Reverse proxy for web application

Hi,
The users of our a enterprise Java based web application must access a third web application through simple HTML links and then navigate in the target application.
But for security reasons and constraints the direct exchange between the browers of users and server of the other web application is not allowed.
Our web application must retrieve the web page from the other application and must return it to the users's browser. Is there a convenient way to implement this requirement in J2EE ? In this case our web application must play the role of a simple reverse proxy, must request a target JSP page from other application and process it to rewrite the URLs contained in the HTML page, then send the response to user's web browser.
Has somebedoy already done such a technical requirement ? Is there a library to implement easily this use case ?
Thansk a lot
Regards

Just use Apache HTTPD 2.4 with mod_proxy and mod_proxy_html. No need to do it 'within J2EE'.

Similar Messages

How To configure Apache As Reverse Proxy for SharePoint Application

Hi,
I recently integrated Apache as ReverseProxy for SharePoint 2010. When accessing the SharePoint application via the reverse proxy url e.g. http://<reverse-proxy-url>/SitePages/Home.aspx the images/css and JavaScript files does not comeup
fine.
I had defined the following mapping in the httpd.conf file.
ProxyPass /SitePages http://<actual-url>/SitePages
<Location /SitePages>
ProxyPassReverse http://<actual-url>/SitePages
SetEnv force-nokeepalive 1
</Location>
Regards,
Bunty Ray

Hi Trevor,
I did not understand your point. Currently i tried the following in the httpd.conf as well, but still did not help
######Mapping SharePoint Server#######
ProxyPass /SitePages http://<actual-url>/SitePages
ProxyPass /WebResource.axd http://<actual-url>/WebResource.axd
ProxyPass /ScriptResource.axd http://<actual-url>/ScriptResource.axd
<Location /SitePages>
SetOutputFilter INFLATE;proxy-html;DEFLATE
ProxyHTMLMeta On
ProxyHTMLEnable On
ProxyHTMLExtended On
ProxyHTMLLogVerbose On
ProxyPassReverse http://<actual-url>/SitePages
ProxyHTMLURLMap /SitePages http://<actual-url>/SitePages ec
ProxyHTMLURLMap http://<actual-url>/SitePages /SitePages ec
SetEnv force-nokeepalive 1
SetEnv force-proxy-request-1.01
SetEnv proxy-initial-not-pooled 1
</Location>
<Location /ScriptResource.axd>
SetOutputFilter INFLATE;proxy-html;DEFLATE
ProxyHTMLMeta On
ProxyHTMLEnable On
ProxyHTMLExtended On
ProxyHTMLLogVerbose On
ProxyPassReverse http://<actual-url>/ScriptResource.axd
ProxyHTMLURLMap /ScriptResource.axd http://<actual-url>/ScriptResource.axd ec
ProxyHTMLURLMap http://<actual-url>/ScriptResource.axd /ScriptResource.axd ec
SetEnv force-proxy-request-1.01
SetEnv force-nokeepalive 1
SetEnv proxy-initial-not-pooled 1
</Location>
<Location /WebResource.axd>
SetOutputFilter INFLATE;proxy-html;DEFLATE
ProxyHTMLMeta On
ProxyHTMLEnable On
ProxyHTMLExtended On
ProxyHTMLLogVerbose On
ProxyPassReverse http://<actual-url>/WebResource.axd
ProxyHTMLURLMap /WebResource.axd http://<actual-url>/WebResource.axd ec
ProxyHTMLURLMap http://<actual-url>/WebResource.axd /WebResource.axd ec
SetEnv force-proxy-request-1.01
SetEnv force-nokeepalive 1
SetEnv proxy-initial-not-pooled 1
</Location>
<Location /_layouts>
SetOutputFilter INFLATE;proxy-html;DEFLATE
ProxyHTMLMeta On
ProxyHTMLEnable On
ProxyHTMLExtended On
ProxyHTMLLogVerbose On
ProxyPassReverse http://<actual-url>/_layouts
ProxyHTMLURLMap /_layouts/1033/styles/Themable http://<actual-url>/_layouts/1033/styles/Themable ec
ProxyHTMLURLMap http://<actual-url>/_layouts/1033/styles/Themable /_layouts/1033/styles/Themable ec
SetEnv force-proxy-request-1.01
SetEnv force-nokeepalive 1
SetEnv proxy-initial-not-pooled 1
</Location>
Regards,
Bunty Ray

Iview capable of performing reverse proxy for application integration.

