Performing reverse proxy re-directs and re-writes depending on case of url

Hi,
I have a front-end v6.1 SP6 web server running on Windows that hosts a public facing web site as well as re-directs specific folder urls to back-end applications hosted on Linux based application servers.
I need to perform proxy re-directs and / or url re-writes depending on the case-sensitivity of the url requested from the Windows hosted web server.
i.e. There is a back-end application with the internal url http://abc.internal.com/ABC, which importantly will not serve pages from http://abc.internal.com/abc
So what I need is:
www.external.com/ABC  -- proxy redirect -->  abc.internal.com/ABCwhereas
www.exernal.com/abc  -- rewrite -->  www.external.com/ABC  -- proxy redirect -->  abc.internal.com/ABCWhat I have so far will provide the reverse proxy re-write for /ABC:
<Object name="default">
NameTrans fn="assign-name" from="/ABC(|/*)" name="abc.internal.com"
</Object>
<Object name="abc.internal.com" 2=">">
ObjectType fn="force-type" type="magnus-internal/passthrough"
Service fn="service-passthrough" servers="http://191.168.1.10:80"
</Object>However, this will also reverse proxy requests for /abc which will return an error from the internal app server. So, is it possible to perform a case-sensitive dependent re-write / redirection on v6.1 on Windows?
N.b. I realise that the back-end application could be modified to handle both upper and lower case requests but that is not an option here.
Thanks for your help.

I can't think of an easy way to do what you want. On Windows, Web Server treats URIs and paths as case insensitive, so there's no obvious way to treat /ABC differently than /abc.
I do see a few options. Unfortunately, they're all relatively complicated:
a) Write an NSAPI plugin
b) Write a Servlet filter
c) Use Sun Java System Web Server 7.0
If you switch to 7.0, you can use case-sensitive regular expressions:<If $uri =~ '^/ABC/?'>
NameTrans fn="assign-name" name="abc.internal.com"
</If>

Similar Messages

  • Reverse Proxy plug in and Load Balancer Plug in

    Hi,
    Can anyone please provide me with an example obj.conf file showing how to combine the reverse proxy plug-in and Load Balancer plug-in.
    I would like to use the reverse proxy plug in to detect when static content is requested and provide this from the web server. Requests for dynamic content would then be forwarded to an Application server via the Load balancer plug-in. I have found plenty of documentation on how to configure these plug-in separately but nothing on how to combine the two.

    smiking
    reverse proxy plugin - its job is to forward the requests to another server for a specific task. you can use the webserver 7 . it does forward and limited load balancing (using round robin ) based on the number of servers you provide in the configuration. i would say this is a poor man's setup.
    load balancer plugin - some app servers like sun java system app server or web logic provide this plugin so that you can effectively use the back end app server
    with both these setup, you can <if> constructs to determine which requests need to be forwarded to the back end server.
    I wonder, why do you need both - if both of them is designed to do the same thing.

  • Enterprise portal access using reverse proxy using Apache and webdispatcher

    Hi Guys,
    As requirement, we need to give solution to customer about Reverse proxy scenario. I am new to this part.
    What we have think of to use Apache and Web dispatcher.
    I tried to search documents and found some sdn links also but still i am not comfortable to go about.
    Need suggestion and document if anyone has used so far.reverse proxy.
    As basis person, we need to do all ( Apache installation, Apache configuration, Web dispatcher installation and configuration, integration with EP.)
    It will helpful to me if i can get Apache installation, Apache configuration part and integration with EP, or web dispatcher, configuration etc.
    Thanks,
    Deepak

    We used Netscaler for Reverse Proxy implementation and can assure you that network team performed most of the set ups. This was on EP 7.01.
    From BASIS stand point it would be primarily Web Dispatcher Configuration.
    Also refer the links I specified in another thread. There are several scenarios discussed there -
    Re: Post values for userid and passowrd fields in logon page
    http://wiki.sdn.sap.com/wiki/display/BSP/Using+Proxies
    ~ Dhanz

