpful
Client Certificate for PI authentication when Web Dispatcher terminates SSL

Interface between ESS front end and BAPI'S

Hi,
Can anyone tell me how the field mapping is done between ESS portal frontend to the corresponding field in BAPI FUNCTION MODULE.How it will call BAPI and return the value tothe front end.
Thanks,
Deepthi.

check this Floor plan Manager http://help.sap.com/saphelp_erp2005/helpdata/en/b4/139525380149a49c8402e22700e4ba/frameset.htm .this is
the architecture on which every application is built in ESS.
it is having three components
1.Business Component-which interacts with the backend
2.Visual Component---front end display
3.Configuration component--talks about component
Model will be created in the Business component that interacts with the backend and fetches the data.
check this link to know more about adaptive RFC model used to interact with the backend
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/49f2ea90-0201-0010-ce8e-de18b94aee2d#15
reward points if helpful

Coldfusion back-end, AngularJS front-end, and Security

The company I work for is building an application in which security is of the utmost importance. We're really hoping to use Angular as the client-side application, and we're exploring how best to create our back-end in ColdFusion (which we've used for a few years now).
I understand that only so much security can exist in the front-end of the app, and that the bulk of the work needs to happen on the server. But I'm really unsure about how to move forward in that regard. From what I've read, it sounds like we'll need some kind of Authentication Token to be created on login and stored on the backend. This token should come along with every http request, and the server can then decide on the validity of the request.
Does this sound about right? And if so, are there best practices for implementing it?
Any resources that might shed more light on the topic would be HUGELY appreciated.
Thanks,
Jonathan

maheshguruswamy wrote:
mycoffee wrote:
maheshguruswamy wrote:
847102 wrote:
More and more teams in my company are now mixing technologies. For example they use java for the back end and C# for all the client side code i.e GUI.
How can you mix these technologies. Ie how can c# code "talk" to java code?
Not sure if this is the best place to ask, as its a java forum but I though I would give it a try!
ThanksSimplest way would be to use web services.It is new thing for me to learn...
How efficient to do it compared to all in one either C# or java? I guess it would be slower.
Either C# or java can handle the job. Why both? I don't get it.It all depends on how big the teams are and how much "separation of concerns" you are looking for. In enterprise architecture what i aim to do is try to give the development groups freedom to use whatever technology they feel best suits their need...BUT...if they want to talk to other systems and vice versa, they have to follow certain standards (SOAP, REST etc). Architect the lines, not the boxes. If you are not looking for separation of concerns, sure build out everything in one technology..but keep it mind future changes.Thank,
It is good thing to learn. I used to work with java front end calling Cobol back end (using transactions)
I know C# and java can talk by SOAP or web services but only wondered about the reason.
If I am going to design everything new, one technology is the answer.

Front end and back end questions

Hi,
If I want to develop a web base SOA application by using Jcaps, I have several question want to ask.
1.) In the front end, if i create the page by using eVision to create the page
flow and the page layout, how can I match the fields of the page (such
as the username, email, tel no... with the back end web services?
2.) Does the flow of the front end web pages are control by the page flow in
eVision? When will the eVision supported AJAX or JSF?
3.) What is the use of the eInsight Business process manager, does it
control all the back end flow, such as the flow of each web services?
Does Jcaps has the Bpel engine to control the flow of web services?
4.) I know that in JBoss, there is a jBPM server to control the flow of the front
end pages, does JCAPS has this kind of server?
5.) If i want to connect to the Database? I know that there is a eTL to extract
the data from the database, it is true? Or do u recommend to connect the
database directly through the web services by using JDBC or other
framework as well?
6.) If I have an existing application that is developed by .Net (With no web
services). How can i integrate with other systems? What can I do in order
to reuse the system? Or what Jcaps can do in this manner?
Thanks for you reply! ^ ^

Generally, back-end would consist of the taks associated with configuration of data targets (ODS, Cubes), working with extractors, mapping data to the data targets, writing transfer/start rtn/update rules, and creating Infopkgs/ Process Chains.
Front-end deals with the use of the BW - writing queries, workbooks, web (although I think some of the infrastructure aspects of web reporting. e.g. javascript/templates might really could be considered backend). Think of Front-end as all of the client/customer/user facing components.

Https front end and http backend

Similar Messages

Maybe you are looking for