Is there a iview in EP capable of reverse proxying a web application. We are attempting to setup
our production landscape. We can of course use apache to reverse proxy applications hidden behind our dmz by punching a bunch of holes through our firewall. This is not something we wish wish to do as it totally circumvents the safety imposed by our firewalls and dmz. Not having this capability causes all sorts of difficulties with application integration, cross domain scripting issues as well as administrative burden by having to maintain, secure and expose these internally hosted applications.
If this functionality does not exist in out of the box EP, does anyone know a third
party that offers this?
Thanks
Cliff Baeseman

Cliff,
I am not sure I understood your question correctly.
EP is an application running on NetWeaver Application Server. This AS has a component called as Web dispatcher which works like a reverse proxy but isn't meant to proxy applications running on a different server other than NetWeaver AS.
Where is your web application deployed?
More info needed.
Regards,
Kiran

Using reverse proxy for load balancing

Hello,
i have succesfully configured a reverse proxy ( Sun Web Server 7 ) to balance load between two application servers ( Sun Application Server 9.1), however i do not want randon assignment of requests using a round robin algorithm ( default option in Sun Web Server 7) but rather i want to apply a 80/20 rule so that one application server will receive 80% of the requests and the other will receive 20%.
Is there a way of performarming such a task.
your help is really appreciated.
thank you

thank you for the reply,
actually i tried it yesterday and it seems to work.
in my reverse proxy settings i added one server two times and the other once and 66% of the requests were forwarded to the first server.
now i have enabled the scenario that you are mentioning above and i so far requests seem to be proceced using the 80% 20% scenario.

Reverse Proxy for SharePoint 2013

Hi,
I need to setup SharePoint 2013 environment which needs to be accessible from mobile devices e.g. iPAD/Android, for reverse proxy, I am looking at apache or IIS ARR since UAG is going to be deprecated. So far any one setup apache (on
RHEL 6.x)
or IIS ARR(on W2K8R2) successfully as reverse proxy for SharePoint 2013 access? Is there any issue? and which SharePoint authentication method should be configured?
Must is be Form based authentication? As I read some articles it seems ARR supports Windows authentication. Thanks in advance.

IIS ARR doesn't authenticate users, it is a pass-through (unlike UAG which can do auth or anon). Both IIS AAR and the new Web Proxy Role in Server 2012 R2 do not work with SharePoint 2013 Apps.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Issues using IIS 8.5 with ARR 3.0 as Reverse Proxy for Lync 2013

Dear reader, after searching for a day without finding a solution to my problem I end up here ;-)
Working Lync 2013 environment (gradually adding functionality) consisting of 2 FE servers, Persistent Chat Server, Web Apps server, Edge Server, Reverse Proxy Server (IIS 8.5/ARR 3.0), SQL Server.
Set up a fresh Windows 2012 R2 with IIS 8.5, installed ARR 3.0 and followed along this
TechNet article.
So far so good, external clients (incl. mobile phone apps) can all connect.
Now trying to add Web Apps to the reverse proxy, which is slightly different from the others by not forwarding 80/8080 and 443/4443, but just 80 and 443 to internal Web Apps server.
After creating the server farm/URL rewrite, browsing to the webapps.FQDN/hosting/discovery ends up with a 404 error (instead of XML, which is shown when try from the LAN).
After moving this rewrite rule to the top, it started working, but now my lyncdiscover.FQDN stops working.
Ofcourse moving the webapps rule down restores the lyncdiscover.
Any ideas? (everything setup as described in above mentioned TechNet article, so using wildcards. Tried fiddling around with webext.* and lyncdiscover.* and so, but no luck. (I'm completely new to ARR)
Thanks,
Barry

