SAP webdispatcher as reverse proxy

I'm using SAPNW7.3 based web dispatcher.
I would like to know if it is possible to configure webdispatcher as reverse proxy with stateful applications...
In my landscape,
<client browser> --> <webdispatcher as reverse proxy> (say, A & B) --> <webdispatcher as load balancer> (say, C&D) --> <sap EP server x4> (say, W,X,Y,Z)
A&B operate on separate servers in parallel provide reverse proxy functionality... so do C&D for load balancing.
I have configured system C&D to connect to SAP EP by using profile parameter wdisp/system_1. I want to know how to configure A or B,
IMO, in System A
wdisp/system_1 = SID=EXT, EXTSRV=http://A:8000;http://B:8000, SRCSRV=*:8093
This sends all requests (u201Cround robinu201D) arriving in port 8093 on to the two servers C&D and thereby to EP app servers W,X,Y,Z.
In this case, we can't use stateful request as per http://help.sap.com/saphelp_nw73/helpdata/en/48/957c6494cc73eae10000000a42189b/frameset.htm
Is there any other way to configure A&B, to allow operating stateful connections. If not, does this mean that sap webdispatcher cannot be used as reverse proxy unless you are using only stateless requests (without stickiness)?

Hi
Kindly refer the SCN link
How to...Configure SAP Webdispatcher as a reverse proxy
http://basisondemand.com/Documents/Whitepaper_on_SAP_Web_Dispatcher.pdf
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a015cea3-9627-2e10-a792-8f39e3d0b59d?QuickLink=index&…
Regards
Sriram

Similar Messages

Webdispatcher as reverse proxy in DMZ

Hello,
We are planning to setup a webdispatcher in the DMZ that will connect to the portal to replace the external hardware load balancer that we currently have. The loads are not very heavy to we decided to do away with the external load balancer.
The scenario that we want to achieve is that from an external web browser, a user can connect to the portal. The certificates will be stored in the web dispatcher such that the connection from the external web browser to webdispatcher is secure. Then the SSL should terminate for connecting the webdispatcher to the portal.
I have read through the following but I'm still not sure on how to set this up.
How to...Configure SAP Webdispatcher as a reverse proxy
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/60d6de2e-085b-2b10-7a8f-bc9ae1e0bba6
Note 538405 - Composite SAP Note SAP Web Dispatcher
Can someone help me or point me to a document/material that can help me?
Thanks!
MRR

Try these:
http://help.sap.com/saphelp_nw70/helpdata/EN/d8/a922d7f45f11d5996e00508b5d5211/frameset.htm
http://help.sap.com/saphelp_nw70/helpdata/EN/39/09a63d7af20450e10000000a114084/frameset.htm
The second link has step by step process for setting up SSL, and the parameters needed for termination at the web dispatcher.
Cheers
Jane

Webdispatcher with reverse proxy

Hi Experts,
We need to deploy reverse proxy and web dispatcher. This is for a relatively budget savvy customer so cost is big issue. My question is :-
1) Can we deploy reverse proxy & webdispatcher on the same server ? (without using VMware). Probably we will use two Linux operating system.
2) Should we plan for failover on Webdispatcher ? Or running Webdispatcher without failover may not be that big issue.
Can you guys please share your thoughts on these two issues ? Urgently require your feedback on this.
Regards,
TB

Hi,
We need to deploy reverse proxy and web dispatcher.
The web dispatcher IS a reverse proxy. What do you mean ? I think you did not perfectly understand the need...
1) Can we deploy reverse proxy & webdispatcher on the same server ?
Yes, but it does not make sense to me until you have a very unusual requirement.
Should we plan for failover on Webdispatcher ?
If you need High availability, yes. You're the only one to know if you need it...
Regards,
Olivier