  • Apache as Reverse Proxy for UWC and Webmail

    Hi,
    for several reasons i want to use apache 2 as reverse proxy and ssl accelerator for UWC.
    internet <-> apache/ssl <-> backend port 80
    I configured my apache with mod_proxy and mod_proxy_html.
    Here are the concerning config lines:
    LoadModule headers_module modules/mod_headers.so
    LoadModule proxy_module modules/mod_proxy.so
    LoadModule proxy_connect_module modules/mod_proxy_connect.so
    LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
    LoadModule proxy_http_module modules/mod_proxy_http.so
    LoadFile    /usr/lib/libxml2.so
    LoadModule  proxy_html_module    modules/mod_proxy_html.so
    ProxyPass / http://backend.domain.com/
    ProxyPassReverse / http://backend.domain.com/
    <Location />
            ProxyPassReverse /
            SetOutputFilter proxy-html
            ProxyHTMLURLMap / /
            ProxyHTMLURLMap http://backend.domain.com:80/ http://webplex.domain.com/
            ProxyHTMLExtended On
            RequestHeader unset Accept-Encoding
    </Location>For Webmail this configuration works most of the time. There are some minor problems in ie with the folder view. But the real problem is: I can't get UWC to work. The problem seems to be that mod_proxy_html can't replace all of the occurences of backend.domain.com in the html pages.
    Especially:
    onsubmit="handleSubmit()" action="http://webplex.domain.com/amserver/UI/Login?goto=http://backend.domain.com:80/uwc/&gotoOnFail=http://backend.domain.com:80/uwc/?err=1&module=LDAP" method="POST">in the uwc login page.
    So my question is:
    Is anybody out there who got apache working as reverse proxy for uwc?
    Thanks a lot.
    PS1:Solaris 10 on V20z, JES2005Q4
    PS2: I already configured UWC with the reverse plugin for sun webserver on backend host so that uwc is working through port 80 only. So there should be no problems arise from that.

    Hopefully, you'll hear from somebody. I have zero knowledge or experience with Apache.

  • Iview capable of performing reverse proxy for application integration.

    Is there a iview in EP capable of reverse proxying a web application. We are attempting to setup
    our production landscape. We can  of course use apache to reverse proxy applications hidden behind our dmz by punching a bunch of holes through our firewall. This is not something we wish wish to do as it totally circumvents the safety imposed by our firewalls and dmz. Not having this capability causes all sorts of difficulties with application integration, cross domain scripting issues as well as administrative burden by having to maintain, secure and expose these internally hosted applications.
    If this functionality does not exist in out of the box EP, does anyone know a third
    party that offers this? 
    Thanks
    Cliff Baeseman

    Cliff,
    I am not sure I understood your question correctly.
    EP is an application running on NetWeaver Application Server. This AS has a component called as Web dispatcher which works like a reverse proxy but isn't meant to proxy applications running on a different server other than NetWeaver AS.
    Where is your web application deployed?
    More info needed.
    Regards,
    Kiran

  • Reverse proxy for internal and external

    Hello,
    BM1 is our main BM3.9 Box. I have reverse proxy configured for webaccess and to release emails from our spam filter externally (this works). This BM server also is our external DNS, and our default route for Internet traffic.
    Another BM box is our internal DNS.
    I need to modify BM1 config to enable client internally to release emails from our spam filtering software. The error issued is 504 Gateway timeout.
    Do I just add the internal ip address to the BM1 accelerator entry meaning that the same accel will listen for both internal and external addresses ?
    Any help is appreciated
    Regards
    Brian

    bdavis97,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Visit http://support.novell.com and search the knowledgebase and/or check all
    the other self support options and support programs available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.novell.com)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.novell.com/faq.php
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://support.novell.com/forums/

  • Performance with setting mincache=direct and convosync=direct

    Hi,
    I am helping a Solaris+VxFS customer for my application that does not use O_SYNC. The customer reported that only setting convosync=direct does not have much performance benifits, but by adding mincache=direct there is a significant performance gain.
    It looks like convosync=direct is not necessary to be set. Should I use mincache=direct only? Can some one have a logical explanation ? Many thanks.
    Here are the definitions:
    mincache=direct will cause any reads without the O_SYNC flag, or any writes without the O_SYNC flag, VX_DSYNC, VX_DIRECT, and VX_UNBUFFERED caching advisories, to be handled as if the VX_DIRECT caching advisory had been set.
    convosync=direct will cause any reads or writes with the O_SYNC flag to be handled as if the VX_DIRECT caching advisory had been set.
    _________________________

    If you would like to try Live Chat they should be able to help you.
    There are some useful help pages here, for BT Broadband customers only, on my personal website.
    BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

  • CSS & CE Reverse Proxy Caching - Freshness and Content - Help !!!

