Reverse Proxy and ArcGIS Server 10.1

3047
5
01-29-2013 09:18 AM
JeffWard
Occasional Contributor III
I have a reverse proxy web server set up that worked with ArcGIS Server 10.0 and served up several applications.  I used this technical article to set it up.  I have now upgraded to ArcGIS Server 10.1 and I am having problems getting the reverse proxy server to connect to my ArcGIS Server.  I have Apache running on the reverse proxy machine, so the way I understand it, I am unable to use the Web Adaptor (submitted an idea here so vote for it).

Is there anyone out there in my situation that has their reverse proxy up and running?  If I remember right, I had to set up a publisher connection to ArcGIS server through my reverse proxy machine and set up several folders.  Is that still the case?

I have a simple flex viewer app working but I can only see my operational layers when I use the localhost address.  I get the following error when I go through either my reverse proxy machine or the intranet:

[INDENT]Parcel Query Layer layer failed to load: Fault code: Channel.Security.Error
Fault info: Security error accessing url
Fault details: Destination: DefaultHTTP
[/INDENT]
The esri imagery basemap shows up fine, just my services don't show.


I would be very grateful for any help, tech support is not responding as quickly as I would like.

Thanks,
Jeff Ward
Summit County, Utah
Tags (2)
0 Kudos
5 Replies
DeminHu
New Contributor
I have two servers areuing reverse proxy (https, because my boss like AD logins).

My system ilike the following :
Server name :  testserver,
with reverse proxy server : gis.comany.com
Two websites under IIS : 443: https,   80:http
Configure ArcGIS WebAdaptor with 443.
go  https://gis.comany.com/arcgis/admin ->security->config->update : set  http and https  for GIS_Server, http and https for Web Adaptor    ( or http://testserver:6080/arcgis/admin ->security->config->update)

For the intranet access : http://testserver:6080/argis..., https://testserver:6443/argis...  http://testserver/apps...
For the internet access: https://gis.comany.com/ arcgis...  https://gis.comany.com/apps....



we could use the windows login (AD) for map services .
By feafult, if the applications is accessed with https, all map services are using https.
0 Kudos
JeffWard
Occasional Contributor III
Thanks for the reply.

Are you putting the web adaptor on the gis.comany.com (reverse proxy) machine?  We are trying to get it configured now using a different web server running IIS instead of Apache.
Jeff Ward
Summit County, Utah
0 Kudos
DeminHu
New Contributor
what we did :

1. ArcGIS server, Web Adaptor , Web Server (IIS) are in the same machine , is inside network.
the reverse proxy server ( gis.company.com)  is in DMZ.

Please see the following link and  my attachment

http://resources.arcgis.com/en/help/main/10.1/index.html#/Firewalls_and_ArcGIS_Server/01540000043100...

2. web adaptor is configured with 443 , https
  we have two sites under web server: 443 with https, it could be accessed on the internet  by https://gis.comapny.com
the other site is 80 with http,  for intranet.
actully you can use one site, because we need to deploy applications for both intrant and  internet, so I personaly prefer two sites with different physical path and application pool, different ports.

In my work environment, the preoxy server is configured by network team.

Don't forget to configure http and Https for both ArcGIS Server and web Adaptor
0 Kudos
AlbertoAloe
Occasional Contributor
Demin,
how about the certificate you are using in your IIS ? Is it the self signed one ?

I have an ArcGIS server 10.1 in DMZ (same machine with IIS and web adaptor) and currently is set for http/80 only. I would like to set up SSL but my netowrk guys told me that I have to use a proxy server because I cannot get a valid certificate for my IIS (but still investigating this issue).

my question is: if I used a reverse proxy and I cannot have a valid certificate for the server would I run into the issues mentioned here http://support.esri.com/fr/knowledgebase/techarticles/detail/40694 where it is stated that you must have have a valid certificate between proxy server and webserver ?

Thanks

Alberto
0 Kudos
AlbertoAloe
Occasional Contributor
I was just rereading my own post.......obviously when I'm saying "proxy server" I mean "reverse proxy server"


Alberto
0 Kudos