OpenSSO 8: How to Setup a Fronted Web Server that Proxies Internal OpenSSO Web Policy Agent (Doc ID 1403344.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle iPlanet Web Server - Version: 7.0 and later   [Release: 7.0 and later ]
Information in this document applies to any platform.

Goal

This document provides an example of how to setup a load-balancer or reverse proxy in front of a Policy Agent Web Server such that all the Web traffic is through a specific fronted Oracle iPlanet Web Server 7.x. Internal resources and OpenSSO authentication URL are not exposed and are required to be rewritten to this external web server. Some of the use case of that these setup may are the external web server may be listening to IPv6 while the internal OpenSSO traffic are IPv4 (due to the fact that IPv6 is not supported in OpenSSO).

The setup is like the one in Figure 1-1 of http://docs.oracle.com/cd/E19316-01/820-5985/gdsrg/index.html. The external frontend web server for this example would be Load Balancer 4 as in this picture below:


Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms