Reverse Proxy setup using SAP PI

Hello folks,
I am trying to set up a reverse proxy between SAP Cloud for Customer and SAP PI (Java stack). And I am following the steps mentioned here:
Configuring Host Mapping, Path Prefix, and Path Mapping - Administration - SAP Library
However even after following the procedure and mapping the internal and external urls, I am not able to access the internal url through the external url.
Are there any more steps or prerequisites that I have to perform apart from the steps given in the page mentioned above.
Thanks
Ravi

Similar Messages

Reverse proxy setup problems

I am trying to setup a reverse proxy using iPlanet Web Proxy Server 3.6. I have followed the instructions in the manual which seems pretty straight forward but nothing is happening. I am getting no traffic at all between any of the boxes involved. I have been using apache before without any problems but wanted to move to something more scaleable as I would like to have multiple reverse proxys. Can anyone give any suggestions as to what might be wrong. Thanks.

Have you tried thius technote ===>
http://knowledgebase.iplanet.com/ikb/kb/articles/1173.html
The reverse proxy setup requires regular mappings and reverse mappings. Regular mappings re-map the requested URL to the actual origin
server. The reverse mappings re-map Location: headers coming back in 3xx redirections.
In some cases, customers have sent technical support obj.conf files with the mapping entries in the wrong order. All of the
"reverse-map" functions should be placed before the "map" functions.
There maybe two causes:
1.Hand editing of the obj.conf files
Use the admin interface to create reverse proxy map entires.
2.Old versions of Admin Server
There may have been problems with creating reverse proxy maps in Proxy 2.x, which used Admin Server 2.x. This problem doee not
occur with Admin 3.5.
Example:
NameTrans fn="reverse-map" from="http://www.news.com"
to="http://kwikimart.mcom.com:8080/news"
NameTrans fn="map" from="http://kwikimart.mcom.com:8080/news"
to="http://www.news.com"
NameTrans fn="map" from="/news" to="http://www.news.com"
Note the "reverse-map" function appears before the "map" functions.

Reverse Proxy Setup

I have a 10.5 server running as a webserver with a single static IP address. I have a second machine running FileMaker Server that is also a webserver. I have two different domain names ( example.com and fmexample.com) that both point to the same static IP.
I would like all traffic coming to example.com to pull data from the 10.5 Webserver and I would like all traffic coming to fmexample.com to pull data from the FileMaker Server.
In researching this it seems like adding fmexample.com to the Sites list in 10.5 server and then adding a reverse proxy to the FileMaker server should accomplish what I am trying to do. However, even with the reverse proxy setup both domain names still pull data from the 10.5 server.
On the 10.5 server in the Sites Menu these are my settings for the fmexample.com site.
General Tab
Domain Name: fmexample.com
IP Address: 10.0.1.10 (IP address of the 10.5 server)
Proxy Tab
Enable Reverse Proxy "Checked"
Proxy Path: /
Balancer Members:
Worker URL: http://10.0.1.100:80/ (IP address of the FileMaker Server)
Route: "Blank"
Load Factor: 100
Any help would be appreciated.

The reverse proxy is in the loop because I have multiple servers sitting behind a single public static IP address. When external calls (users outside of my local network) are made to the public IP for fmexample.com the reverse proxy server sends them to the 10.0.1.100 server on my local network.
This worked fine for standard web serving. The problem came in with FileMaker's IWP engine. It was reading the incoming host header not as the original domain name (fmexample.com) but as the domain name or IP Address that I was assigning in the reverse proxy (ie fmexample.local, or 10.0.1.100)
So when IWP would issue a redirect it would return a URL to the external user specifying an internal address. For example if a specify http://10.0.1.100/ as the URL in the reverse proxy IWP would issue a redirect and return a URL that looked like http://10.0.1.100/fmi/iwp....
That internal address would not work outside of the network.
By adding adding a DNS record internally that routes all fmexample.com traffic to 10.0.1.100, I was able to set the reverse proxy in essence to point to itself but since the reverse proxy looking at my local DNS server it would route back to the local IP address.
Since I could now set the reverse proxy to use fmexample.com as the worker URL, IWP now could see a host header of "fmexample.com" and when it issues a redirect to the external user it shows the proper URL (ie http://fmexample.com/fmi/iwp)
Circumstances Affecting my thought process:
1) I can't just route all incoming traffic to my public IP to 10.0.1.100 because I have a couple of other domains that route to different servers so I still need the reverse proxy to play traffic cop.
2) I also didn't have any idea how to modify IWP to force it to return a specific domain and I couldn't find any clear information on how to modify IWP. I decided to leave IWP working as it was designed and come up with a way to feed it the host header that I wanted.
I admit it does seem a bit convoluted but the important thing is that it works, both internally and externally.
Message was edited by: Patrick Cranston

