topic Reverse Proxy and ArcGIS Server 10.1 in ArcGIS Enterprise Questions

Reverse Proxy and ArcGIS Server 10.1

JeffWard — Tue, 29 Jan 2013 17:18:20 GMT

I have a reverse proxy web server set up that worked with ArcGIS Server 10.0 and served up several applications. I used this technical article to set it up. I have now upgraded to ArcGIS Server 10.1 and I am having problems getting the reverse proxy server to connect to my ArcGIS Server. I have Apache running on the reverse proxy machine, so the way I understand it, I am unable to use the Web Adaptor (submitted an idea here so vote for it).

Is there anyone out there in my situation that has their reverse proxy up and running? If I remember right, I had to set up a publisher connection to ArcGIS server through my reverse proxy machine and set up several folders. Is that still the case?

I have a simple flex viewer app working but I can only see my operational layers when I use the localhost address. I get the following error when I go through either my reverse proxy machine or the intranet:

[INDENT]Parcel Query Layer layer failed to load: Fault code: Channel.Security.Error
Fault info: Security error accessing url
Fault details: Destination: DefaultHTTP
[/INDENT]
The esri imagery basemap shows up fine, just my services don't show.

I would be very grateful for any help, tech support is not responding as quickly as I would like.

Thanks,

Re: Reverse Proxy and ArcGIS Server 10.1

DeminHu — Wed, 30 Jan 2013 12:54:29 GMT

I have two servers areuing reverse proxy (https, because my boss like AD logins).

My system ilike the following :
Server name : testserver,
with reverse proxy server : gis.comany.com
Two websites under IIS : 443: https, 80:http
Configure ArcGIS WebAdaptor with 443.
go https://gis.comany.com/arcgis/admin ->security->config->update : set http and https for GIS_Server, http and https for Web Adaptor ( or http://testserver:6080/arcgis/admin ->security->config->update)

For the intranet access : http://testserver:6080/argis..., https://testserver:6443/argis... http://testserver/apps...
For the internet access: https://gis.comany.com/ arcgis... https://gis.comany.com/apps....

we could use the windows login (AD) for map services .
By feafult, if the applications is accessed with https, all map services are using https.

Re: Reverse Proxy and ArcGIS Server 10.1

JeffWard — Wed, 30 Jan 2013 13:55:04 GMT

Thanks for the reply.

Are you putting the web adaptor on the gis.comany.com (reverse proxy) machine? We are trying to get it configured now using a different web server running IIS instead of Apache.

Re: Reverse Proxy and ArcGIS Server 10.1

DeminHu — Wed, 30 Jan 2013 19:59:04 GMT

what we did :

1. ArcGIS server, Web Adaptor , Web Server (IIS) are in the same machine , is inside network.
the reverse proxy server ( gis.company.com) is in DMZ.

Please see the following link and my attachment

http://resources.arcgis.com/en/help/main/10.1/index.html#/Firewalls_and_ArcGIS_Server/015400000431000000/

2. web adaptor is configured with 443 , https
we have two sites under web server: 443 with https, it could be accessed on the internet by https://gis.comapny.com
the other site is 80 with http, for intranet.
actully you can use one site, because we need to deploy applications for both intrant and internet, so I personaly prefer two sites with different physical path and application pool, different ports.

In my work environment, the preoxy server is configured by network team.

Don't forget to configure http and Https for both ArcGIS Server and web Adaptor

Re: Reverse Proxy and ArcGIS Server 10.1

AlbertoAloe — Mon, 14 Oct 2013 09:29:45 GMT

Demin,
how about the certificate you are using in your IIS ? Is it the self signed one ?

I have an ArcGIS server 10.1 in DMZ (same machine with IIS and web adaptor) and currently is set for http/80 only. I would like to set up SSL but my netowrk guys told me that I have to use a proxy server because I cannot get a valid certificate for my IIS (but still investigating this issue).

my question is: if I used a reverse proxy and I cannot have a valid certificate for the server would I run into the issues mentioned here http://support.esri.com/fr/knowledgebase/techarticles/detail/40694 where it is stated that you must have have a valid certificate between proxy server and webserver ?

Thanks

Alberto

Re: Reverse Proxy and ArcGIS Server 10.1

AlbertoAloe — Mon, 14 Oct 2013 17:28:12 GMT

I was just rereading my own post.......obviously when I'm saying "proxy server" I mean "reverse proxy server"

Alberto