SAP Web Dispatcher & Reverse Proxy

Hello,
We are currently using Novell's iChain product for our reverse proxy (RP) to our EP7 Portal which in turn is connected to BW, CRM, & R/3. Can SAP's Web Dispatcher (WD) perform the same RP functions as iChain in this type of scenario?
For example, we have one iChain server which performs RP functions for EP7 which is also connected to BW, CRM, & R/3. We like to replace our iChain product and have been looking at WD. But, it doesn't look like a single WD instance can act as a RP for more than one system at a time. In other words, I setup a test WD system and pointed it at our EP7 system. It works fine for anything coming from EP7. But, for any iviews that point to BW, CRM, or R/3, it doesn't work, which makes sense since there doesn't seem to be anywhere I can define those systems in the WD. But could WD do this and I'm just not reading the documentation correctly? (Yes, I have been all over help.sap.com in regards to WD)
I did find the following SAP note, 740234, that discusses this to an extent, but it is mostly about load balancing across disparate systems, not RP functionality across disparate systems. Thus, I'm not sure this applies. Assuming this note is correct from a RP viewpoint, can I just run multiple WDs all on the same standalone system? Also, if that is the case, how is it that when I call a BW iView from the Portal, it knows to go through the other WD setup on that system?
Bottom line is, does/will SAP's WD perform the same functions as iChain or should we be looking elsewhere?
Hope that all made sense!
Thanks,
Tom

Hello Benny,
For the sake of simplicity, lets say I have a portal called 'ABC' and a BW system called 'XYZ'. So, to access the portal directly, without going through the iChain RP, I would enter http://abc.company.com/ but going through the RP, I would enter something like http://MyPortal.company.com/ and iChain knows it should direct the traffic to ABC.
In the portal, I have a XYZ defined in the System Landscape. Then in the portal, I create an iView that uses the BW system defined in the System Landscape.
Again, without going through the RP, if I click on the XYZ iView in the portal, it connects to XYZ to get whatever info it needs from XYZ and presents it back, through the portal. But, the URL behind that iView, goes to http://xyz.company.com. But, if I do all the same things, this time going through the RP, it understands that it needs to be the RP for both ABC and XYZ and acts accordingly.
Does that make more sense? Can WD also act in this fashion? As far as user management goes, that is done with LDAP.
Thanks,
Tom

SAP Webdispatcher - Reverse Proxy Configuration

Hi All,
Need your help in configuration SAP Webdispatcher as reverse proxy. Currently we are using Apache as reverse proxy, but we are facing 400 Bad Request error and not able to solve the issue.
So We are planning to install Webdispatcher and configure reverse proxy and test.
Below is the Apache Reverse proxy configuration. Need help in configuring the same parameters in SAP Webdispatcher
ProxyPass /sap http://srmerver:8000/sap
ProxyPass /SRM-MDM http://mdmserver:50100/SRM-MDM
ProxyPass /mdmimages http://portalserver:8090/mdmimages
ProxyPass /irj http://portalserver:50100/irj
ProxyPass /saml2 http://portalserver:50100/saml2
ProxyPass / http://portalserver:50100/　
ProxyPassReverse /sap http://srmserver:8000/sap
ProxyPassReverse /SRM-MDM http://mdmserver:50100/SRM-MDM
ProxyPassReverse /mdmimages http://portalserver:8090/mdmimages
ProxyPassReverse /irj http://portalserver:50100/irj
ProxyPassReverse /saml2 http://portalserver:50100/saml2
ProxyPassReverse / http://portalserver:50100/
Regards
Ponnusamy

Hi
Kindly refer the SCN link
How to...Configure SAP Webdispatcher as a reverse proxy
http://basisondemand.com/Documents/Whitepaper_on_SAP_Web_Dispatcher.pdf
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a015cea3-9627-2e10-a792-8f39e3d0b59d?QuickLink=index&…
Regards
Sriram

SAP WebDispatcher - system requirements & general questions

Hi all,
possibly we would like to use the SAP WebDispatcher as reverse proxy for
our SAP EP infrastructure. Our main goal is to secure accesses from the internet to the sap ep by installing the SAP WebDispatcher in a DMZ.
Could someone give me information about the hardware/system requirements
of the SAP WebDispatcher?
(supported operating systems, recommended CPU / Ram size, is a database necessary (if yes, which is supported))
Is it possible to restrict the requests to the SAP WebDispatcher from only
specific IPs or IP-Ranges?
Just for my curiosity: what's the implementation language of the SAP WebDispatcher.
Are there any important security vulnerabilities known?
Any help is really appreciated
Regards Karin