Reverse Proxy - Apache vs SAP Web Dispatcher

Hi,
my config consists in a portal (EP7.0 - DB/CI + AS) and an ECC system (ECC 6.0 - DB/CI + AS).
Web developments are based on Abap Web Dynpro and are also located on ECC.
To ensure load balancing there are 2 web dispatchers : one on EP DB/CI, one on ECC DB/CI.
Those 2 systems are located in intranet. Intranet access are realized via http.
Moreover I need to open this solution to internet. I need a component to filter access in DMZ and ensure reverse proxy + https functions.
Technical target chain links are depicted below.
internet access : browser (https) -
> (https) reverse proxy in DMZ (http) -
> IS (Portal/ECC)
intranet access : browser (http) -
> IS (portal/ECC)
At the moment two application gateway solutions have been identified :
Apache (MOD_PROXY + MOD_HTTPS) - My configuration is based on Linux
SAP Web Dispatcher ("cascading" implementation as described in OSS note 740234)
I'm looking for PROs and CONs of those 2 solutions and I'm also seeking for the impact of ensuring https encryption/decryption at the application gateway level ("a priori" this usage is not transparent in term of server sizing - CPU/memory, do I require to implement an SSL accelerator ?).
Regards.
Frederic.

Hi,
PRO Webdispatcher:
- Supports SAP Java + ABAP
- Loadbalancing of SAP applications (stateful)
- Supports load balancing (saplb_* cookie)
- Free of costs
- easy to set up (up & running in 2 minutes)
- Supports HA solutions out-of-the-box (process HA)
- Filter + Rules to modify the requests
CONS Webdispatcher
- not a full reverse proxy
- Limited functionality
- one more server/solution (normaly, a company already does have a reverse proxy solution in place)
- limited user base (only SAP customers)
PRO Apache
- free
- widly in use
- full reverse proxy
- allows more complex filtering / rewriting
- can be used for more web solutions, reuse of existing apache reverse proxy
CONS Apache
- does not support SAP load balancing (connection to the message server port for load distribution)
- can be more complex to set up
- SAP specific technology / problems are more harder to fix (ABAP, Stateful connections, sap_lb*)
Short: both will server well as a reverse proxy.
Rule of thumb: If you go for Apache or Web Dispatcher should mainly depend on you current IT landscape. If you already do have an apache in use, use Apache. You already have the people / knowledge, try to foster it .
If you start from scratch and have SAP Logon Groups or many WebDynpro ABAP applications, go for the Web Dispatcher.
br,
Tobias

Wrong cert on reverse proxy setup for exchange

i have arr setup, i have runt he setup command as per the recommended sheet
ARRConfig config –cert “path
to the certificate file” –hostnames “host
names for Exchange Server”–targetserver
“server name of Exchange Server”
and this has worked and mail is accessable, the problem is that the cert is not matching for some reason
so i have a cert for remote.domain.co.uk and i have one for mail.domain.co.uk, i used the mail cert for the reverse proxy, i see it bound to the site BUT when i access the remote site i get the remote.domain.co.uk cert as presented, its as if the mail one
is being over ridden and i dont know were
any advise?

