Using WLS 8.1 as a Reverse Proxy Server as well as using SSL

Hi,
We have WebLogic server 8.1 installed and set-up as a Reverse Proxy Server. We would like it to serve pages over a secure internet connection (one way).
I have imported the SSL certificate which I received from Thawte. I have also configured the identity and Trust keystores for the server.
However, I am still unable to access the server over a secure connection.
I have logged into WebLogic Console and unticked Listen Port Enabled Port: 80; and ticked SSL Port Enabled and changed it to listen on Port:80? However, all this will mean is all our url's will need to preceded by 'https' I would prefer us to be able to still use 'http' which when requested redirects to 'https'
Not having been on any WebLogic courses, I am new to this and would appreciate any help or step by step guides people have.
Many Thanks,
Karl

Hi Raphael Chasse,
The LoadBalancer plugin can be used as a reverse proxy.
you could configure the loadbalancer.xml as below, where requests for app1 get redirected to server1 and app2 to server2.
<loadbalancer>
<cluster name="cluster1">
<instance disable-timeout-in-minutes="30" enabled="true" listeners="http://server1 name="i1"/>
<web-module context-root="/app1" disable-timeout-in-minutes="30" enabled="true"/>
<health-checker interval-in-seconds="1" timeout-in-seconds="60" url="/"/>
</cluster>
<cluster name="cluster2">
<instance disable-timeout-in-minutes="30" enabled="true" listeners="http://server2 name="i2"/>
<web-module context-root="/app2" disable-timeout-in-minutes="30" enabled="true"/>
<health-checker interval-in-seconds="1" timeout-in-seconds="60" url="/"/>
</cluster>
</loadbalancer>
This link talks more about the loadbalancer.xml file format http://docs.sun.com/source/817-5445/aglbdtd.html.
cheers
Vishwas

Similar Messages

How to configure SharePoint HNSC with a reverse proxy server so that HNSC Share Point URLs are not exposed to end users.

Could you please let me know how SharePoint HNSC can be configured with a reverse proxy server so that HNSC Share Point URLs are not exposed to end users.
In normal path based site collections/web applications, reverse proxy configuration can be done using alternate access mappings with Public URL = "proxy URL", internal = "HNSC Share Point URL" so that share point sends response back
to Public URL = "proxy URL".
In Host Named Site Collections, alternate access mappings are not supported. Each HNSC is designed to have only one URL in each zone. Zone is one of the five zones(Default,Intranet,Internet,Custom,Extranet) with each of which only one alternate
URL is associated. This is what we are able to get using power shell command "Set-SPSiteUrl", but this will not help us to get the response back to proxy URL after a request sent to share point because we could not find any mechanism in share
point HNSC to respond to a different URL(proxy URL). Consequently, Share Point URLs are exposed to external users.
Below share point article in MSDN blog is symmetrical to what we are observing with Share Point 2013 and Proxy Server. It mentions that internal HNSC URLs can’t be hidden using any proxy server. If hiding the internal Share Point URLS is a requirement,
it suggests to use a web application instead of host named site collections.
Though I’m also observing the same behavior with Share Point 2013 HNSC, Could you please confirm my understanding is correct.
http://blogs.msdn.com/b/kaevans/archive/2012/03/27/what-every-sharepoint-admin-needs-to-know-about-host-named-site-collections.aspx
Excerpt from above article-
"Host Named Site Collections Only Use One Host Name
Continuing on the discussion on AAMs and host named site collections, you cannot use multiple host names to address a site collection in SharePoint 2010. Because host-named site collections have a single URL, they do not support alternate access mappings and
are always considered to be in the Default zone. This is important if you are using a reverse proxy to provide access to external users. Products like Unified Access Gateway 2010 allow external users to authenticate to your gateway and access a site
as http://uag.sharepoint.com and forward the call to http://portal.sharepoint.com. Remember that URL rewriting is not permitted. Further, a site collection can only respond to one host name. This means if you are using a reverse proxy, it must forward the
calls to the same URL. If your networking team has a policy against exposing internal URLs externally, you must instead use web applications and extend the web application using an alternate access mapping."<u5:p></u5:p>

