Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Reverse Proxy

Anyone know is there is anything special that needs to be done in order to use a reverse proxy in front of orion?

i'm getting the error below.. wondering if there is some kind of security controls within Orion (custom.config??) that is causing this? if so how to add the reverse proxy as a allowed host...

Server Error in '/' Application.

Access is denied.

Description: An error occurred while accessing the resources required to serve this request. The server may not be configured for access to the requested URL.

Error message 401.2.: Unauthorized: Logon failed due to server configuration. Verify that you have permission to view this directory or page based on the credentials you supplied and the authentication methods enabled on the Web server. Contact the Web server's administrator for additional assistance.

Find more posts tagged with

Accepted answers

All comments

tdanner

The Orion website makes HTTP requests back to itself for various purposes. The IP address and port used for these connections are set in \Inetpub\Solarwinds\Orion\Custom.config.

Could you tell us a little bit more about your setup? Are you using Windows authentication? SSL?

pixelchimp

i would like to use a reverse proxy in front of orion, it will provide ssl connectivity, it also prevent direct access to orion, which we cannot allow, additionally it will provide SSO into orion..

the tricky bit is there will be normal (internal) users accessing orion without passing through the reverse proxy.. so setting the address (of the proxy) in the custom.config file will kill their connections i'm guessing.. do you have any suggestions for dual access in the manner described?

many thanks..

tdanner

How is the Orion website configured in IIS? Is it set to accept:

anonymous access?
on all unassigned IP addresses?
on port 80 with regular HTTP?

In that case, I would set custom.config to use 127.0.0.1 and port 80. The reverse proxy can take care of SSL and whatever else and Orion doesn't even have to know about it.

pixelchimp

yes its configured as above (anon, all ip, http etc).. also 127.0.0.1 in the custom.config file (this is the default i believe??!?)..

i'm not even sure how to go about debugging this I'm not much of a MS person, let alone ASP/ASP.net.. any pointers?

thanks..

aLTeReGo

Anyone know is there is anything special that needs to be done in order to use a reverse proxy in front of orion?

I didn't have to make any special modifications to access my Orion web interface using Checkpoint's Connectra reverse HTTP/HTTPS proxy. Can I ask what kind of reverse proxy are you using?

pixelchimp

Well at the moment its a PHP based reverse proxy (code.google.com/.../) as i'd like to avoid doing it with Apache's mod_proxy, with the PHP option i have greater control over what access to give users to Orion and passing SSO credentials through from our main web application..

Interesting point you raise about the Connectra, that basically uses Apache, mod_proxy and Mod_rewrite. and you say you didnt have to make any allowences within Orions configuration..

.. could well be my reverse proxy then..

either way, does anyone have any pointers for debugging within Orion/IIS/ASP(.net)?? so i can potentially see where the reverse proxy is going wrong?? many thanks..

pixelchimp

solved ..

the reverse proxy was adding in a extra / so the URL sent to Orion was //Orion which it didnt like..

was clear as day in the IIS logs, could have swore i looked previously, anyhow, thanks for the help..