nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How to configure ArcGIS Server and Portal with Webadaptor behind ReverseProxy?

DirkHoffmeister

Hi,

we have a single machine deployment and want to easily use the new web mapping applications (and maybe extent them later). Own services must be secured due to copyright issues by the own Portal, so AGOL is not an option.

This all runs on a virtual machine with WinServer and IIS.

I have installed

ArcGIS Server 10.5.1 federated by Portal

ArcGIS Portal 10.5.1

WebAdaptor (arcgis) configured for both above

All SSL certificates are running and Reverse Proxy Server is working

Now, Webapplication from the Portal with content from ArcGIS online is running on a different webserver, but I cannot add services from ArcGISServer to Portal and thus to any webapplication. Likewise, I want to use specific services without Portal in small web applications. Thus, I need somehow to get the rest connection but this is currently hidden in the company network.

What to do? What might be wrong?

EDIT: Do I need two Webadaptors and two reverse Proxy forwarding, as internally in the company everything is working?

Kind regards.

Encontre mais publicações marcadas com

Accepted answers

JonathanQuinn

You can't use the same Web Adaptor for Portal and Server:

Common problems and solutions—Portal for ArcGIS (10.5.x) | ArcGIS Enterprise

I'd say that's the first thing to fix before continuing.

All comments

JonathanQuinn

You can't use the same Web Adaptor for Portal and Server:

Common problems and solutions—Portal for ArcGIS (10.5.x) | ArcGIS Enterprise

I'd say that's the first thing to fix before continuing.

DirkHoffmeister

Yes, that was my mistake. Now the basic deployment is working with a Federated Server and a Portal with Reverse Proxy!

However, there is still the question of having a web service on the arcgis server, which is available and set to public in Portal, but still not available outside the companies network. Likewise, how to get to services from the server by JS-Applications, such as this here. Does the ArcGIS Server with Webadaptor (https://.......com/arcgissrv/) also need a Reverse Proxy for that?

Kind regards.

Anonymous User

Dear Dirk

Did you checked this entry:

Using a reverse proxy server with ArcGIS Server—ArcGIS Server Administration (Linux) | ArcGIS Enterprise

Can you access to the ArcGIS Server REST entry point?

Regards

Jesús de Diego

JonathanQuinn

You'll need a web server sitting somewhere accessible by the public where your reverse proxy will run. Then, you'll configure a Web Context URL following the link in Jesús Manuel de Diego Alarcón‌'s post. Users can reach the reverse proxy, (https://myserver.domain.com/arcgisrv/rest), which will send the request to the backend server.

Single-machine deployment with reverse proxy server—Installation Guides (10.5) | ArcGIS Enterprise

DirkHoffmeister

Thanks. It was not so clear if I need a second reverse proxy (first on portal) for the server itself.

I will check.

Kind regard.

DirkHoffmeister

Dear all,

current status is that the portal is running with the federated server as it should.

Now we have :

Portal (https://arcgis.internalsubdomain.domain:7443/arcgis/home) > Web Adaptor (called "arcgis", thus https://arcgis.internalsubdomain/arcgis/home) > ReverseProxy (https://arcgis.domain.com) all working with SSL, Web Context URL set to subdomain "https://arcgis.domain.com/arcgis"

Problem are services directly started on the server, which are still only available inside the company.

Server (https://arcgis.internalsubdomain.domain:6443/arcgis/rest) > Web Adaptor (called "arcgissrv", thus https://arcgis.internalsubdomain.com/arcgissrv/rest) > Reverse Proxy (NOT WORKING COMPLETLY) (https://arcgissrv.domain.com) with SSL, Web Context URL set to "https://arcgissrv.domain.com/arcgissrv"

Problem is that the latest webpage (server Rest webpage by reverse proxy) shows the REST starting page, but without images and links are wrong. The links lead to REST sites with an invalid URL with Code 400. Path of a service looks like: https://argissrv.domain.com/arcgissrv/rest/services/

Might there be any port blocking internal problem??

Kind regards.

JonathanQuinn

What path to the links lead to? Do they match the Web Context URL you set?

DirkHoffmeister

Yes, they do.

Web Context URL set to "https://arcgissrv.domain.com/arcgissrv"

Invalid path looks like: "https://argissrv.domain.com/arcgissrv/rest/services/testservice"

Internal working path: "https://arcgis.subdomain.domain.com:6443/arcgis/rest/testservice"

JustinNettleton1_0-1738884805926.png

JustinNettleton1_1-1738885022820.png

Callback.jpg

JonathanQuinn

By setting a Web Context URL, you're telling Server to always send back that URL when clients reach the REST endpoint. The behavior you see is expected. Is https://argissrv.domain.com/arcgissrv only resolvable outside of your network? Does it work externally and not internally?

MichaelRobb

Not quite correct. you CAN and I have made it work on 10.4 10.5 and 10.5.1, but it is not standard practice nor is it a supported workflow.

ChadKopplin

Is this issue still open? If so, we have a webadaptor, with a Federated Arcgis Server/Portal. We imported an SSL cert on the webadaptor (to both the root and the site), then we imported the same Cert to the Portal, both the root/intermediate. This was fine to pull our map services, but we were not able to use the process services in portal like "Generate". We had to import the cert onto the ArcGIS Server Manager as well, then we were able to have a clear path all the way through. Also, we had to create a cert with the CN = <the server name>, and the Subject Alternative names = <qualified URL name>

= <fully server name>

= <short server name>

I hope this helps.

Chad

Participe da Conversa

Membros conectados podem postar, seguir atualizações e mais. Novo aqui? Registre uma conta gratuita.

Links Rápidos

Community Help
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.