In the Exchange Shell can you run,
Get-ExchangeCertificate | select CertificateDomains, Services | FL
This should tell us if the cert is bound correctly on the Exchange Server.
In the Essentials Server, in IIS, do you have a Exchange Proxy website created?
Robert Pearman SBS MVP
itauthority.co.uk |
Title(Required)
Facebook |
Twitter |
Linked in |
Google+

Reverse proxy setup for EBS R12.1.1

We have an external DMZ server configured for oracle ebs r12.1.1. The URL is http://testerp.mydomain.com:8003.
Can you please provide a link that shows step by step setup of Reverse proxy for the above URL to access the application.
I already have the metalink notes that says about DMZ setup for oracle ebs. I actually am looking for step by step setup for the reverse proxy using oracle application server 10g. Please help. Thanks.

Roy, I have already gone through that document, it is actually showing how to install and configure webcache 10g for oracle ebs r12.
It also says the features that oracle applicaiton server web cache provides like,
•Load Balance
•Reverse Proxy
•Failover and Surge Protection to minimize downtime
•Personalize Attributes for Caching
BUT IT IS NOT MENTIONING HOW TO CONFIGURE THE 'REVERSE PROXY' FOR THE ORACLE EBS EXTERNAL APPLICATION SERVER ON DMZ.

Sun One Application Server 7 SSL Reverse Proxy Setup?

Hi,
I've made a similiar post on the Web Server forum,
http://forum.sun.com/jive/thread.jspa?threadID=95666&tstart=0
I've noticed there's a reverse proxy plug in setup for Web Server,
as well as a AddOn package for Application Server.
I've so far successfully installed the reverse proxy plugin for
the Web Server and it manage to passthrough the jsp contents
to the Application Server.
There's a file in our application server, Step2Cert.jsp in the
appserver that requires to be viewed/accessed in https mode
and I'm guessing the Web Server to Application Server communication
should be in https?
Anywhere I can find references on how this can be done?
My two references:
Web Server Reverse Proxy Plug-in
http://docs.sun.com/source/819-0902-05/rpp61.html
Web Server and Application Server setup for passthrough
http://docs.sun.com/source/819-2783/agplugin.html
I've not installed the AddOn package for the Appserver yet. But
I figured I should, right? I'm rather confused about the two
package.
Thanks,
Mac.

Hi,
I've made a similiar post on the Web Server forum,
http://forum.sun.com/jive/thread.jspa?threadID=95666&tstart=0
I've noticed there's a reverse proxy plug in setup for Web Server,
as well as a AddOn package for Application Server.
I've so far successfully installed the reverse proxy plugin for
the Web Server and it manage to passthrough the jsp contents
to the Application Server.
There's a file in our application server, Step2Cert.jsp in the
appserver that requires to be viewed/accessed in https mode
and I'm guessing the Web Server to Application Server communication
should be in https?
Anywhere I can find references on how this can be done?
My two references:
Web Server Reverse Proxy Plug-in
http://docs.sun.com/source/819-0902-05/rpp61.html
Web Server and Application Server setup for passthrough
http://docs.sun.com/source/819-2783/agplugin.html
I've not installed the AddOn package for the Appserver yet. But
I figured I should, right? I'm rather confused about the two
package.
Thanks,
Mac.

Help with Apache Reverse Proxy configuration with SAP Portal and SAP Webgui

Dear Experts,
I have an issue configuring Apache to work with SAP Portal and ERP webgui. Accessing Portal through Reverse Proxy is working fine. But the problem arises when we try to open an iView ERP webgui transaction page from Portal with the Reverse Proxy. Have anyone implemented similar requirements and could advice on the configuration required on the Apache side? Thank you