    We have a pair of 11054's and a pair of 570 CE and a pair os SCA's and using them in a RPC configuration in front of a series of static content web servers.
    My problem is I want the CE's to server content even when the origin server(s) are down but where the content is cached fresh or not. So of if the cache has the content, serve it no matter what its freshness. I don't want to have a sorry server used unless the content isn't cached at all.
    Or can I pre-position content on the same CE and have it server from there. What content types can be prepositioned ? Is someone going to tell me I need a content router now of something ?
    Anyone have any bright Ideas ??
    Thanks
    Simon

    Since there has been no response to your post, it appears to be either too complex or too rare an issue for other forum members to assist you. If you don't get a suitable response to your post, you may wish to review our resources at the online Technical Assistance Center (http://www.cisco.com/tac) or speak with a TAC engineer. You can open a TAC case online at http://www.cisco.com/tac/caseopen
    If anyone else in the forum has some advice, please reply to this thread.
    Thank you for posting.

  • Define Reverse Proxy and Deffered Authentication Schema

    Hi Experts,
    Can some one help me with the Definition for "*Reverse Proxy in OAM*" and "Deffered Authentication Schema (*DAS*) in Directory server". And please quote one example for understanding.......
    Thanks in Advance.
    Sandy
    Edited by: sandyb4u on Oct 11, 2010 1:34 AM

    Hello Markus,
    1. have you checked out Alon Weinstein's Weblog <a href="/people/sap.user72/blog/2005/02/23/the-reverse-proxy-series--part-2-iis-as-a-reverse-proxy">The Reverse Proxy Series -- Part 2: IIS as a reverse-proxy</a>?
    2. Is the IIS a must? Can you give Apache or SAP Web Dispatcher a try. Prakash Singh wrote a Weblog <a href="/people/prakash.singh4/blog/2005/08/16/how-to-setup-webdispatcher-to-load-balance-portal-in-a-clustered-environment">How to setup webdispatcher to load balance portal in a clustered environment</a>.
    Regards
    Gregor

  • Access Mac Mini Server (profile management) through reverse proxy

    Hi,
    Newbie in Mac's world and yet trying to make it more complicated as it is.
    As we recently (last month) decided to equip our sales force with iPads, they were configured through Apple Configurator tool running on a dedicated Mac Mini Mountain Lion.
    Now, I'd be keen in moving this configuration to the Profile Manager, part of the OSx Server plugin. So far so good.
    Problem is the following : another web server is already on the LAN using both 80 and 443 ports. So all incoming traffic on those ports was routed to this other server. As Mac Mini Server default http/s ports may not be altered, I installed a reverse proxy server (Oracle VM - Ubuntu 12.04LTS - pound), configured to deal differently traffic on those ports according to the domain name (host) of the web request (header). Each 'local' server has been allocated a domain name. Just to be clear, traffic is now routed by the WAN/LAN router, for those ports, towards the reverse proxy, configured to reroute the traffic to the correct destination.
    So far so good, it works like a charm, except... as soon as we enter https protocol on Mac Mini Server Profile Manager.
    Access from an iDevice to the Mac Mini Server Profile Manager login page is fine, but as soon as password is confirmed, safari is pending and finally a message 'An internal serer error occured. Please try later again' appears.
    Looking to both reverse proxy system log and Mac Mini profilemanager.log files to trace the problem, the following lines are produced at this particular moment :
    reverse proxy system.log
    Jan 15 14:44:03 reverseproxy pound: 91.... GET /devicemanagement/console/apple_theme_v2/en/da56af0a69e733b259dac3991419fa928b4 94a56/resources/images/sprites/me_controls.png HTTP/1.1 - HTTP/1.1 200 OK
    Jan 15 14:44:03 reverseproxy pound: 91.... GET /auth?redirect=http://osxsrv.fiks.net/devicemanagement/api/authentication/callback HTTP/1.1 - HTTP/1.1 302 Moved Temporarily
    Jan 15 14:44:04 reverseproxy pound: 91.... GET /devicemanagement/api/authentication/callback?auth_token=336952DE-BDDE-4390-82F 7-8475B79FB2D3 HTTP/1.1 - HTTP/1.1 302 Moved Temporarily
    Jan 15 14:44:04 reverseproxy pound: (b7680b40) e500 can't read header
    Jan 15 14:44:04 reverseproxy pound: (b7680b40) e500 response error read from 192.168....:443/GET /profilemanager/ HTTP/1.1: Success (0.007 secs)
    Jan 15 14:44:08 reverseproxy pound: 91.... POST /devicemanagement/api/magic/get_updated HTTP/1.1 - HTTP/1.1 200 OK
    OSx Server profilemanager.log
    Jan 15 14:44:05 osxsrv ProfileManager[1748] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:05) [POST]Jan 15 14:44:05 osxsrv ProfileManager[1749] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:05) [POST]
    Jan 15 14:44:06 osxsrv ProfileManager[1748] <Info>: Completed in 492ms (View: 0, DB: 6) | 200 OK [http://osxsrv.../magic/do_magic]
    Jan 15 14:44:06 osxsrv ProfileManager[1749] <Info>: Completed in 687ms (View: 0, DB: 5) | 200 OK [http://osxsrv..../magic/do_magic]
    Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: auth_token doesn't exist
    Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
    Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
    Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: auth_token doesn't exist
    Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
    Jan 15 14:44:07 osxsrv ProfileManager[1751] <Info>: Completed in 4ms (View: 1, DB: 14) | 403 Forbidden [http://osxsrv..../magic/do_magic]
    Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
    Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: auth_token doesn't exist
    Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
    Jan 15 14:44:07 osxsrv ProfileManager[1748] <Info>: Completed in 45ms (View: 1, DB: 43) | 403 Forbidden [http://osxsrv..../magic/do_magic]
    Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Processing MagicController#do_magic (for 91.... at 2013-01-15 14:44:07) [POST]
    Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: auth_token doesn't exist
    Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Filter chain halted as [:verify_auth_token] rendered_or_redirected.
    Jan 15 14:44:07 osxsrv ProfileManager[1750] <Info>: Completed in 55ms (View: 0, DB: 1) | 403 Forbidden [http://osxsrv..../magic/do_magic]
    Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Processing AuthenticationController#callback (for 91.... at 2013-01-15 14:44:08) [GET]
    Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Redirected to https://osxsrv..../profilemanager/
    Jan 15 14:44:08 osxsrv ProfileManager[1749] <Info>: Completed in 149ms (DB: 5) | 302 Found [http://osxsrv..../authentication/callback?auth_token=[FILTERED]]
    I guess the '302 Found' is causing or explaining the problem.
    I agree this might not be a Mac issue, so I still knock your doors hoping some of you could at least give a hint for what to search for !
    If the pound configuration file is of interest, just ask, but this is pretty trivial, saying basically listen these protocols (http/https) on these ports (80/443) and according to Header content (check destination host) and reroute packet to LAN device (with given LAN IP address).
    As the default port(s) of the Mac Mini Web Services may not be altered (so far I know), I guess I am stuck using 80 and 443 anyway.
    Maybe should I invest time in changing my other apache server ports to some more exotic 8080 or 88 or whatever so Mac Mini Server Profile Manager default ports 80 and 443 are maintained and can be easily and directly rerouted to my Mac server without any reverse proxy along the way.
    Thanks in advance for your help
    Alx

    HI All,
    i'm also using reverse proxy technique to publish my server to the internet. The ip is used by twice domains. The problem is by using the profile manager
    after login it redirects the url to the Local Area network addresse instead to the domain.
    How to configure this on OS X Server and the Profile Manager Service?
    Kind Regards
    Oemer

  • Apache Reverse Proxy

    Hi
    I have installed Apache Reverse Proxy to access my Portal and ECC6.
    In the httpd config file , i have done the following settings.
    <VirtualHost ipaddress:port>
    ProxyPreserveHost On
    ProxyPass /irj/ http://portalserver:50000/irj/
    ProxyPassReverse /irj/ http://portalserver:50000/irj/
    ProxyPass /eccdev/ http://eccserver:8000/eccdev/
    ProxyPassReverse /eccdev/ http://eccserver:8000/eccdev/
    </VirtualHost>
    eccdev is external alias for the path
    /sap/bc/gui/sap/its/webgui/
    With this setting when i  when a request is made for eccdev/
    it takes me to the ecc6 login page.
    when i enter the required information , it just clears the username password fields.
    i checked that the username password are correctly entered.
    what is the problem ?
    Regards
    Rajendra

    Hi Darren ,
    Thanks for the reply.
    Our SSO between Portal and  ECC6 works fine without Reverse Proxy.
    If we access the Portal Through Reverse Proxy , when we navigate to any iViews say BSP iView , it asks for Username password. Once provided it works fine.
    Second Scenario is Using Reverse Proxy to Directly access
    SAP GUI . i.e without using Portal.
    If i do not use Reverse Proxy , i can access my ECC6 webgui
    through browser after providing the Login Details, but if i use Reverse Proxy then Even after providing the Login Details ,
    the LogOn Box does not go and keeps asking for login details.
    To summarize , i just want to acess the SAP GUI from Browser
    using Reverse Proxy . I am able to do it without reverse Proxy .
    Can you help ?

