How to configure ArcGIS Server and Portal with Webadaptor behind ReverseProxy?

[DirkHoffmeister]

Hi, 

we have a single machine deployment and want to easily use the new web mapping applications (and maybe extent them later). Own services must be secured due to copyright issues by the own Portal, so AGOL is not an option.

This all runs on a virtual machine with WinServer and IIS. 

I have installed 

ArcGIS Server 10.5.1 federated by Portal

ArcGIS Portal 10.5.1 

WebAdaptor (arcgis) configured for both above 

All SSL certificates are running and Reverse Proxy Server is working

Now, Webapplication from the Portal with content from ArcGIS online is running on a different webserver, but I cannot add services from ArcGISServer to Portal and thus to any webapplication. Likewise, I want to use specific services without Portal in small web applications. Thus, I need somehow to get the rest connection but this is currently hidden in the company network. 

What to do? What might be wrong? 

EDIT: Do I need two Webadaptors and two reverse Proxy forwarding, as internally in the company everything is working?

Kind regards. 

[JonathanQuinn · Accepted solution]

You can't use the same Web Adaptor for Portal and Server:

Common problems and solutions—Portal for ArcGIS (10.5.x) | ArcGIS Enterprise 

I'd say that's the first thing to fix before continuing.

[MichaelRobb]

Not quite correct.  you CAN and I have made it work on 10.4 10.5 and 10.5.1, but it is not standard practice nor is it a supported workflow.

[DirkHoffmeister]

Hi

Yes, that was my mistake. Now the basic deployment is working with a Federated Server and a Portal with Reverse Proxy!

However, there is still the question of having a web service on the arcgis server, which is available and set to public in Portal, but still not available outside the companies network. Likewise, how to get to services from the server by JS-Applications, such as this here. Does the ArcGIS Server with Webadaptor (https://.......com/arcgissrv/) also need a Reverse Proxy for that? 

Kind regards.

[JonathanQuinn]

You'll need a web server sitting somewhere accessible by the public where your reverse proxy will run.  Then, you'll configure a Web Context URL following the link in Jesús Manuel de Diego Alarcón‌'s post.  Users can reach the reverse proxy, (https://myserver.domain.com/arcgisrv/rest), which will send the request to the backend server.

Single-machine deployment with reverse proxy server—Installation Guides (10.5) | ArcGIS Enterprise 

[Anonymous User]

Dear Dirk

Did you checked this entry:

Using a reverse proxy server with ArcGIS Server—ArcGIS Server Administration (Linux) | ArcGIS Enterp... 

Can you access to the ArcGIS Server REST entry point?

Regards

Jesús de Diego

[DirkHoffmeister]

Hi

Thanks. It was not so clear if I need a second reverse proxy (first on portal) for the server itself.

I will check.

Kind regard.  

[DirkHoffmeister]

Dear all, 

current status is that the portal is running with the federated server as it should. 

Now we have :

Portal (https://arcgis.internalsubdomain.domain:7443/arcgis/home) > Web Adaptor (called "arcgis", thus https://arcgis.internalsubdomain/arcgis/home) > ReverseProxy (https://arcgis.domain.com) all working with SSL, Web Context URL set to subdomain "https://arcgis.domain.com/arcgis"

Problem are services directly started on the server, which are still only available inside the company. 

Server (https://arcgis.internalsubdomain.domain:6443/arcgis/rest) > Web Adaptor (called "arcgissrv", thus https://arcgis.internalsubdomain.com/arcgissrv/rest) > Reverse Proxy (NOT WORKING COMPLETLY) (https://arcgissrv.domain.com) with SSL, Web Context URL set to  "https://arcgissrv.domain.com/arcgissrv"

Problem is that the latest webpage (server Rest webpage by reverse proxy) shows the REST starting page, but without images and links are wrong. The links lead to REST sites with an invalid URL with Code 400. Path of a service looks like: https://argissrv.domain.com/arcgissrv/rest/services/

Might there be any port blocking internal problem??

Kind regards.

[JonathanQuinn]

What path to the links lead to?  Do they match the Web Context URL you set?

[DirkHoffmeister]

Yes, they do. 

Web Context URL set to  "https://arcgissrv.domain.com/arcgissrv"

Invalid path looks like: "https://argissrv.domain.com/arcgissrv/rest/services/testservice"

Internal working path: "https://arcgis.subdomain.domain.com:6443/arcgis/rest/testservice"