hi,
pls check the below links for reference:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/24396589-0a01-0010-3c8c-ab2e3acf6fe2
searchsap.techtarget.com/searchSAP/downloads/chapter-december.pdf
1)Learn to implement the reverse proxy filter and portal gateway in SAP Enterprise Portal 6.0 on Web Application Server 6.40.
https:/.../irj/sdn/nw-portalandcollaboration?rid=/webcontent/uuid/006efe7b-1b73-2910-c4ae-f45aa408da5b
.2 )Configuring the Portal for Your Reverse Proxy Filter Solution . ... This document describes the reverse proxy filter mechanism in SAP Enterprise ...
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/32ad9b90-0201-0010-3c8a-c900cd685f8f
3)have full reverse proxy functionality. Possibly. filter. requests. Internet ... Reverse proxy (optionally with authentication etc.) ...
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/c066c390-0201-0010-3cba-cd42dfbcc8be
Note:please reward points if solution found helpfull
Regards
Chandrakanth.k

SJSWS 7 u4 reverse proxy setup with client ip forwarding

Hi,
I am trying to set up a reverse proxy to glassfish enterprise 2.1 so that it will pass on the client ip address.
I have added this line to my obj.conf file:
ObjectType fn="forward-ip" hdr="Client-ip"
Entire obj.conf below:
<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn="pfx2dir" from="/mc-icons" dir="/usr/webserver7/lib/icons" name="es-internal"
NameTrans fn="map" from="/" name="reverse-proxy-/" to="http:/"
PathCheck fn="uri-clean"
PathCheck fn="check-acl" acl="default"
PathCheck fn="find-pathinfo"
PathCheck fn="find-index-j2ee"
PathCheck fn="find-index" index-names="index.html,home.html,index.jsp"
ObjectType fn="forward-ip" hdr="Client-ip"
ObjectType fn="type-j2ee"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"
Error fn="error-j2ee"
AddLog fn="flex-log"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>And have added this property to the both of the glassfish http-listeners:
authPassthroughEnabled=true
However the when I use this piece of code:
System.out.println(FacesContext.getCurrentInstance().getExternalContext().getRequest().getRemoteAddr())I see this in my glassfish logs
[#|2009-03-26T17:32:47.457+1300|WARNING|sun-appserver2.1|org.apache.coyote.tomcat5.CoyoteRequest|_ThreadID=21;_ThreadName
=httpSSLWorkerThread-8181-2;_RequestID=11ab6ecf-254c-4255-98d3-48856ab99b61;|PWC4013: Unable to determine client remote a
ddress from proxy (returns null)|#]
[#|2009-03-26T17:32:47.457+1300|INFO|sun-appserver2.1|javax.enterprise.system.stream.out|_ThreadID=21;_ThreadName=httpSSL
WorkerThread-8181-2;|
127.0.1.1 ip address|#]
There are no messages in the webserver logs
Can anybody see something that I am doing wrong?
Thanks in advance for your help,
Gareth

If Admin server shows its enabled, then it is enabled.
You can add forward-ip line in obj.conf manually and restart the server just to be sure.
Look at [http://forums.sun.com/thread.jspa?threadID=5344683|http://forums.sun.com/thread.jspa?threadID=5344683]. It says (in glassfish)
"Add this property to all <http-listener> elements in your domain.xml:
{code}<property name="authPassthroughEnabled" value="true"/>"

Reverse Proxy Setup Guide?

Dear all,
Where I can find the guide or steps of the SunONE WebServer 6.1 reverse proxy which can redirect the http requests to SunONE App Server 7?

