Use > Hardening > Using a Reverse Proxy > Configure a Reverse Proxy

Configure a Reverse Proxy

This section describes how to configure a reverse proxy. As of UCMDB version 10.01, no configuration is necessary in UCMDB. On the reverse proxy side, edit the configuration file according to the reverse proxy's documentation. For an example, see Example: Apache 2.0.x Configuration .

For scheduled jobs created prior to UCMDB version 10.01, you also need to set the configuration in UCMDB as follows:

Configure a Reverse Proxy Using Infrastructure Settings

The following procedure explains how to access Infrastructure Settings to configure a reverse proxy. This configuration is only necessary when creating a direct link to a report using the Scheduler.

To configure a reverse proxy:

  1. Select Administration > Infrastructure Settings > General Settings category.
  2. Change the Frontend URL setting. Enter the address, for example, https://my_proxy_server:443/.

Note After making this change, you cannot access the Universal CMDB server directly through a client. To change the reverse proxy configuration, use the JMX console on the server machine. For details, see "Configure a Reverse Proxy Using the JMX Console" below.

Configure a Reverse Proxy Using the JMX Console

You can make changes to the reverse proxy configuration by using the JMX console on the Universal CMDB server machine. This configuration is only necessary when creating a direct link to a report using the Scheduler.

To change a reverse proxy configuration:

  1. On the Universal CMDB server machine, launch the Web browser and enter the following address:

    https://localhost.<domain_name>:8443/jmx-console

    You may have to log in with the user name and password.

  2. Click the UCMDB-UI > UCMDB-UI:name=UI Server frontend settings link.

    In the setUseFrontendURLBySettings field, enter the server proxy URL, for example, https://my_proxy_server:443/.

  3. Click Invoke.

  4. To see the value of this setting, use the showFrontendURLInSettings method.

Example: Apache 2.0.x Configuration

This section describes a sample configuration file that supports the use of an Apache 2.0.x reverse proxy in a case where both Data Flow Probes and application users connect to Universal CMDB.

The following diagram illustrates the configuration process for a reverse proxy for Configuration Manager and UCMDB.

Note  

  • In this example, the Universal CMDB machine’s DNS name and port is UCMDB_server.

  • In this example, the Micro Focus Configuration Manger’s DNS name and port is UCMDB_CM_server.

  • Only users with a knowledge of Apache administration should make this change.

  1. Open the <Apache machine root directory>\Webserver\conf\httpd.conf file.
  2. Enable the following modules:

    • LoadModule proxy_module modules/mod_proxy.so
    • LoadModule proxy_http_module modules/mod_proxy_http.so
  3. Add the following lines to the httpd.conf file:

    ProxyRequests off
    <Proxy *>
    Order deny,allow
    Deny from all
    Allow from all
    </Proxy>
    ProxyPass /mam http://UCMDB_server/mam
    ProxyPassReverse /mam http://UCMDB_server/mam
    ProxyPass /mam_images http://UCMDB_server/mam_images
    ProxyPassReverse /mam_images http://UCMDB_server/mam_images
    ProxyPass /mam-collectors http://UCMDB_server/mam-collectors
    ProxyPassReverse /mam-collectors http://UCMDB_server/mam-collectors
    ProxyPass /ucmdb http://UCMDB_server/ucmdb
    ProxyPassReverse /ucmdb http://UCMDB_server/ucmdb
    ProxyPass /site http://UCMDB_server/site
    ProxyPassReverse /site http://UCMDB_server/site
    ProxyPass /ucmdb-ui http://UCMDB_server/ucmdb-ui
    ProxyPassReverse /ucmdb-ui http://UCMDB_server/ucmdb-ui
    ProxyPass /status http://UCMDB_server/status
    ProxyPassReverse /status http://UCMDB_server/status
    ProxyPass /jmx-console http://UCMDB_server/jmx-console
    ProxyPassReverse /jmx-console http://UCMDB_server/jmx-console
    ProxyPass /axis2 http://UCMDB_server/axis2
    ProxyPassReverse /axis2 http://UCMDB_server/axis2
    ProxyPass /icons http://UCMDB_server/icons
    ProxyPassReverse /icons http://UCMDB_server/icons
    ProxyPass /ucmdb-api http://UCMDB_server/ucmdb-api
    ProxyPassReverse /ucmdb-api http://UCMDB_server/ucmdb-api
    ProxyPass /ucmdb-docs http://UCMDB_server/ucmdb-docs
    ProxyPassReverse /ucmdb-docs http://UCMDB_server/ucmdb-docs
    ProxyPass /ucmdb-api/8.0 http://UCMDB_server/ucmdb-api/8.0
    ProxyPassReverse /ucmdb-api/8.0 http://UCMDB_server/ucmdb-api/8.0
    ProxyPass /cm http://UCMDB_Server/cm
    ProxyPassReverse /cm http://UCMDB_Server /cm
    ProxyPass /cnc http://UCMDB_CM_server/cnc
    ProxyPassReverse /cnc http://UCMDB_CM_server/cnc
    ProxyPass /docs http://UCMDB_CM_server/docs
    ProxyPassReverse /docs http://UCMDB_CM_server/docs
    ProxyPass /ucmdb-browser http://UCMDB_CM_server/ucmdb-browser
    ProxyPassReverse /ucmdb-browser http://UCMDB_CM_server/ucmdb-browser
  4. Save your changes.