One-way-synchronisation using Distributed Collaboration?

945
4
01-18-2021 12:35 AM
MichaelNüßlein
New Contributor III

We'd like to put a master-Portal in the intranet and a slave-Portal in the DMZ.

Is it possible to synchronise the slave using Data-Collaboration, only opening Ports from Intranet to DMZ?

There should be no datastream-initiation from DMZ to intranet.

Klaus

Tags (2)
0 Kudos
4 Replies
CraigRussell
Esri Contributor

Hi Klaus

In this instance your DMZ Portal will be the host and your Intranet Portal would be the guest.  The guest initiates all communication (outbound over port 443) whether it is two way (push/pull) or one way (push only).

Craig

MichaelNüßlein
New Contributor III

Hi Craig

thank you for your answer.

So this means:

We can run a high-available Portal (two Portals with loadbalancer) as host which will receive updates from high-available Portal (two Portals with loadbalancer) as guest?

 

Klaus

 

0 Kudos
MichaelNüßlein
New Contributor III

The communication is bidirectional:

when uploading the invite-file and also when uploading the response-file, in both cases, the https-certificate of the other server is checked.
Or can i tweak this, that it will not be checked?

0 Kudos
CraigRussell
Esri Contributor

Establishing trust is not the same as bidirectional communication.  The invitation cannot be accepted if the SSL certificate of the host isn't trusted; if you're getting an error then you'll have to import the root/intermediate certificates into your Portal - Configuring the portal to trust certificates from your certifying authority—Portal for ArcGIS | Docu...

0 Kudos