have you seen this...
http://docs.sun.com/source/817-3652-10/agplugin.html

Reverse Proxy setup for Mobility HTTP 80 configuration not working

http://technet.microsoft.com/en-us/library/hh690011(v=ocs.14).aspx
I'm trying to use the Port 80 ->8080 setup to avoid putting lyncdiscover.sipdomain.com for every additional sip domain that we want to include.
I have followed the instructions per the above link, yet when I try to log in with a user with one of those additional SIP's, I cannot log in to a mobile device.
For example,
our main sip is "contoso.com", so
[email protected] can log into her mobile device.
but user [email protected] cannot log in via mobile device.
Is there anything else that needs to be done to ensure that
[email protected] can login via a mobile device?
Auto login?
Josh
Here is the testexchangeconnectivity.com
When I run the Lync Mobile Test, I get this, almost like the http rule is useless, still requiring the need for the additional lyncdiscover.sipdomain.com .
[email protected]
Testing connectivity to the Lync Autodiscover Web Service server for a secure connection on port 443 to obtain the root token.
Connectivity to the Lync Autodiscover Web Service test failed.
Test Steps
Attempting to test Autodiscover Web Service URL https://lyncdiscover.fabrikam.com/Autodiscover/AutodiscoverService.svc/root.
Autodiscover Web Service URL can't be contacted due to failure of the following tests:
Test Steps
Attempting to resolve the host name lyncdiscover.fabrikam.com in DNS.
The host name resolved successfully.
Additional Details
Testing TCP port 443 on host lyncdiscover.fabrikam.com to ensure it's listening and open.
The port was opened successfully.
Testing the SSL certificate to make sure it's valid.
The SSL certificate failed one or more certificate validation checks.
Test Steps
ExRCA is attempting to obtain the SSL certificate from remote server lyncdiscover.fabrikam.com on port 443.
ExRCA successfully obtained the remote SSL certificate.
Additional Details
Validating the certificate name.
Certificate name validation failed.
Tell me more about this issue and how to resolve it
Additional Details
Host name lyncdiscover.fabrikam.com doesn't match any name found on the server certificate CN=lncpool01.contoso.com, OU=Domain Control Validated.

Hi,
Please verify DNS record for Lyncdiscover.fabrikam.com can be resolved.
Please make sure the web publishing rule for port 80 has been configured correcltly. The lyncdiscover.<sipdomain> entry must to be included in rule. Verify that port 8080 was typed in "Redirect requests to HTTP port" and Redirect
requests to SSL port is not selected.
Kent Huang
TechNet Community Support

BizTalk published WCF service throwing HTTP 404 error using ISA reverse proxy settings

I have published my schemas as a WCF service from BizTalk 2010 "Publish WCF Service" wizard. I used Wcf-basicHTTP adapter in receive port. I am able to run the service successfully on localhost IIS and I tested my biztalk solution by sending request using SOAP UI and got response successfully.... Now: Actually, I need to give this service endpoint to my vendor who will send request from outside my company's network i.e. internet. In my infrastrucrue BizTalk is behind the firewall so, we setup a REVERSE proxy server at DMZ layer and it is configured properly. I have tested a simple WCF service by replacing the localhost with Proxy server configured address <DNSName> and it worked absolutely fine. But when I change localhost in my BizTalk schema based published WCF service it is not working and I am getting following error. Really strugling to get it resolved. I wasted a whole 3 days....very upset. Please help me out by giving the detailed step solution. Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable. Please review the following URL and make sure that it is spelled correctly. Requested URL: /BizTalkServiceInstance/MyService.svc I am surprized why other c# code based WCF services are working fine with reverse proxy settings. Server Error in '/' Application. The resource cannot be found.Is there any special things to consider Biztalk exposed wcf servcie over ssl in IIS cluster with ISA

Hi Singam :)
First I would start by browsing any other files (files other than the one from WCF) just to ensure that the reverse-proxy’s redirection rules are set correctly. If you get the same 404 error when you try to access other service/files “through reverse-proxy”,
then it’s an issue in the redirection rule(s) in reverse-proxy.
If others are fine i.e. no issue in reverse-proxy setup as such, then try the following for WCF service's web.config file. I have seen this issue in WCF service (not just BizTalk’s artifacts exposed as service in reverse-proxy). Add serviceHostingEnvironment
config as show with in serviceModel section.
<system.serviceModel>
<serviceHostingEnvironment aspNetCompatibilityEnabled="true" multipleSiteBindingsEnabled="true" />
</system.serviceModel>
Regards,
M.R.Ashwin Prabhu
If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful by clicking the upward arrow mark next to my reply.

What is a reverse proxy and when is it used ?

