reverse proxy & web adapter

Question

looks like web adapter is now replacing reverse proxies that were required in 10.0.

However, our reverse proxy (Apache2) is also a gateway so we can host several http & https sites on a single Public IP, so we have to keep it.

internet
...|
...|
Apache2 (web server) (gateway)
...|
...|
..IIS (web adapter) -- (GIS Server)

IIS, web adapter & ArcGIS server all on the same machine.

In my case, the web adapter just hides the port 6443 from external users? Will this work?
Yes, I know LAN server -to- server https isn't necessary, but 10.0 server did not like authoring tokens over http, even though they were only http to the rev. proxy, then https to client.

https://gis.ourdomain.com/arcgis/rest/services <--external facing FQDN

reverse proxy to:

https://arcgis101server/arcgis/rest/services <--web adapter hiding port 6443 that GIS server is listening on

Thanks!

danbecker · Answer

I'm also interested in this question...
We have an ArcGIS Server installation behind a firewall. The plan was to use a reverse proxy to direct traffic on port 80 to the ArcGIS Server on port 6080 (or 6443 if SSL secure). If this is configured, is the web adaptor even necessary?

exactly my question. we cannot get rid of apache2 reverse proxy as it re-directs port80 and port443 traffic internal LAN ip's based on URL.

ErikEngstrom · Answer

I'm also interested in this question...
We have an ArcGIS Server installation behind a firewall. The plan was to use a reverse proxy to direct traffic on port 80 to the ArcGIS Server on port 6080 (or 6443 if SSL secure). If this is configured, is the web adaptor even necessary?

KARIMLABIDI_1-1779462036464.png

danbecker · Answer

after a little more research, looks like web adapter isn't always necessary:
http://forums.arcgis.com/threads/37553-Does-Web-Adaptor-support-Apache?p=132799&viewfull=1#post132799

I guess my reverse proxy is already hiding :6443 and doesn't fwd any /manager traffic to the gis server, so it also disables manager login from web.

Guess I don't see the point of installing it in my case...anyone disagree?

KARIMLABIDI_0-1779461956170.png