Configuring a reverse proxy server with your portal

A reverse proxy is a device or service placed between a client and a server in a network infrastructure. Incoming requests are handled by the proxy, which interacts on behalf of the client with the desired server or service residing on the server. A reverse proxy is most commonly used to direct requests, provide load balancing services, enforce web application security, and inspect content to mitigate data leaks.

If your organization uses a reverse proxy server to connect to the Internet, you need to make sure adequate information is provided to your portal about the proxy server.

Steps:
  1. If you haven't done so already, configure the ArcGIS Web Adaptor with your portal. This is required in order for the reverse proxy to communicate with your portal correctly. For full instructions, see the configuration topics for IIS, Java (Windows), or Java (Linux).
  2. On the machine hosting Portal for ArcGIS, navigate to <Portal for ArcGIS installation location>\Portal\etc and open the portal-config.properties file in a text editor.
  3. Locate the webadaptor.url property and replace the Web Adaptor's URL with the URL of the reverse proxy or DNS alias. This will configure all the URLs returned by the portal to use the reverse proxy or DNS alias you specify. For example:

    webadaptor.url=https://reverseproxy.domain.com/<context>

  4. Restart Portal for ArcGIS. If you need help with this, see Stopping and starting the portal.
  5. Open a web browser and enter the sharing/rest/info URL of the reverse proxy, for example:

    https://reverseproxy.domain.com/<context>/sharing/rest/info

  6. Verify the reverse proxy URLs are returned for the owningSystemUrl and tokenServicesUrl.

Once you've configured the reverse proxy server with your portal, you'll now access your portal through the reverse proxy URL, instead of the Web Adaptor URL. Anything you access in the portal website will return the reverse proxy URL. The following administrative tasks (if not already completed using the reverse proxy URL) should be recompleted using the reverse proxy URL:

If you've previously added secured services as items in your portal, you'll need to delete the original items and add them again. This is because the original items use the Web Adaptor URL, instead of the reverse proxy URL. For instructions, see Connecting to secured services.

12/13/2013