Hello,
Did you make some research in help.sap.com and sapservice.sap.com and the find button on SDN ? Much of the answers for your questions are there waiting for you to read them !
Anyway,
The supported OS are the same as Netweaver (Linux, Unixes and Windows), both 32 and 64 bit.
The hardware requirements are low, but depends obviously of the number of http requests to process per second. For instance we use a Linux x86 biprocessor blade with 2 GB ram, for a moderate load and the cpu load is lower than 3 %...
There is no database for the sap web dispatcher. what would be its use ??
Yes it is possible to filter IPs or IP-ranges. Check icm/HTTP/auth_xx parameter and http://help.sap.com/saphelp_nw04s/helpdata/en/b4/9aa8862e714e6db8e74e48e5d3283b/frameset.htm.
For the implementation language, the release information for a web dispatcher 7.0 running on Windows 2003 tells me :
compiled on NT 5.0 2195 Service Pack 4 x86 MS VC++ 13.10
So I guess the language shoul be C++.
Regards,
Olivier

Reverse proxy rule

Hi,
I have confiugure apache 2.2 as reverse proxy which will be interacting with my portal as well as ECC ITS. Everything is working fine but the problem is when user gives the path:
http://<hotst>/sap/bc/its/gui/sap/webgui he able to access logon page of ECC which i want to block.
I want one redirect rule which should block the request which come with request http://<host>/sap/bc/its/gui/sap/webgui through reverse proxy. It should allow only when request comes in this format :
http://<host>/sap([some cache])/bc/its/gui/sap/webgui. where [some_cache] is automatically generated by SAP.
What could be the syntax of rewrite rule.

User 2 layers of Reverse proxies to resolve the issue

Reverse Proxy in SOAMANAGER not working

SAP Environment: SAP Netweaver 7.01 SP3
Service Testing Tool: SOAPUI
Requirements: Redirect the end-point (serverA) in the WSDL of a web service created from an ABAP proxy to the load balancer
What I have done:
1. Defined a Reverse Proxy in SOAMANAGER to redirect from serverA:8010 to loadBalancer:80.
2. Tested the service and it worked fine.
3. To make sure the Reverse Proxy was working, I changed loadBalancer:80 to a server name that does not exist.
4. Tested the service again and it still worked.
Questions:
1. Found SAP help on Reverse Proxy but it does not explain all the fields. In the Reverse Proxy configuration, there is a Status field, any idea what value should be put there? I have left it blank.
2. Is there any other configuration needed for the Reverse Proxy to work?
3. Is there a way to check if the Reverse Proxy is working?
Any help will be appreciated.

Got the rever proxy to work. Below are the field values in the reverse proxy setting that has worked:
Reverse proxy name: <any name>
Incoming http header host name: server1.domain..company.com (get it from the end-point in WSDL)
Incoming ICM port: port (get it from the end-point in WSDL)
Substitute host name: server2.domain..company.com (has to be FQDN)
Substitute http port: 80 (in my case)
Substitute https port: (blank)
Additional path prefix: (blank)
Meta data protocol subsitution: http
Endpoint protocol subsitution: http
Status: active

Reverse Proxy - Apache vs SAP Web Dispatcher

Hi,
my config consists in a portal (EP7.0 - DB/CI + AS) and an ECC system (ECC 6.0 - DB/CI + AS).
Web developments are based on Abap Web Dynpro and are also located on ECC.
To ensure load balancing there are 2 web dispatchers : one on EP DB/CI, one on ECC DB/CI.
Those 2 systems are located in intranet. Intranet access are realized via http.
Moreover I need to open this solution to internet. I need a component to filter access in DMZ and ensure reverse proxy + https functions.
Technical target chain links are depicted below.
internet access : browser (https) -
> (https) reverse proxy in DMZ (http) -
> IS (Portal/ECC)
intranet access : browser (http) -
> IS (portal/ECC)
At the moment two application gateway solutions have been identified :
Apache (MOD_PROXY + MOD_HTTPS) - My configuration is based on Linux
SAP Web Dispatcher ("cascading" implementation as described in OSS note 740234)
I'm looking for PROs and CONs of those 2 solutions and I'm also seeking for the impact of ensuring https encryption/decryption at the application gateway level ("a priori" this usage is not transparent in term of server sizing - CPU/memory, do I require to implement an SSL accelerator ?).
Regards.
Frederic.