Hi Satish,
You are right that only one URL is allowed for each zone of the host-name site collections in both SharePoint 2010 and SharePoint 2013.
It is by design that each host-name site collection only support one URL for each zone.
The article below is about RTM version of SharePoint, and it is the same for SharePoint 2013 with the latest CU.
https://support.microsoft.com/en-us/kb/2826457
So to make the URL of HNSC not exposed to external users is not supported, you need to use path-based sites instead.
Best regards.
Thanks
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

HTTP tunneling and reverse proxy server

We're currently using Windows Media Services (WMS) to stream
video on our website. There is an option WMS to use the HTTP
protocol and to specify the port you'd like to use. This has
allowed us to stream video through our external firewall, through
our reverse proxy server, and through our internal firewall to our
media server. I've been trying for two days now to get Flash Media
Server (FMS) to do the same thing. For some reason the HTTP
tunneling (RTMPT) protocol doesn't appear to be acting like the
HTTP protocol that WMS is using. Anyone have some tips on this
configuration. I've scoured web resources and documentation as best
I could. Any help would be greatly appreciated.
Thanks.

To give a better picture, here's a more complete description of set up and goals
Static IP hits external interface of ASA. ASA has a static nat rule to forward it to my DMZ server.
DMZ server is running IIS 8. Here are what some of the sites look like.
jira.xxxxx.com -> 10.1.10.21 (ubuntu server) | port 80
email.xxxxx.com - > 10.1.10.16 (domain joined server 2012) port 80, 443
media.xxxxx.com -> 10.1.10.14 (domain joined server 2012) port 80, 443
other stuff like this -> 10.1.10.x port 80 or others
All of the A records for those domain names point to the static which routes to the ASA and then is NAT'd to the DMZ server.
What do I need to do in IIS to have those sites get directed to the proper internal locations?
Thanks!!

Reverse proxy server on top of load balancer

Hi ,
I have seen some customers with setup including Reverse Proxy Server on top of Load balancer with SSL accelerator configured with oracle apps 11i , my query is what is the use of configuring Reverse proxy server on top of Load balancer as load balancer can act as reverse proxy.
Thanks,
Puneeth

Hi;
Pelase see Steven Chan blog entery
In-Depth: Load-Balancing E-Business Suite Environments
http://blogs.oracle.com/stevenChan/2006/06/indepth_loadbalancing_ebusines.html
Also see:
11i Forms LoadBalancing question
Load Balancing for EBS R12
Check notes, i belive those are should gives u some answer
Regard
Helios

How to setup CSS as reverse proxy server without cache server

Hi, question regarding CSS capabilities.
Is there a way to setup CSS (11000 series or 11500) to act as a reverse proxy server without caching server in place? Or is it possible for CSS to cache contents on its own?
And what is disk space on CSS used for?
Thank you.

Thank you for clarification on disk usage on CSS. I have gone through sample config for reverse proxy caching
http://www.cisco.com/warp/customer/117/CSS_CEreverseproxy.html
Does this mean only way to have CSS to do reverse proxying is to have cache engine in conjunction with CSS?
Thank you again in advance.

DNS Resolution - Reverse Proxy Server

Hi,
I am deploying Reverse Proxy Server using ARR for publishing Lync 2013. I have added following servers in server farms:-
1. dialin.domain.com
2. meet.domain.com
3. lyncdiscover.domain.com
4. lyncweb.domain.com
5. wacsrv.domain.com (office web apps server)
I am confused over the following:-
1. My internal domain is .local, i.e. my front end server is fes.domain.local. In this case, how my reverse proxy server will resolve my internal server names? do I need to add static mapping using host file?
2. Will dialin, meet, lyncdiscover, lyncweb point to Front End Server?

