Crossdomain.xml behind a Reverse Proxy

[MicheleDunham]

Hello,

I have a widget in SFV1.3 that's triggering the flash player to check the web server for a crossdomain.xml file.  I get this error message which indicates the flash player can't find the crossdomain.xml file...

RPCFault faultString = "Security error accessing url" faultcode="Channel.Security.Error" faultDetail = "Destination : Default HTTP"

My web server resides in the Intranet behind a reverse proxy (IIS7 ARR) in the DMZ.  I have a crossdomain file in wwwroot directory of the reverse proxy server (don't know if this is necessary) and the internal web / ArcGIS Server with R/RE rights for the IUSR accounts.  

When I look at the traffic in Fiddler at the time I invoke the widget, I see a 502 Error "Gateway inaccessible..."  See attached jpg.

The URL listed with the 502 Error is not the URL for the Reverse Proxy (gis.ventura.org) but is the URL for the internal web server (gisweb1:9112).  The Reverse Proxy expects to see gis.ventura.org  I don't know how the Flash Player got this URL (must have resolved it somehow off the Reverse Proxy), but I'm guessing there must be a way to override this in the SFV code so it can find the crossdomain.xml?  I'm also assuming it is necessary to add a routing rule for the crossdomain file in the Reverse Proxy.

If you have experience with this problem I would sincerely appreciate some guidance here...

Thanks,
Michele

[RobertScheitlin__GISP]

Michele,

   All your code and xml configuration files need to use the gis.ventura.org and not gisweb1:9112. You also need to add the rule to your reverse proxy server to redirect gis.ventura.org/crossdomain.xml to gisweb1:9112/crossdomain.xml. I use a reverse proxy in my configuration and a multi server configuration as well so I should be able to assist with this.

[MicheleDunham]

Hi Robert,

Here is some more info:

My widget calls a .NET / SOAP API web service on gisweb1.  The widget xml has a bunch of SOAP-based map service URLs which are read into an object and sent to the web service.  I guess you are saying that I can't use the internal web site name in the URLs even though they are never actually used or referenced in the actionscript?  So this means I have to route the web service back through the Reverse Proxy to get to the map services?

Thanks for your help.
Michele

[RobertScheitlin__GISP]

Michele,

   Yep, I do the same with my .Net web services.

[MicheleDunham]

Robert,

Thanks again!  It's working now!

Is it possible to mark this questioned as answered on this new forum?

Michele

[MichaelVolz]

Michele:

What exactly did you need to do in regards to the crossdomain.xml file in order to get past the 502 Error?

Did you need to specify a rule in the Reverse Proxy server for the crossdomain.xml file?  If so, which rule did you use to pass the crossdomain.xml file?

Your specific assistance is greatly appreciated.