Hi,
PRO Webdispatcher:
- Supports SAP Java + ABAP
- Loadbalancing of SAP applications (stateful)
- Supports load balancing (saplb_* cookie)
- Free of costs
- easy to set up (up & running in 2 minutes)
- Supports HA solutions out-of-the-box (process HA)
- Filter + Rules to modify the requests
CONS Webdispatcher
- not a full reverse proxy
- Limited functionality
- one more server/solution (normaly, a company already does have a reverse proxy solution in place)
- limited user base (only SAP customers)
PRO Apache
- free
- widly in use
- full reverse proxy
- allows more complex filtering / rewriting
- can be used for more web solutions, reuse of existing apache reverse proxy
CONS Apache
- does not support SAP load balancing (connection to the message server port for load distribution)
- can be more complex to set up
- SAP specific technology / problems are more harder to fix (ABAP, Stateful connections, sap_lb*)
Short: both will server well as a reverse proxy.
Rule of thumb: If you go for Apache or Web Dispatcher should mainly depend on you current IT landscape. If you already do have an apache in use, use Apache. You already have the people / knowledge, try to foster it .
If you start from scratch and have SAP Logon Groups or many WebDynpro ABAP applications, go for the Web Dispatcher.
br,
Tobias

SAP Web Dispatcher for Portal reverse proxy

Hi Experts,
I am on EP6.0 SP20 and trying to use SAP web dispatcher as reverse proxy.
I followed the below web log to configure the web dispatcher.
[How to...Configure SAP Webdispatcher as a reverse proxy|How to...Configure SAP Webdispatcher as a reverse proxy]
I still have some problems logging into the Portal through the web dispatcher.
Web Dispatcher is in the DMZ not behind the firewall. We opened the port 80 only for Web dispatcher server.
We are getting an error in the browser,
http://<host of portal>.<domain name>:50000/irj/portal can not be recognized.
I have no clue to how to get rid of this error. any help will be greatly appreciated.
Regards,

Hi,
I do not know the exact ESS WebDynpro you are using but it may be possible that these WebDynpros use absolute URLs which of course do not point to the hostname and port of the Web Dispatcher.
There are several ways to circumvent this:
Please check http://help.sap.com/saphelp_nw04s/helpdata/en/62/5f374ff72c40478fcba2bb4fa79ddf/frameset.htm and add the parameters wdisp/add_client_protocol_header and (more important for you: wdisp/handle_webdisp_ap_header) to the WebDynpro configuration.
(A nice explenation why we have to use this can be found here: https://www.sdn.sap.com/irj/sdn/wiki?path=/display/bsp/using+proxies&)
another way would be to tell the J2EE engine directly that it is behind a WebDispatcher, by setting the ProxyMappings (http://help.sap.com/saphelp_nw70/helpdata/en/b8/437d46d4451e4c9ab756e272a1581d/frameset.htm)
Regards,
Holger.

WSSecurity - WebDispatcher(reverse proxy)

Hi All,
We are planning to implement webservices using PI 7.1 and would like to capitalise on the WSSecurity standard along with the Webdispatcher performing the reverse proxy functionality. Is there a standard procedure to do that? Where can we find more information in terms of the interoperability of WSSecurity with reverse proxy using SAP Netweaver. We do not want to use SSL. Is it a possiblity.
Thanks in advance.
Vedavyas

As I know, the Web Dispatcher is not able to validate WS security. Maybe tools from other vendors can do this?
A non-central adapter engine could be set up like this:
|| DMZ 1 || DMZ 2 ||
---> Web Dispatcher --> Adapter Engine --> PI
|| || ||
So the adapter engine could do the validation of WS security, before it leaves the DMZ.
Maybe you put the question also in the Security forum
Security
Regards
Stefan

Enterprise portal access using reverse proxy using Apache and webdispatcher

Hi Guys,
As requirement, we need to give solution to customer about Reverse proxy scenario. I am new to this part.
What we have think of to use Apache and Web dispatcher.
I tried to search documents and found some sdn links also but still i am not comfortable to go about.
Need suggestion and document if anyone has used so far.reverse proxy.
As basis person, we need to do all ( Apache installation, Apache configuration, Web dispatcher installation and configuration, integration with EP.)
It will helpful to me if i can get Apache installation, Apache configuration part and integration with EP, or web dispatcher, configuration etc.
Thanks,
Deepak