Yes, you will use a host file or DNS zone on the internal DNS server (split DNS) to resolve the IP of the Front End from your IIS ARR box.
You will point dialin, meet, lyncdiscover to the front end server.
On the Front End server in topology builder override the External FQDN on the Lync Web Services to use the external name. (most likely lyncweb.domain.com or whatever you choose)
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer"
Georg Thomas | Lync MVP
Blog www.lynced.com.au | Twitter
@georgathomas
Lync Edge Port Check (Beta)

SAP reverse Proxy Server Configuration

Hi All,
We wanted to configure reverse proxy in our landscape, I will explain how we have through of implementing it.
The request over the internet will be recieved by Our EP Server AAA which will act as a reverse proxy server and the request will be mapped to the Production EP server BBB which will serve the request.
I have found few links on the internet explaining the concept of DMZ but still I dont have much clear Idea about this.
If anyone can share any relevant link on, how this can be implemented will be really great.
Thanks,
Sharib Tasneem

Hi Sharib
Check the link below , may be useful
http://help.sap.com/saphelp_nwce10/helpdata/en/d8/00413549394a85b28bae68b715e6cb/content.htm
833960 - supported Application Gateway Configurations
1577357 - How To Change the URL Used to Access the Portal on NetWeaver 7.30
Regards
Pyari

Reverse proxy server CMS certificate verification

Hi,
Is there a way to instruct the reverse proxy server (3.6 SP7) not to verify the CMS server certificate?
What we are trying to do is, setup a test CMS server with self signed certs installed on it, but don't want to install the CA cert for the same (above self signed cert) on the reverse proxy server.
thnx,
Alok

Sorry, but it's not very clear.
The CA cert for the self signed cert ???

Configuring Oracle Portal to Work with a Reverse Proxy Server

Hi,
I have an Oracle Portal 11g instance that works fine but I need to put behind a reverse proxy server.
I follow the instructions of chapter 6.6 of this link http://download.oracle.com/docs/cd/E15523_01/portal.1111/e10239/cg_advnc.htm#i1051122 with any problem, but when I tried to access to the portal/pls/portal page I get the following error:~
(WWC-00000)
;i=pls%2Forasso%2Forasso.wwsso_app_admin.fapp_process_login%3Fp_app_id%3D; Accept=text/html Accept-Charset=ISO-8859-1,utf-8;q=0.7,*;q=0.7 User-Agent=Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6 Oracle HTTPClient Version 10h X-Oracle-Device.Class=pcbrowser X-Oracle-Device.Name=HTML40 X-Oracle-Device.Orientation=landscape X-Oracle-Device.MaxDocSize=0 X-Oracle-Device.Secure=false PROVIDER=90163575;i=2;n=PORTAL%20CONTENT%20AREA;o=0;R=0; PROVIDER=641081930;i=2;n=DESIGN_TIME_PG;o=0;R=0; PORTLET=6,2237;v=641081930;b=2214;t=700;T=;D=Portal%20Builder%20banner;]=2;A=521_2214_641081930;p=6_2237_6_1_1;i=0;Y=0;e=0;d=0;h=0;a=0;^=0;R=0;c=0;C=0;Z=0;I=5;q=http://hostname:7777/portal/page/portal?_mode=10&_cpage_id=1&_csite_id=6&_cstyle_id=1&_cstyle_site_id=6&_ccalledfrom=1&_cmode=3&_ctabstring=Welcome&_cdisplay_name=Portal%20Builder;V=0; PORTLET=606;v=90163575;b=20;t=15;T=;D=Welcome;]=3;A=606_tabset_90163575;p=606_tabset_90163575;i=0;Y=0;e=1;d=1;h=1;a=1;^=1;R=0;c=0;C=0;Z=0;V=11;n=_ts.rid;t=constant;v=606; n=_ts.tid;t=constant;v=13; n=_ts.pid;t=constant;v=1; n=_ts.sid;t=constant;v=6; n=_ts.tp;t=constant;v=; n=_ts.ts;t=constant;v=Welcome; n=_ts.stid;t=constant;v=1; n=_ts.ssid;t=constant;v=6; n=_ts.m;t=constant;v=3; n=_ts.pr;t=constant;v=; n=_ts.sc;t=constant;v=; TEMPLATE=1;c=text/html;
#portal-rewrite?a=2;i=6,2237/portal-rewrite#
#portal-rewrite?a=2;i=606/portal-rewrite#
Could anyone help me solving this problem.
This is a very critical situation.
Thanks,
Regards,
rjc

The solution for this problema was put the proxy server name and IP in the database hosts.
In Oracle portal it's essencial that database could resolve the name of all componentes, like portal mid-tier, web cache, sso, proxy server, etc.
Regards,
rjc

I set up a reverse proxy server but the DOJO and auto complete dont work

I set up a reverse proxy server but the DOJO and auto completer don't work . Am I missing a configuration on the proxy server ?

