Difference between revisions of "Secure Proxy Installation"
From Gcube Wiki
m (Ciro.formisano moved page About gCube/Secure Proxy Installation to Secure Proxy Installation: wrong url) |
(→Advanced configuration) |
||
| Line 26: | Line 26: | ||
The configuration file | The configuration file | ||
| − | '' | + | ''properties.properties'' |
in the folder | in the folder | ||
| Line 34: | Line 34: | ||
contains two useful properties, especially for test and debug, concerning the Domain Filter in particular: | contains two useful properties, especially for test and debug, concerning the Domain Filter in particular: | ||
| − | * ''' | + | * '''domainFilterEnabled''' (default false): enabling or disabling the Domain Filter |
| − | * ''' | + | * '''domainFilterdefaultForward''' (default false): if ''true'' and the Domain Filter is empty, the request is forwarded |
| − | + | ||
| + | Furthermore it is possible to configure the following parameters: | ||
| + | |||
| + | * '''domainFilterdefaultExpiringTime''' (default 60): the time (in seconds) after which a certain url the cached Domain List is considered expired and will be reloaded when a new request will reach the proxy | ||
| + | * '''rewriteURI''' (default false): if false the URI present in the body of the response concerning the proxied domain will not be modified. If true they will be modified (i.e. replaced with proxied URI) accoding to the following detailed options: | ||
| + | ** '''rewriteURIHTML''' (default true): if false prevents the proxy to rewrite URIs in HTML bodies. If not present (or true) and '''rewriteURI''' is true the HTML URIs will be modified | ||
| + | ** '''rewriteURIJavaScript''' (default true): if false prevents the proxy to rewrite URIs in JavaScript bodies. If not present (or true) and '''rewriteURI''' is true the JavaScript URIs will be modified | ||
== Use == | == Use == | ||
Revision as of 16:36, 17 May 2017
GCube secure proxy is a solution to expose unsecure legacy services by using TLS without modifying or reconfiguring them.
Installation and simple configuration
GCube secure proxy is a war file (httpproxy.war) which leverages on Smart Gear facilities. The web application acts as a proxy for a list of URL (Domain Filter) to be defined on the Information System under the considered VRE.
The URL list on the Information System is defined in a Generic Resource with the following features:
- SecondaryType: SecureProxyDomains
- Name: ProxiedDomains
<Body>
<Domains>
<domain>Name of the first URL or Domain</domain>
<domain>Name of the second URL or Domain</domain>
<domain>...</domain>
</Domains>
</Body>
Advanced configuration
The configuration file
properties.properties
in the folder
<war root>/WEB-INF/classes
contains two useful properties, especially for test and debug, concerning the Domain Filter in particular:
- domainFilterEnabled (default false): enabling or disabling the Domain Filter
- domainFilterdefaultForward (default false): if true and the Domain Filter is empty, the request is forwarded
Furthermore it is possible to configure the following parameters:
- domainFilterdefaultExpiringTime (default 60): the time (in seconds) after which a certain url the cached Domain List is considered expired and will be reloaded when a new request will reach the proxy
- rewriteURI (default false): if false the URI present in the body of the response concerning the proxied domain will not be modified. If true they will be modified (i.e. replaced with proxied URI) accoding to the following detailed options:
- rewriteURIHTML (default true): if false prevents the proxy to rewrite URIs in HTML bodies. If not present (or true) and rewriteURI is true the HTML URIs will be modified
- rewriteURIJavaScript (default true): if false prevents the proxy to rewrite URIs in JavaScript bodies. If not present (or true) and rewriteURI is true the JavaScript URIs will be modified
Use
The URL to access a proxied resource is the following:
https://<proxy base URL>/httpproxy/proxy/<proxied resource>
