Skip to main content

Configuring a proxy

A proxy keeps your application server nodes off the public internet, publishes the application under a DNS name your network administrator chooses, and routes the default HTTP port 80 to the port the application server actually uses.

These instructions use Apache for a simple HTTP proxy. You can use any other proxy or routing solution by adapting the settings — your network administrator can help identify the right options.

Prerequisites​

  • A server where you can install and configure Apache (or your chosen proxy).
  • The IP and port of your platform instance. The port may differ from 8080 — find it in the admin browser under the server instance's Properties tab (HTTP_LISTENER_PORT).

Steps​

Set up the Apache proxy​

  1. Install Apache and its required modules, then enable the proxy and proxy_http modules.

  2. Create a virtual-host configuration file from this template. Change ServerName, ProxyPass, and ProxyPassReverse for your environment, set a valid ServerAdmin address, and use the correct IP and port for your instance:

    <VirtualHost *:80>
        ServerAdmin name@yourcompany.com
        ServerName PUT_YOUR_DNS_NAME_HERE
        ProxyRequests Off
        ProxyPreserveHost Off
        ProxyPass / http://127.0.0.1:8080/
        ProxyPassReverse / http://127.0.0.1:8080/
        DocumentRoot /var/www
        <Directory />
            Options FollowSymLinks
            AllowOverride None
        </Directory>
        <Directory /var/www/>
            Options Indexes FollowSymLinks MultiViews
            AllowOverride None
            Order allow,deny
            allow from all
        </Directory>
        ErrorLog ${APACHE_LOG_DIR}/error_proxy.log
        LogLevel warn
        CustomLog ${APACHE_LOG_DIR}/access_proxy.log combined
    </VirtualHost>

  3. Make sure the file is included from your Apache configuration (directly or by wildcard), then restart or reload Apache.

Make Tomcat proxy-aware​

info

This applies only to pre-deployed installations using Apache Tomcat.

When Tomcat is the application server, make it aware of the proxy by editing the connector in server.xml (in Tomcat's conf directory). Find:

<Connector port="${igrafx.http.port}" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort="8443" />

Without SSL, add proxyName and proxyPort to match your Apache configuration:

<Connector port="${igrafx.http.port}" protocol="HTTP/1.1" connectionTimeout="20000" proxyName="PUT_YOUR_DNS_NAME_HERE" proxyPort="80" redirectPort="8443" />

With SSL:

<Connector port="${igrafx.http.port}" protocol="HTTP/1.1" connectionTimeout="20000" proxyName="PUT_YOUR_DNS_NAME_HERE" proxyPort="443" scheme="https" secure="true" redirectPort="8443" />

Restart Tomcat after the change.

info

Behind a proxy, long-running tasks such as registering a repository can hit proxy timeouts. Adjust the proxy timeout accordingly.

License activation URL​

If the platform reaches the internet through a proxy, allow outbound communication to the license-activation host:

  • https://quicklicensemanager.com — for online license activation.

This applies to on-premises installations only; Cloud customers allowlist different URLs.