  • ACE 4710, reverse proxy?

    Hello All,
    Please forgive my ignorance but can the ACE appliance behave as a reverse proxy for http and ssl traffic? I would assume it can given how it does SLB but SLB is not a requirement at this time. Thanks for your input.

    Hi Mate,
    The reverse proxy servers can perform many tasks, like:
    Note: this info from Wikipedia: http://en.wikipedia.org/wiki/Reverse_proxy
    Reverse proxies can hide the existence and characteristics of the origin server(s), The ACE will do that.
    Application firewall features can protect against common web-based attacks. Without a reverse proxy, removing malware or initiating takedowns, for example, can become difficult, The ACE has some built-in security features, you can refer to this document for full detail:
    http://www.cisco.com/en/US/partner/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_2_7/configuration/security/guide/securgd.html
    In the case of secure websites, the SSL encryption is sometimes not performed by the web server itself, but is instead offloaded to a reverse proxy that may be equipped with SSL acceleration hardware. The ACE can do this:
    http://www.cisco.com/en/US/partner/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_2_7/configuration/ssl/guide/sslgd.html
    A reverse proxy can distribute the load from incoming requests to several servers, with each server serving its own application area. In the case of reverse proxying in the neighborhood of web servers, the reverse proxy may have to rewrite the URL in each incoming request in order to match the relevant internal location of the requested resource. The ACE can do that perfectly.
    A reverse proxy can reduce load on its origin servers by caching static content, as well as dynamic content. Proxy caches of this sort can often satisfy a considerable amount of website requests, greatly reducing the load on the origin server(s). Another term for this is web accelerator. A reverse proxy can optimize content by compressing it in order to speed up loading times. Please check this link for more detail about ACE Application Acceleration and Optimization:
    http://www.cisco.com/en/US/partner/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_2_7/configuration/app_acc_and_opt/guide/appaccoptgd.html
    Best regards,
    Ahmad

  • Uwc behind a reverse proxy asks for internal urls

    Hi,
    I have an uwc on the msg store. I try to access it through a web reverse proxy, but after the login page which appeared allright, the url is transformed to a internal url which is invalid from the normal outside scope.
    Is this setting a possible one, as advertised or not at all. And what would be the workaround, if any.
    Thanks
    Fran�ois

    Dear Expert,
    Can i know how do you config the reserve proxy to work with the uwc?
    my network topology is:
    machine A: uwc (https://port:443) and MEM (https://port 80) (both are running SSL)
    machine B: Messaging Server (MTA and store)
    machine C: ldap and Identity server
    the login page is https://commexp/uwc , after login, it divide to two main session.
    Mail tab - https://commexp:80
    Other tab - https://commexp/uwc
    How can i set the reverse proxy for this configuration?
    And which proxy are you using?
    Thanks a lot!
    Regards,
    Angus
    had the same problem, fix was -
    >
    >
    in Uwcauth.properties changes
    uwcauth.identity.login.url=http://bason.blah.com:81/am
    server/UI/Login
    AMconfig.properties changes
    com.sun.identity.server.fqdnMap[bason.blah.com]=bason.
    blah.com
    with the hostname (bason.blah.com) being the *uwc
    server* with reverse proxy on it
    for some fun have a look at the url you are directed
    too - in particular the parameters on the url...
    can anyone say "SECURITY HOLE"?