Can you confirm that for each URL Rewrite Rule, you have an {http_host} record that matches something like webext.* as you referenced above and as seen in step 15 here:
http://blogs.technet.com/b/nexthop/archive/2013/02/19/using-iis-arr-as-a-reverse-proxy-for-lync-server-2013.aspx
It might help if you posted a screenshot of your URL rewrite rules.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

Is it possible IIS reverse Proxy for WAS ( BSP) ?????

Hi
I am able to setup IIS reverse proxy for Portal and other some internal website and it works well from outside the firewall. But for WAS (for BSP application), it repeatly prompt login screen even after gave correct user ID and password when call through proxy. But it work inside firewall.
So really wonder is it possible to use IIS reverse proxy for WAS?
Thanks
Raibin

Hi Raja
Thanks for your message. But I already read this same and many other BLOGs. Everything talk about manything. And nothing helped me to find the solution. But friday I found the solution myself and happy to share with you and all others.
The problem was related to the extra string getting added with in url to replace /bsp/   to   /bsp(xxxxxxxxxxxxx)/ and finally when I put the entry as below in my IISProxy.xml file, everything became OK.
And I saw so many question related to EP 7.0 for outside access. There is one extra entry we have to put for webdynpro to make EP 7.0 working outside specially for admin screens.
In the below example 'sapep' is Portal and 'sapecc' is ECC 5.0 server.
<ISAPI-config version="1.6">
     <filter name="IisProxy filter" />
     <extension name="IisProxy extension" />
     <mapping name="PORTAL">
          <source>
               <protocol>http</protocol>
               <prefix>/irj</prefix>
               <new-prefix>/irj/</new-prefix>
          </source>
          <source>
               <protocol>http</protocol>
               <prefix>/logon/</prefix>
          </source>
          <source>
               <protocol>http</protocol>
               <prefix>/webdynpro/</prefix>
          </source>
          <target>
               <protocol>http</protocol>
               <host>sapep.domain.com</host>
               <port>50000</port>
          </target>
     </mapping>
     <mapping name="BSP">
          <source>
               <protocol>http</protocol>
               <prefix>/sap/</prefix>
          </source>
          <source>
               <protocol>http</protocol>
      <prefix>/sap(bD1lbiZjPTA5NiZkPW1pbg==)/</prefix>
          </source>
          <target>
               <protocol>http</protocol>
               <host>sapecc.domain.com</host>
               <port>1080</port>
          </target>
     <compress-types>text/html, text/plain</compress-types>
     </mapping>
</ISAPI-config>
I hope this will many to solve their problems.
Thanks
Raibin

Reverse Proxy for OIF on iPlanet

hi,
I am trying to implement reverse proxy for OIF r3 Identity Provider on iPlanet.
I configured the obj.conf of iPlanet accordingly.
<Object name="passthrough1">
Service fn="service-passthrough" servers="http://backendIDP.com:80"
Error reason="Bad Gateway" fn="send-error" uri="C:/Sun/WebServer6.1/docs/badgateway.html"
</Object>
<Object Default>
NameTrans fn="assign-name" from="/fed/" name="passthrough1"
NameTrans fn="assign-name" from="/fed/*" name="passthrough2"
</Object>
when i tried the IDP initiated proxy url in a browser like (http://proxy.com/fed/idp/initiatesso?providerid=XXXXXXXX&returnurl=YYYY)
immediately its being forwaded to backend Identity Provider for authentication like(http://backendIDP.com/sso/jsp/salogin.jsp?doneURL=/user/loginsso&refID=id-ysJ-7-1PR9k-QI2bg9zZkPdyHPw-)
I was expecting that it is redirected to Proxy URL like (http://proxy.com/sso/jsp/salogin.jsp?doneURL=/user/loginsso&refID=id-ysJ-7-1PR9k-QI2bg9zZkPdyHPw-)
At the end it is giving me null pointer exception instead of return URL "YYYYY"
Does any one know how to fix the error.

web or weblogic.xml files on your RPS needs to define for each case like if inbound port is 7011 then send it to PIA:7011 and http and the same for 7012 then send it to PIA:7012 and https. in the webprofile configuration for your RPS profile, set both https and http relative URLS. I believe you could start using this info and I am sure you could figure out the rest.