Dear SDN Community,
Can some one throw light on the reverse proxy concept and in which scenarios it is used.
Thanks!
Surya.

Typically Reverse Proxy is used in an Extranet setup.
It will receive all the request from users (internet) and forward the requests to specific application servers based on rules you define.
As the name suggests its the opposite of Forward proxy. You use forward proxies for outbound traffic (intranet to internet) and reverse proxies for inbound traffic (internet to extranet).
You typically use reverse proxies to avoid exposing your application servers on the internet.
As our colleague as suggested you can get more information on wiki or reverse proxy vendors libe APACHE, IIS, BLUECOAT...
Hope this helps.
Thanks and Regards,
Prasanna Krishnamurthy.

OAM- Apache Reverse Proxy issue when Form Authenticaion is used

Hi All,
Customer is using Apache 2.0.65 as a reverse proxy server. OAM has been integrated with OAS. A WebGate has been installed on OHS in infra.
When a protected resource (portal) is accessed, a login form appears. After entering the correct credentials, it does not go to the resource, instead gives displays some Header Variables on the Browser, instead of actual resource.
This happens only when a resource is protected with Form Authentication Scheme and while using with reverse proxy. The same Form Authentication scheme works without reverse proxy. With Basic LDAP Authentication, the same resource perfectly works even when reverse proxy is used.
Any suggestions?
Thanks in advance.
Regards,
Amol

Hi Amol,
Check the passthrough parameter in your form scheme. If this is set to yes, what you are asking OAM to do is to pass through to the form action instead of the URL the user originally requested. I know this still does not explain why things work when the reverse proxy is not used - but it might make sense if you actually have 2 form schemes and when you access the resource via the reverse proxy, the policy domain/policy in question actually invokes the scheme which has passthrough enabled. You could ascertain this via the access tester by trying the reverse-proxied URL and direct URL.
-Vinod

Setting up of Proxy & Reverse Proxy

hi,
I read some pdf files available in SDN for setting up of proxy and reverse proxy. I installed Apache 2.0.54, as per the apache documentation I enabled proxy and it is working fine (forward proxy)
I used the following doc as a guide line to setup reverse proxy https://websmp105.sap-ag.de/~sapidb/012006153200000364562005E/APACHE_J2EE_V14.pdf
(Page 9 of the doc refers to 2.0.31 & above)
Instead of /b2b/ I kept /irj/portal
And Sec 5.(URL Rewriting) is totally confusing. I couldn't able to find AddModule, so I added the line 'AddModule mod_proxy.c' and 'AddModule mod_rewrite.c' in httpd.conf. And I don't know where to add 'RewriteEngine On'...
After making the above changes, my apache is not starting.
Please let me know how to configure proxy/reverse proxy. If you have a screen shot please send it to hpriyag @ yahoo (dot) com.
We are using NW'04 on win2003 server and planning to use Apache. We are ok with IIS too.
Haripriya

Praveen,
I have the following configuration in my httpd.conf
For Reverse Proxy
ProxyRequests off
ProxyPreserveHost On
<VirtualHost [IP:Port]>
    DocumentRoot [ Webserver doc root, eg "C:/.../htdocs" ]
    ServerName [ Domain Name eg www.domainA.com ]
    ErrorLog logs/[Domain].com-error_log
    CustomLog logs/[Domain].com-access_log common
    RewriteEngine On
          RewriteLog logs/[Host]_unsecured_rewrite.log
          RewriteLogLevel 9 [9 is verbose for prod I prefer 1]
          <Directory />
               Options None
               AllowOverride None
          </Directory>
          RewriteRule ^/(.*)$ http://[EP Host]:[Port]/$1/ [NC,P]
          ProxyPassReverse /irj http://[EP Host]:[Port]/
</VirtualHost>
I used Apache 2.0.54 on Win2K3.
Let me know if the above config doesn't work.
Cheers,
Chandra Ganne.

Reverse Proxy setup using SAP PI

Similar Messages

Maybe you are looking for