Reverse proxies

I just upgraded server to Lion. I had a very simple web setup - basically, just a reverse proxy to wrap web cam software (SecuritySpy) in an SSL connection.
Upgrading to Lion broke that, and it also removed the admin tools.
I found the admin tools 10.7 and installed that.
But starting it up, there's no web service in the admin tools. Argh. I need to fix the web service, and I can't even figure out where the settings are now!
Where are the more advanced settings for the web server service, to configure things like reverse proxies?
Thanks!

Add this to your /etc/apache2/httpd.conf file
### for multiple virtual hosts https://discussions.apple.com/message/15684602#15684602
<IfDefine MACOSXSERVER>
NameVirtualHost *:80
NameVirtualHost *:443
</IfDefine>
You should be able to add multiple sites (with DNS hostnames), and create reverse proxies. It worked for me.

Similar Messages

Multiple Reverse Proxies for Portal

Hi
I want to setup 2 Reverse Proxies for my portal .
i have set up 1 Reverse Proxy Server correctly and it is working fine.
In the Portal , i have defined System which points to ECC6 and in its ITS , WebAS and Application Host i have provided the Reverse Proxy Server Name.
Now how to setup the Second Reverse Proxy Scenario ?
Regards
Rajendra

No one can answer ?

Reverse proxing on non-standard ports

Hi,
I want to create a new Reverse proxy mapping between an application and a GlassFish instance running on non standard port (not 80 / 443). Creating a mapping for HTTP works fine, but I can't find a way to map both the http and the https ports to the mapping.
I have an application SecurityTest running on instance
http://links.mycompany.com:38081/rsd/SecurityTest
https://links.mycompany.com:38182/rsd/SecurityTest
I want a mapping for the application
http://www.mycompany.com/rsd/SecurityTest/ -> http://links.mycompany.com:38081/rsd/SecurityTest
https://www.mycompany.com/rsd/SecurityTest/ -> https://links.mycompany.com:38182/rsd/SecurityTest
The application is more or less a hello world servlet that is secure (form login) so it switch from HTTP to HTTPS when not logged in to ask for the username / password. Mapping to the http port works for the public page, the redirect gives an error:
Gateway Timeout
Processing of this request was delegated to a server that is not functioning properly.
Can anyone tell me how to configure the Web Server to make it work?
thanks

Hi,
I still get the same error:
[12/Nov/2007:14:34:50] failure (16473) rsdts.mycomp.com: for host i78473.mycomp.com trying to GET http:/lidip/, service-http reports: HTTP7765: error reading response header (Server closed connection)
And:
Bad Gateway
Processing of this request was delegated to a server that is not functioning properly.
I don't get any logs on the other side...

Alteon and F5 BIG-IP Reverse Proxies

Hi,
Does anybody have experience of using Alteon or F5 BIG-IP as a reverse proxy with SSL and load balancing functions with the SAP Portal? Are they supported by SAP also?
regards,
Sean

I have used Alteon, at two customer sites, for SSL termination and load-balancing. So it is compatible with SAP EP. But since it's from Nortel, SAP doesn't support it.
Regards,
Sean Morgan

Reverse Proxy with Sun Web Server 7 update 4

Hi All,
I've just migrating to Sun Java System Web Server 7.0U4 B12/02/2008 from Sun Java System Web Server 7.0-Technology-Preview-3 B09/13/2006. I've have the two web servers running side by side on separate machines. Both have a VS configured as a reverse proxy pointing to the same apache tomcat web server.
The Tech Preview 3 server works fine and has been doing since it was installed. However the Update 4 server doesn't. I can access the tomcat app via the U4 server in a browser, but not with the app on my mobile (sync ML). Snooping the traffic show me that the U4 server is sending a different response that the Tech Preview server. I'm thinking it may have to do with Transfer Encoding: chunked. I've looked around the web to see if I can turn this off in the U4 server, as I seem to recall having to do so at some point in my life, though I can't remember when and with what.
Does anybody have any clues they can throw at me?? Or anybody know what has change in the reverse proxy part of the web server from Tech Preview 3 to U4??
Both VS reverse proxies are congfigured exactly the same.
Thanks,
Stuart.