Well it would help if you can provide some more details on your configuration/setup.

Reverse Proxy Server

I would like to know whether your Sun Java System Web server (used as a reverse proxy) has scripting option so that it would redirect requests to a web server which is down due to some reason to another backup web server.

If the primary origin server and backup origin server serve the same content, the load balancing functionality introduced in Proxy 4.0 may do what you want.
If you configure multiple origin servers for a route, Proxy will distribute load among them. If one of the origin servers goes offline, Proxy will log a message to its errors log and stop sending requests to that origin server. Proxy will periodically check the origin server and resume routing requests to it when it comes back online.
You can configure this using the admin GUI or using the set-origin-server Route SAF in the obj.conf configuration file.
If the backup origin server doesn't mirror all the content of the primary origin server but exists only to serve up customized errors pages, you may instead want to configure Proxy to serve that content by customizing Proxy's 502 Bad Gateway and 504 Gateway Timeout error pages.

Disabling normal proxy function in a reverse-proxy server..

If you want to disable the capability to use the server as a "normal" forward proxy and only allow reverse proxying. Based on a section in the admin manual
These additional automatic mappings are for users who connect to the reverse
proxy as a normal server. The first mapping is to catch users connecting to the
reverse proxy as a regular proxy. Depending on the setup, usually the second is the
only one required, but it does not cause problems in the proxy to have them both.
The first mapping reffered to is a mapping rule:
"http://external.ip.address" => "http://proxyied.server.ip"
The second is of the form:
"/" => "http://proxyied.server.ip"
Would it be enough to just have the "/" rule, which it kind of sounds like i the admin text?

You can use the admin GUI to turn on access control and to create/modify
ACLs. Once you save and apply changes, and compare the new obj.conf
to the previous one (do a backup first, if you prefer) you can see a new
PathCheck "check-acl" directive present. You need to wrap this directive
in a <Client> tag:
Here's how to use <Client> tags:
http://docs.sun.com/app/docs/doc/819-5494/6n7isltea?l=ko&a=view

Is apache reverse proxy server/F5 Load Balancer support to Sharepoint 2010

Hi ,
I have two tool for implement reverse proxy
-Apache reverse proxy
-F5 load balancer
Kindly let me know sharepoint 2010 support this,if support then how to configured.
Hasan Jamal Siddiqui(MCTS,MCPD,ITIL@V3),Sharepoint and EPM Consultant,TCS
|
| Twitter

Thanks Sebastian,
Please let me know,I have only NTLM Authentication,we are not using FBS.
For NTLM authentication what we need to do.
Hasan Jamal Siddiqui(MCTS,MCPD,ITIL@V3),Sharepoint and EPM Consultant,TCS
|
| Twitter

CUP (reverse) proxy server configuration

Hi All,
I am trying to get the CUP application URL (configuration -> workflow -> SMTP server) that is inserted in the emails to be replaced by our reverse proxy URL.
Does anyone happen to know whether there is a setting somewhere, most likely a config tool property sheet, which enables to set a proxy url?
Thanks in advance.
George

OK, Got feedback from GRC development team, has been identified as bug, will be fixed in SP14 for December 2010.

Reverse Proxy Server and gzip compressed pages

Hi ALL!
Does Proxy Server in reverse proxy configuration works with gzip compressed pages? How it will serve different browser versions which are supports compression differently.
Thanks. Happy New Year!

Hi,
Domain relaxing will not work in this setting, ref. RFC 2109 http://www.ietf.org/rfc/rfc2109.txt
What you need to do is to create a DNS alias for the portal on domain [something].[company].com. Then create a portal component which returns the MYSAPSSO2 cookie and create an URL iView for it with the DNS alias hostname and add it to the default framework page. In this way, persons logging in will get the MYSAPSSO2 cookie for both domains [sap subdomain].[network domain].local and [network domain].[company].com
Regards
Dagfinn

Using WLS 8.1 as a Reverse Proxy Server as well as using SSL

Similar Messages

Maybe you are looking for