  • Publish Lync Externally without Reverse Proxy

    Hello All,
         Well let me start out by saying I'm well aware that publishing lync externally without a reverse proxy is not suggested due to security measures. To get to the point I have the following questions regarding setting this up. As of right now
    I have lync fully working internally only. 
    Here is my current setup
    1 standard front end server with one nic card that has two ip addresses assigned to it and is signed with our internal CA,
    I also have an edge server that has two interfaces. One interface is facing external with three public IP addresses with the AV one set as the primary, This interface has a public UC cert applied to it. The other interface is using a private ip address that
    has a cert from our internal CA.
    My questions are as follow
    1. I currently have a GoDaddy UCC cert that allows me to have 5 San's. I'm trying to maximize this cert but am unsure of how to configure the SAN's. Which sans should be on the certificate so that I can use it for the edge server (av.domain.com/webconf.domain.com/access.domain.com)
    and lync front end external cert (lync.domain.com and meet.domain.com). I also have a wildcard cert from GoDaddy for *.domain.com however I can not attach SAN's to it I was wondering if this could be used for meet.domain.com or autodiscover.domain.com?
    2. Regarding external DNS entries so far I have the following:
    webconf.domain.com -> to the ip for webconf on edge server public interface
    av.domain.com -> to the ip for av on edge server public interface
    access.domain.com -> to the IP for the access on edge server public interface
    lync.domain.com -> to the IP configured for external access on the lync front end server ( I have configured IIS on this site to listen to port 80 and 443 as stated in Ken Lasko's blog post)
    meet.domain.com -> to the IP configured for external access on the lync front end server
         Now my question is do i need to add the autodiscover.domain.com and if so where do I point this entry to? Also can how can I configure this setup to work with lync mobile device. 

    As for the Reverse proxy if going that route:
    External DNS
    lyncdiscover.domain.edu -
    Point to Reverse Proxy Public IP
    lync.domain.edu (this is used as our external webservices url) -
    Point to Reverse Proxy Public IP 
    meeting.domain.edu (/meet and /dialin for the simple url's) - Point to Reverse Proxy Public IP
    sip.domain.edu (this is currently pointing to our external edge server access ip) - Correct
    av.domain.edu (this is currently pointing to our external edge server av ip) - Correct 
    webcon.domain.edu (this is currently pointing to our external edge server webconf ip)  - Correct
    Internal DNS
    You should setup Split DNS or pinpoint zones as meet/Lyncdiscover/sip/dialin records should be created for the domain.edu: http://technet.microsoft.com/en-us/library/gg398758.aspx
    Lyncdiscover.domain.edu - Not required Internally but should point to the private IP (external interface) of the Reverse
    proxy to direct 443 to 4443.
    lync.domain.edu -Point
    to the private IP (external interface) of the Reverse proxy to direct 443 to 4443
    Lyncdiscoverinternal.edu - pointed to front end server ip
    meeting.domain.edu - pointed to front end server ip
    lgcclync2013.domain.cc (this is our FE server) - pointed to our front ender server ip  - correct
    Cisco ASAs don't allow hair-pining of the firewall this is why the internal dns needs to have the lync.domain.edu pointing to an internal IP that can redirect 443 to 4443
    (reverse proxy) instead of pointing to the Public IP of the reverse proxy: http://technet.microsoft.com/en-us/library/hh690030.aspx
    Hi Michael,
         Thank you for all your help. I've set up and configured both the external dns and the IIS ARR, but now I'm running into an error when I try to connect any of the following sites https://lyncdiscover.domain.edu, https://meeting.domain.com,
    https://lync.domain.edu I get an Internal 500 error. When I check the Microsoft Remote Connectivity Analyzer under
    Lync Autodiscover Web Service Remote Connectivity Test I get the following error
    Testing HTTP authentication methods for URL https://lyncdiscover.domain.edu/Autodiscover/AutodiscoverService.svc/root/user.
    HTTP authentication test failed.
    Additional Details
    An HTTP 500 response was returned from IIS7.
    Headers received:
    Content-Length: 1208
    Content-Type: text/html
    Date: Wed, 01 Jan 2014 14:56:12 GMT
    Server: Microsoft-IIS/8.0
    Elapsed Time: 286 ms.
    I created 3 server farms on the IIS ARR sever
    Lync.domain.edu which is being directed to lgcclync2013.domain.cc ports 8080 and 4443 LyncDiscover.domain.edu which is being directed to lgcclync2013.domain.cc ports 8080 and 4443                      
                                  meeting.domain.edu which is being directed to lgcclync2013.domain.cc ports 8080 and 4443 When I ping lgcclync2013.domain.cc from the IIS Server it resolved
    correctly to the right IP address.

  • Reverse proxy plugin vs load balancer plugin

    Hi,
    May i know what is the differents between reverse proxy plugin(passthrough) and load balancer plugin?
    Regards
    haw_9368

    The Load Balancer plugin was designed specifcally to allow the Web Server to be a HTTP end-point for Sun Application Server. It is an ancestor of the Reverse Proxy Plugin (generally this version was changed to be tolerant of HTTP from any origin server, and performance improvements, etc). This plugin further evolved and was integrated into Web Server 7.0.

Maybe you are looking for