well, technology preview is what the name says .. i am surprised that u decided to stick with a technology preview release all these days.. in any case, there should not have any feature change between technology preview build and U4. but , there has been lot of bug fixes - so, unless we know the exact problem - we can't easily narrow down the change between tp3 build with U4 and find out how it is affecting u.
here is a related article on how to use chunked encoding within web server 7
http://developers.sun.com/webtier/reference/techart/chunked_req.html
now, to help you more appropriately, you need to provide us with errors (probably with log level set to finest within server.xml) and let us know with the error reported by web server when it is unable to send those requests to back end tomcat
you can set log level to finest by running the following command
/sun/webserver7/bin/wadm set-config-prop -user=admin --config=<hostname> log-level=finest
/sun/webserver7/bin/wadm deploy-config --user=admin <hostname>
http://docs.sun.com/app/docs/doc/820-4842/set-config-prop-1?a=view
(once you have identified the problem, you might want to set log level to info as setting to finest will cause your logs to grow humongous and also hurt performance
thanks
sriram

What is the alternative to TMG/ISA For SSL-Bridging-Capable Reverse Proxy For System Center 2012 R2 IBCM?

When I look up alternatives to TMG many other answers say something like "Don't worry about it. TMG 2010 is under support until 2020."
Well, we don't have TMG and can't buy it since it is off the market. Can it still be legitimately purchased through any resellers?
We need a reverse proxy that specifically supports SSL-Bridging so that device certificate authentication is not broken when the connection passes through the proxy.
Which reverse proxies that are currently on the market are known to work successfully with System Center Config Manager Internet-Based Client Management and also with other Microsoft products such as Lync 2010 and RD Gateway 2012 R2?
Do any Cisco ASA or ACE models support the required functionality for machine certificate authentication?
We have ISA 2006 licenses available, but I would hate to roll that out and then have to replace it in only 2 years rather than using something that can stay in place long term. Maybe we could use ISA 2006 temporarily as a stopgap if the next version
released of Windows Server Web Application Proxy would meet the requirements and can be deployed in production before ISA 2006 is completely EOL.
I hate that Microsoft keeps discontinuing all the related products to this before they have their replacements ready.

Hi,
You are correct, all TMG product sales officially ended in December 2012.
In addition, an ISA Server and a TS Gateway server can be used together to enhance security for remote connections to internal network resources. However, it
seems that ISA 2006 cannot support that on Windows Server 2012 R2. For more detailed information:
Configuring the TS Gateway ISA Server Scenario
Personally, Web application proxy would be an alternate. In addition, for the question related to Cisco product, you can contact Cisco for assistance.
Best regards,
Susie

Reverse proxy rule

Hi,
I have confiugure apache 2.2 as reverse proxy which will be interacting with my portal as well as ECC ITS. Everything is working fine but the problem is when user gives the path:
http://<hotst>/sap/bc/its/gui/sap/webgui he able to access logon page of ECC which i want to block.
I want one redirect rule which should block the request which come with request http://<host>/sap/bc/its/gui/sap/webgui through reverse proxy. It should allow only when request comes in this format :
http://<host>/sap([some cache])/bc/its/gui/sap/webgui. where [some_cache] is automatically generated by SAP.
What could be the syntax of rewrite rule.

User 2 layers of Reverse proxies to resolve the issue

ACE 4710, reverse proxy?

Hello All,
Please forgive my ignorance but can the ACE appliance behave as a reverse proxy for http and ssl traffic? I would assume it can given how it does SLB but SLB is not a requirement at this time. Thanks for your input.

Hi Mate,
The reverse proxy servers can perform many tasks, like:
Note: this info from Wikipedia: http://en.wikipedia.org/wiki/Reverse_proxy
Reverse proxies can hide the existence and characteristics of the origin server(s), The ACE will do that.
Application firewall features can protect against common web-based attacks. Without a reverse proxy, removing malware or initiating takedowns, for example, can become difficult, The ACE has some built-in security features, you can refer to this document for full detail:
http://www.cisco.com/en/US/partner/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_2_7/configuration/security/guide/securgd.html
In the case of secure websites, the SSL encryption is sometimes not performed by the web server itself, but is instead offloaded to a reverse proxy that may be equipped with SSL acceleration hardware. The ACE can do this:
http://www.cisco.com/en/US/partner/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_2_7/configuration/ssl/guide/sslgd.html
A reverse proxy can distribute the load from incoming requests to several servers, with each server serving its own application area. In the case of reverse proxying in the neighborhood of web servers, the reverse proxy may have to rewrite the URL in each incoming request in order to match the relevant internal location of the requested resource. The ACE can do that perfectly.
A reverse proxy can reduce load on its origin servers by caching static content, as well as dynamic content. Proxy caches of this sort can often satisfy a considerable amount of website requests, greatly reducing the load on the origin server(s). Another term for this is web accelerator. A reverse proxy can optimize content by compressing it in order to speed up loading times. Please check this link for more detail about ACE Application Acceleration and Optimization:
http://www.cisco.com/en/US/partner/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_2_7/configuration/app_acc_and_opt/guide/appaccoptgd.html
Best regards,
Ahmad