We used Netscaler for Reverse Proxy implementation and can assure you that network team performed most of the set ups. This was on EP 7.01.
From BASIS stand point it would be primarily Web Dispatcher Configuration.
Also refer the links I specified in another thread. There are several scenarios discussed there -
Re: Post values for userid and passowrd fields in logon page
http://wiki.sdn.sap.com/wiki/display/BSP/Using+Proxies
~ Dhanz

Help with Apache Reverse Proxy configuration with SAP Portal and SAP Webgui

Dear Experts,
I have an issue configuring Apache to work with SAP Portal and ERP webgui. Accessing Portal through Reverse Proxy is working fine. But the problem arises when we try to open an iView ERP webgui transaction page from Portal with the Reverse Proxy. Have anyone implemented similar requirements and could advice on the configuration required on the Apache side? Thank you

hi,
pls check the below links for reference:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/24396589-0a01-0010-3c8c-ab2e3acf6fe2
searchsap.techtarget.com/searchSAP/downloads/chapter-december.pdf
1)Learn to implement the reverse proxy filter and portal gateway in SAP Enterprise Portal 6.0 on Web Application Server 6.40.
https:/.../irj/sdn/nw-portalandcollaboration?rid=/webcontent/uuid/006efe7b-1b73-2910-c4ae-f45aa408da5b
.2 )Configuring the Portal for Your Reverse Proxy Filter Solution . ... This document describes the reverse proxy filter mechanism in SAP Enterprise ...
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/32ad9b90-0201-0010-3c8a-c900cd685f8f
3)have full reverse proxy functionality. Possibly. filter. requests. Internet ... Reverse proxy (optionally with authentication etc.) ...
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/c066c390-0201-0010-3cba-cd42dfbcc8be
Note:please reward points if solution found helpfull
Regards
Chandrakanth.k

Reverse Proxy and SAP NetWeaver 2004S

Dear Gurus,
I'd like to post a simple question.
I know that we can put a Reverse Proxy in front of SAP WebAS.
It can be Apache, SAP Web Dispatcher, etc.
I know we can proxypass like this:
http://reverse-proxy.abc.com/irj --> http://portal.abc.com/irj
However, is there a way so that we can proxypass like this (both AS-ABAP and AS-JAVA):
http://reverse-proxy.abc.com/xyz/irj --> http://portal.abc.com/irj
So far I've not succeeded in doing so, because the response I've got from SAP is always in the form of /irj/..... and not /xyz/irj/....
Is there any configuration in SAP to insert /xyz in front of /irj?
Many thanks in advance.

Hi Martin,
we do not have the answer yet, either.
I've read somewhere else, that it may be possible to do the proxy mapping, but we still can't change the root URI.
I believe this is what SAP calls reverse-proxy filter.
Example:
http://www.abc.com/irj/entry --> http://portal.abc.com:50000/irj/portal
So it's not really what we need.
I hope a guru from SAP will read this post and give an answer to us.
At the moment, we decide to dedicate another hostname for our portal.
regards,
Denny

SAP reverse Proxy Server Configuration

Hi All,
We wanted to configure reverse proxy in our landscape, I will explain how we have through of implementing it.
The request over the internet will be recieved by Our EP Server AAA which will act as a reverse proxy server and the request will be mapped to the Production EP server BBB which will serve the request.
I have found few links on the internet explaining the concept of DMZ but still I dont have much clear Idea about this.
If anyone can share any relevant link on, how this can be implemented will be really great.
Thanks,
Sharib Tasneem

Hi Sharib
Check the link below , may be useful
http://help.sap.com/saphelp_nwce10/helpdata/en/d8/00413549394a85b28bae68b715e6cb/content.htm
833960 - supported Application Gateway Configurations
1577357 - How To Change the URL Used to Access the Portal on NetWeaver 7.30
Regards
Pyari

SAP webdispatcher as reverse proxy

Similar Messages

Maybe you are looking for