Reverse Proxy in web dispatcher

Any statistic on which product is better / qualifies better to be used as a reverse proxy.. (& wherein generic (forward) proxy services can be disabled)
Web Dispatcher
Apache
Microsoft IIS
Any other product ?
Thanks,

Thanks !!!
> URL filtering: the Web Dispatcher 7.2 supports more than one SAP backend, but you should take a look into the confguration page at SAP Help to find out if it matches your future scenario.
I am looking for WD based on 7.3 for both the roles (Reverse proxy and load balancing). But I'll check if there is anything for me to be concerned about...
> looking at your scenario, you'll have at least 1 reverse proxy in your DMZ and the Web Dispatcher will be an additional reverse proxy (for internal and/or external access).
>
> The Web Dispatcher will be connected to the message server of the portal, so when a server/node goes down, the web dispatcher will be notified. That's a vantage over another reverse proxy.
Yes, we have one server reserved for reverse proxy software and another for load balancing (WD).. These two roles need to be on separate servers as per logistics requirement... So, is this what you are talking about..
User <> WD as reverse proxy on server1 <> WD for load balancing server2 <--> EP Message Server.

Different results on consecutive runs of OFT for Web Applications

I am using Oracle Functional Testing for Web Applications to test share point site [using: OS = WinXP SP3, default browser = IE8.0.6]
I’ve recorded simple scenario - browsing through two pages (home page > menu link > page 1)
there is no user input involved – just browsing)
problem:
I am running the same test multiple times and I get different results – sometimes (less often) I get clear ‘Passed’ results but more often I get warnings about missing items, Severe content differences)
upon comparing Master and Tested HTML I see that test fails because no content is being logged under Tested:HTML node (the content displays properly in right browser pane)
any hints?

You probably need a close no save step at the end of your action.
In the save for web dialog, when you record the action, save to the folder you
want the batch dialog to put the images. Then set the batch dialog as below.
MTSTUNER

Best Server Role for Web Applications

Hi,
I'm running SQL Server 2008 R2 Express and using Microsoft SQL Server Manager Studio to administer it. I have a web application that does read, add, update, and delete to the database and I am currently using the sa account - which is of course not
a good idea. I want to create a new user but I don't know what the best practice is for web applications and also security. The options I have are:
bulkadmin
dbcreator
diskadmin
processadmin
public
securityadmin
serveradmin
setupadmin
sysadmin
Thanks.

Hi mark_sti,
Based on my understanding, you want to create a new user of the database. Using this new account, a web application could read, add, update, and delete the database.
The options you provide are fixed server roles. For more information about fixed server roles, please refer to this article:
Server-Level Roles.
In this scenario, you need db_datareader fixed database role and db_datawriter fixed database role. Db_datareader fixed database role can read all data from all user tables. Db_datawriter fixed database role can add, delete, or change data in all user tables.
To add two database roles, you should map the login to the database which is used by a web application in Login Properties. Then create a new database user, check Db_datareader fixed database role and Db_datawriter fixed database role on Membership page of
Database User. About permission of different database roles, please refer to this article:
Database-Level Roles.
If you have any question, please feel free to ask.
Best regards,
Qiuyun Yu

Function authorize in packages for web applications in Oracle XE

Hello,
i have created a simple test package as follows:
PACKAGE TEST IS
function authorize return boolean;
procedure test;
END;
PACKAGE BODY TEST is
FUNCTION authorize return boolean is
BEGIN
if OWA_SEC.GET_USER_ID = 'test' then
return true;
else
return false;
end if;
END;
PROCEDURE test is
BEGIN
htp.prn('Hello World!');
END;
END;
i have also cerated a DAD with this command:
DBMS_EPG.CREATE_DAD (' test ', '/test/*');
i want to run this link in my web browser: http://127.0.0.1:8080/test/test.test
When i use a real database user then the function test works ok.
But i want to make it work with the user name "test" throw the function authorize.
In my opinion i am creating a DAD in a wrong way. Can anybody help me?
Thanks in advance for your help.