ACE Reverse Proxy question

Hello, I have a client that needs to reverse proxy sessions to two backend servers. Can the ACE preform reverse proxies?

Gregg,
you need to create an action-list and assign it to your policy-map
switch/Admin(config)# action-list type optimization http avs_default
switch/Admin(config-actlist-optm)# ?
Configure optimization actions:
appscope Appscope measurement against optimization
cache Cache optimization
delta Delta optimization
do EXEC command
dynamic Enable just-in-time object accelaration
end Exit from configure mode
exit Exit from this submode
flashforward Flashforward optimization
flashforward-object Flashforward object optimization
no Negate a command or set its defaults
You will probably want to use cache forward or cache dynamic.
More info at
http://www.cisco.com/en/US/docs/net_mgmt/application_networking_manager/2.0/user/guide/UG_optimization.html
Gilles.

'Reverse Invoke' with XI

Does anyone know how to do Reverse Invoke with XI, the way it used to be done with Business Connector. My client does not allow simple reverse proxies for inbound messages from external sources. Instead it require a reverse invoke ot be used between the DMZ and intenal integration server. Any info is greatly appriciated.
Kind Regards,
Chris

Richard,
We can use adapters is in the DMZ where many companies do not allow connections direct connections with the Internet and thay have demilitary zones
if you want to use XI in such an enviroment you can either put another XI in the DMZ or just an J2SE adapter.
PCK is also a De-Centralized Adapter engine.So when subsidiary companies want to communicate with the BIG company having XI..then this De-Central adapter
engine communicates with it using XI message format. The conversion (File,JDBC,JMS,Mail)<-->XI Msg is done using the De-Central adapter engine of PCK. This is basically in B2B scenario
Check this links which may help you:
Re: B2B network infrastructure
Re: Register Decentral J2EE Adapter Engine
Hope this helps....
---Satish

SMP 3.0 (using Agentry): Requirements for Reverse Proxy

All.
We are in the process of designing our landscape for SMP 3.0, where we will expose Agentry functionality, and are currently looking at the Reverse Proxy technology to use.
From the document
Common Requirements for Reverse Proxies - Landscape Planning and Design - SAP Library
it is stated that any reverse proxy used:
Does not remove any HTTP headers.
Sets a timeout period, if used, that is greater than the timeout used by the clients.
Is this all the requirements that must be fulfilled for a reverse proxy ?
We are looking into installing a common Reverse Proxy technology, that can handle reverse proxy requirements for multiple platforms.
Hence I need to specify the requirements, in relation to SMP, for this technology.
I hope someone can help.
Thanks.
Søren Hansen.

Thanks Bill and Steve.
I got it now - for Agentry support we need WebSockets.
What about everything else on SMP 3.0 ?
From this document:
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/200d7500-2605-3210-9d91-a24cfb6523ba?QuickLink=index&…
it is stated on page 4 that different technologies needs different platforms.
Application          Reverse Proxy
Native                 Apache
Hybrid                 Apache
Agentry               Nginx
MBO                   RelayServer
Is there no one Reverse Proxy platform that can act for all application types in front of SMP 3.0 ?
And what should the entire list of demands be ?
Søren Hansen

BI FPN using Reverse proxy

Hi,
We are integrating BI reports using FPN to main portal that is accesed using WebSeal. We have BI, Portal running on same box. There is a junction " /irj " defined in webseal for portal and another junction "/sapbi"for BI system. when we access the reports directly using portal url, we are able to see report and it works fine. When we access portal through webseal url then we are able to see the report but when we click on any button it comes up with exception.
does anybody got any idea, why we are facing this issue with reverse proxy access.
we are on BI7 and EP7.
Regards
Ravindra

