How to configure ArcGIS Server and Portal with Webadaptor behind ReverseProxy?

8394
17
Jump to solution
07-24-2017 11:38 PM
DirkHoffmeister
New Contributor

Hi, 

we have a single machine deployment and want to easily use the new web mapping applications (and maybe extent them later). Own services must be secured due to copyright issues by the own Portal, so AGOL is not an option.

This all runs on a virtual machine with WinServer and IIS. 

I have installed 

ArcGIS Server 10.5.1 federated by Portal

ArcGIS Portal 10.5.1 

WebAdaptor (arcgis) configured for both above 

All SSL certificates are running and Reverse Proxy Server is working

Now, Webapplication from the Portal with content from ArcGIS online is running on a different webserver, but I cannot add services from ArcGISServer to Portal and thus to any webapplication. Likewise, I want to use specific services without Portal in small web applications. Thus, I need somehow to get the rest connection but this is currently hidden in the company network. 

What to do? What might be wrong? 

EDIT: Do I need two Webadaptors and two reverse Proxy forwarding, as internally in the company everything is working?

Kind regards. 

0 Kudos
1 Solution

Accepted Solutions
JonathanQuinn
Esri Frequent Contributor

You can't use the same Web Adaptor for Portal and Server:

Common problems and solutions—Portal for ArcGIS (10.5.x) | ArcGIS Enterprise 

I'd say that's the first thing to fix before continuing.

View solution in original post

17 Replies
JonathanQuinn
Esri Frequent Contributor

You can't use the same Web Adaptor for Portal and Server:

Common problems and solutions—Portal for ArcGIS (10.5.x) | ArcGIS Enterprise 

I'd say that's the first thing to fix before continuing.

View solution in original post

MichaelRobb
Regular Contributor II

Not quite correct.  you CAN and I have made it work on 10.4 10.5 and 10.5.1, but it is not standard practice nor is it a supported workflow.

0 Kudos
DirkHoffmeister
New Contributor

Hi

Yes, that was my mistake. Now the basic deployment is working with a Federated Server and a Portal with Reverse Proxy!

However, there is still the question of having a web service on the arcgis server, which is available and set to public in Portal, but still not available outside the companies network. Likewise, how to get to services from the server by JS-Applications, such as this here. Does the ArcGIS Server with Webadaptor (https://.......com/arcgissrv/) also need a Reverse Proxy for that? 

Kind regards.

0 Kudos
JonathanQuinn
Esri Frequent Contributor

You'll need a web server sitting somewhere accessible by the public where your reverse proxy will run.  Then, you'll configure a Web Context URL following the link in Jesús Manuel de Diego Alarcón‌'s post.  Users can reach the reverse proxy, (https://myserver.domain.com/arcgisrv/rest), which will send the request to the backend server.

Single-machine deployment with reverse proxy server—Installation Guides (10.5) | ArcGIS Enterprise 

by Anonymous User
Not applicable

Dear Dirk

Did you checked this entry:

Using a reverse proxy server with ArcGIS Server—ArcGIS Server Administration (Linux) | ArcGIS Enterp... 

Can you access to the ArcGIS Server REST entry point?

Regards

Jesús de Diego

DirkHoffmeister
New Contributor

Hi

Thanks. It was not so clear if I need a second reverse proxy (first on portal) for the server itself.

I will check.

Kind regard.  

0 Kudos
DirkHoffmeister
New Contributor

Dear all, 

current status is that the portal is running with the federated server as it should. 

Now we have :

Portal (https://arcgis.internalsubdomain.domain:7443/arcgis/home) > Web Adaptor (called "arcgis", thus https://arcgis.internalsubdomain/arcgis/home) > ReverseProxy (https://arcgis.domain.com) all working with SSL, Web Context URL set to subdomain "https://arcgis.domain.com/arcgis"

Problem are services directly started on the server, which are still only available inside the company. 

Server (https://arcgis.internalsubdomain.domain:6443/arcgis/rest) > Web Adaptor (called "arcgissrv", thus https://arcgis.internalsubdomain.com/arcgissrv/rest) > Reverse Proxy (NOT WORKING COMPLETLY) (https://arcgissrv.domain.com) with SSL, Web Context URL set to  "https://arcgissrv.domain.com/arcgissrv"

Problem is that the latest webpage (server Rest webpage by reverse proxy) shows the REST starting page, but without images and links are wrong. The links lead to REST sites with an invalid URL with Code 400. Path of a service looks like: https://argissrv.domain.com/arcgissrv/rest/services/

Might there be any port blocking internal problem??

Kind regards.

0 Kudos
JonathanQuinn
Esri Frequent Contributor

What path to the links lead to?  Do they match the Web Context URL you set?

0 Kudos
DirkHoffmeister
New Contributor

Yes, they do. 

Web Context URL set to  "https://arcgissrv.domain.com/arcgissrv"

Invalid path looks like: "https://argissrv.domain.com/arcgissrv/rest/services/testservice"

Internal working path: "https://arcgis.subdomain.domain.com:6443/arcgis/rest/testservice"

0 Kudos