Hi,
AFAIK, there is no official document which states that "Oracle Functional Testing for Web Applications" is certified with Oracle E-Business Suite 11i/R12. I assume it should work with Forms 10g but not with Forms 6i, so it should work (does not mean it is certified) with R12.
I would suggest you log a SR and confirm this with Oracle Support.
Regards,
Hussein

Why do we use reverse proxy for Oracle RAC Cluster setup

Hello All,
I got this question lately.. "why do we use reverse proxy for Oracle RAC Cluster setup". I know we use the reverse proxy at Middleware level for multiple security reasons.
Thanks..

"why do we use reverse proxy for Oracle RAC Cluster setup".
I wouldn't. I wouldn't use a proxy of any sort for the Cluster Interconnect for sure.
Cheers,
Brian

Configure Logical Address for Web Applications-Hyperion 11.1.2

Hello,
I have f5 load balancer infront of two foundation servers and I have not yet configured the Logical address for web applications with Loadbalancer DNS name/hostnmae. I can access all of web applications through Load Balanced URL. Do I Still need to configure Logical Web Address for web applications ?
Thank you so much !

To add to this part of the reason for load balancing is usually to support high availability (in addition to scalability). Without that logic address being setup you will find certain configuration items are pointed to one server or another and if that one server is brought down it impacts key functionality of the whole environment.
You should consider a test of the infrastructure by purposely bringing down services and/or servers to ensure you still have a fully working environment with the other redundant components. This test may take half a day to several days to really go through a full regression test of key features while taking key pieces down.
Regards,
John A. Booth
http://www.metavero.com

Apache as Reverse Proxy for UWC and Webmail

Hi,
for several reasons i want to use apache 2 as reverse proxy and ssl accelerator for UWC.
internet <-> apache/ssl <-> backend port 80
I configured my apache with mod_proxy and mod_proxy_html.
Here are the concerning config lines:
LoadModule headers_module modules/mod_headers.so
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_connect_module modules/mod_proxy_connect.so
LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadFile    /usr/lib/libxml2.so
LoadModule proxy_html_module    modules/mod_proxy_html.so
ProxyPass / http://backend.domain.com/
ProxyPassReverse / http://backend.domain.com/
<Location />
        ProxyPassReverse /
        SetOutputFilter proxy-html
        ProxyHTMLURLMap / /
        ProxyHTMLURLMap http://backend.domain.com:80/ http://webplex.domain.com/
        ProxyHTMLExtended On
        RequestHeader unset Accept-Encoding
</Location>For Webmail this configuration works most of the time. There are some minor problems in ie with the folder view. But the real problem is: I can't get UWC to work. The problem seems to be that mod_proxy_html can't replace all of the occurences of backend.domain.com in the html pages.
Especially:
onsubmit="handleSubmit()" action="http://webplex.domain.com/amserver/UI/Login?goto=http://backend.domain.com:80/uwc/&gotoOnFail=http://backend.domain.com:80/uwc/?err=1&module=LDAP" method="POST">in the uwc login page.
So my question is:
Is anybody out there who got apache working as reverse proxy for uwc?
Thanks a lot.
PS1:Solaris 10 on V20z, JES2005Q4
PS2: I already configured UWC with the reverse plugin for sun webserver on backend host so that uwc is working through port 80 only. So there should be no problems arise from that.

Hopefully, you'll hear from somebody. I have zero knowledge or experience with Apache.

Reverse proxy for web application

Similar Messages

Maybe you are looking for