Hi,
Which SP you are on?
Consumer and producer portals must reside in the same domain.
FIXED with SAP NetWeaver 7.0 SPS 09: This can be achieved using reverse proxies that support portals in multiple domains. A detailed document that describes how to implement a federated portal network whereby the producer and the consumer are not in the same domain, is available at https://www.sdn.sap.com/irj/sdn/howtoguides SAP NetWeaver 2004s, User Productivity Enablement, Running an Enterprise Portal.
Reverse proxy is not supported: Despite being documented in the release notes as supported, usage of a reverse proxy in FPN scenario has not been validated. Reverse proxy as part of the FPN environment is not supported when using remote role assignment.
FIXED with SAP NetWeaver 7.0 SPS 09: A configuration guide provides instructions on how to implement a federated portal network with reverse proxy as part of the environment (can be found at: https://www.sdn.sap.com/irj/sdn/howtoguides SAP NetWeaver 2004s, User Productivity Enablement, Running an Enterprise Portal, "How to Set up Federated Portal Network Scenarios with Reverse Proxies").
Refer SAP Note: 880482 - Central Note: Federated Portal Network (SAP NetWeaver 7.0)
Regards,
Anagha

Reverse proxy for Afaria

Hi All,
Currently we using relay server in DMZ layer for afaria, we would like to move it to physical reverse proxy in the intranet. Can you help us what are all the physical reverse proxy available in market which will support load balancer and afaria. What are the revers proxy approved by afaria.
Thanks,
Boopalan M
Tags edited by: Michael Appleby

Hi Boopalan,
I've used a number of reverse proxies in front of Afaria - by far the best I have used is actually a standard Apache reverse proxy. Any linux/unix installation with apache installed can be configured to act a authenticated/unauthenticated proxy in front of your installation. In my case I usually go for a CentOS 6 installation with a HTTPD installation.
Be aware, switching from a relay server to a reverse proxy is quite a change and will impact your existing users.
My advice is to setup a temporary mirror enviornment, try it out, get it working correctly (SSL, authentication and everything in between) and then get a plan together to make your migration.
Hope that helps and shout if you need any more information.
Brenton.

Reverse proxy and pass along path

I have configured 2 reverse proxies to reference an internal load balanced VIP (that in turn references 2 GlassFish domains). I want to set this up so that the user only needs to enter:
https://mysite.com
and the reverse proxies will tack on /mypath/myjsp in order to get to the app on the GlassFish domains. Do I set up a URI redirect in addition to the RP? I tried entering "https:mysiteinternal.com/mypath/myjsp" in the Server Names field in the RP configuration, but obviously that is not correct (the description for the field even states that you don't include the path)...so where do you add this path?
Thanks!
skeener

You have to edit <ws7-install-dir>/https-<instance>/config/*obj.conf manually. And then call pull-config CLI to pull the manual changes back to Admin server.

Can the 4710 reverse proxy like the Apache rerwite rule

We currently have web servers configured with Apache that act as reverse proxies using an Apache rewrite rule. The end user connects to the Apache web server and it proxies that connection to the backend app server. Is the 4710 capable of acting as a reverse proxy like Apache which would eliminate the need for a web server?
Thanks

Hi,
Although this is not the most common scenario it is doable. What you will need is to NAT the client source IP to the ACE VIP and send the request to the web server. If there is a web farm then you can use another context of ACE to loadbalance the request to the web farm.Actually i have setup ACE as a reverse proxy in replacement of an ISA server by using the one-arm mode for the implementation. Beware though that you will need to use Policy Based Routing or NAT so as for the return traffic to go though ACE. Also you will need to insert the client IP in the x-forwarded-for HTTP header for proper analysis (as you would do with Apache).
See below link for routed mode (it is for the c6500 / ACE module but same applies for the ACE 4710 appliance
http://supportwiki.cisco.com/ViewWiki/index.php/Configure_ACE_with_Source_NAT_and_Client_IP_Header_Insert
Hope it helps,
./G

Reverse proxies

Similar Messages

Maybe you are looking for