topic Re: PROXY SETTINGS IN DMZ in ArcGIS JavaScript Maps SDK Questions

PROXY SETTINGS IN DMZ

cadgism — Sun, 12 Dec 2021 01:47:14 GMT

I am using a proxy to consume some secured layers in ArcGIS Javascript API. Everything is working fine locally, meaning when the machine is inside LAN

When accessing it through DMZ the application produce a pop-up from the Arcgis Server for Authentication (username, password). It works fine when supplied the credentials. But not going through proxy. producing the following error:-

How can I solve this pplease ???

[SocketException (0x274c): A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 00.00.00.00:6080]
   System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress) +185
   System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Exception& exception) +496

[WebException: Unable to connect to the remote server]
   System.Net.HttpWebRequest.GetResponse() +1399
   proxy.doHTTPRequest(String uri, String method, NetworkCredential credentials) +243
   proxy.getNewTokenIfCredentialsAreSpecified(ServerUrl su, String reqUrl) +947
   proxy.ProcessRequest(HttpContext context) +3086
   System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +188
   System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step) +48
   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +71‍‍‍‍‍‍‍‍‍‍‍‍

Re: PROXY SETTINGS IN DMZ

RobertScheitlin__GISP — Wed, 28 Feb 2018 13:51:06 GMT

cadgis,

Are you using urls that are for the LAN or urls that are allowed to pass through the DMZ? I always use my public urls in my app and my proxy.config.

Re: PROXY SETTINGS IN DMZ

cadgism — Sun, 12 Dec 2021 01:47:17 GMT

Robert Scheitlin, GISP, Thanks for replying.

yes I am using all public urls in proxy.config

Even apart from the application when i try to generate token manuallay the status is as follow :-

http://LAN:6080/arcgis/tokens - works
http://DMZ:6080/arcgis/tokens - works
http://lanproxy/dotnet/proxy.ashx?http://LAN:6080/arcgis/tokens - Error (Permisiion Denied)
http://lanproxy/dotnet/proxy.ashx?http://DMZ:6080/arcgis/tokens - Error
http://DMZproxy/dotnet/proxy.ashx?http://DMZ:6080/arcgis/tokens - Error‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: PROXY SETTINGS IN DMZ

RobertScheitlin__GISP — Wed, 28 Feb 2018 18:14:08 GMT

You really need to use WebAdaptor and the WebApadator urls that do not contain the :6080 port number.

Re: PROXY SETTINGS IN DMZ

cadgism — Wed, 28 Feb 2018 18:21:39 GMT

It is the port problem that creates the error ?

Though i am going to read about it, just curiosity please , Can I install WebApadator online without affecting any services.??

Re: PROXY SETTINGS IN DMZ

RobertScheitlin__GISP — Wed, 28 Feb 2018 18:25:49 GMT

No the port number is not the man issue but could contribute to it. Do you have the urls in your proxy.config with the port number as well? Adding the Web Adaptor will not affect your services. It just allows you t use a url that does not contain the port number.

Re: PROXY SETTINGS IN DMZ

cadgism — Sun, 12 Dec 2021 01:47:19 GMT

This is how my proxy.config looks like..

<ProxyConfig allowedReferers="*"             
          mustMatch="false">    

<serverUrls>        

<serverUrl url="http://DMZ:6080/arcgis/rest/services/myQuery"
     matchAll="false"                                    
     username="user"                                     
     password="123">     
</serverUrl>     

</serverUrls>

</ProxyConfig>



<!-- See https://github.com/Esri/resource-proxy for more information -->‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Re: PROXY SETTINGS IN DMZ

RobertScheitlin__GISP — Sun, 12 Dec 2021 01:47:22 GMT

Cadgis,

Well my working proxy.config looks like this:

<?xml version="1.0" encoding="utf-8" ?>
<ProxyConfig allowedReferers="*" mustMatch="true" logFile="proxylog.txt" logLevel="Info">
    <serverUrls>
      <serverUrl url="http://gis.calhouncounty.org" matchAll="true"/>
....‍‍‍‍‍

Notice my much less specific url and the matchAll="true"

Re: PROXY SETTINGS IN DMZ

cadgism — Thu, 01 Mar 2018 06:00:54 GMT

Robert Scheitlin, GISP, Thanks for replying.

Not working still, though i did not make the web-adopter thing. It's working perfect in intranet when all the urls are changed to intranet.

Re: PROXY SETTINGS IN DMZ

RobertScheitlin__GISP — Thu, 01 Mar 2018 13:47:13 GMT

cadgis,

Do you have access to your REST service directory using the external url from outside your intranet? This is sounding more and more like an IT dept firewall issue.

Re: PROXY SETTINGS IN DMZ

cadgism — Thu, 01 Mar 2018 15:29:59 GMT

Robert Scheitlin, GISP

Yes, I have access to this directory and can see the services from browser.

 http://DMZ-ADDRESS:6080/arcgis/rest/services ‍

Re: PROXY SETTINGS IN DMZ

RobertScheitlin__GISP — Thu, 01 Mar 2018 15:32:49 GMT

now that you have the web adaptor can you use the dmz address with out the port number?

Re: PROXY SETTINGS IN DMZ

cadgism — Thu, 01 Mar 2018 15:39:40 GMT

No Not yet ..Did not make the webadator yet...may be i will install and come back.