Welcome to ISAserver.org

Rule for Reverse Proxy and URL path forwarding

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Web Publishing >> Rule for Reverse Proxy and URL path forwarding

Page: [1]

Message

<< Older Topic Newer Topic >>

Rule for Reverse Proxy and URL path forwarding - 19.Dec.2007 3:15:24 AM

sagiragu

Posts: 6
Joined: 19.Dec.2007
Status: offline

I am a newbie to ISA.

I have the following Setting.
ISA 2004 installed in the same machine (Windows 2003) where IIS 6.0 is running.

I would like to config the Reverse proxy setting in ISA which should forward HTTPS web requests (only for specific path) to a third party server and get the response to the client.

In otherwords,
if my client access https://mysite.com/spclpath/ it should go to https://thirdprtysite.com/spclpath/ (3rd party server) and fetch the webpages under it and return the response via ISA to the client.

All other requests apart from the special path should normally go to IIS server.

Could someone teach me how to achieve this in ISA?
How do I set rule for this?

I have been breaking my head for past 3 weeks.

Post #: 1

Featured Links*

RE: Rule for Reverse Proxy and URL path forwarding - 20.Dec.2007 12:41:35 PM

tzonarin

Posts: 12
Joined: 25.Sep.2007
Status: offline

It sounds to me like this is less of a function of your ISA server and more about the configuration of your IIS server. Being the ISA neophyte that I am, I am thinking that you can publish a site, but not a subdirectory of a site.

I'm thinking you're going to have to create a subdomain, rather than a subdirectory for ISA to handle this for you.

-Tzo

(in reply to sagiragu)

Post #: 2

RE: Rule for Reverse Proxy and URL path forwarding - 21.Dec.2007 4:49:33 AM

sagiragu

Posts: 6
Joined: 19.Dec.2007
Status: offline

I guess you have understood it differently.

Its not about the subdirectory thing.

All I need is to forward my incoming request to a third party server. (Kind of a Reverse proxy feature like mod_proxy in Apache)

Tell me how to achieve this in ISA

(in reply to tzonarin)

Post #: 3

RE: Rule for Reverse Proxy and URL path forwarding - 21.Dec.2007 3:21:15 PM

tzonarin

Posts: 12
Joined: 25.Sep.2007
Status: offline

So what I'm hearing is if you have a request for https://mysite.org/specialdir and you want any request landing there to get forwarded to http://thirdpartysite.org/specialdir? Assuming that thirdpartysite.org is outside of your network, if that's the case, then again, you can do this outside of ISA. Just create a subdirectory under mysite.org called specialdir. Create a default.htm (or equivalent) in that folder and then, in that default.htm, before the body tag, put this line in:

<META HTTP-EQUIV="Refresh" CONTENT="0; URL=https://thirdpartysite.org/specialdir">

That's the way I do it. I have an e-store linked with my corporate site that does a third-party refer.

-Tzo

(in reply to sagiragu)

Post #: 4

RE: Rule for Reverse Proxy and URL path forwarding - 24.Dec.2007 2:40:35 PM

mosheberg

Posts: 8
Joined: 22.Oct.2007
Status: offline

ISA Server will allow you with a regular Web Publishing Rule to publish an entire web site, either internal or external, but to my knowledge it will not allow you to proxy only part of the site.

tzonarin solution is a client side redirect, which would work, but if I understand what you wrote correctly and if you are looking for the mod_proxy equivalent for IIS, have a look at ISAPI_Rewrite http://www.isapirewrite.com, V.3 is practically a replica of .htaccess mod_rewrite. Personally I've been using V.2 for some time and it's a must have IIS ISAPI filter.

(in reply to tzonarin)

Post #: 5

RE: Rule for Reverse Proxy and URL path forwarding - 24.Dec.2007 9:25:05 PM

sagiragu

Posts: 6
Joined: 19.Dec.2007
Status: offline

Thanks mosheberg.
I also have tried at ISAPI_Rewrite before.But it only redirects the request.

My requirement is not a simple redirect but kind of a mod_proxy solution.

Let me explain my problem in detail.

We have a module running in Apache Webserver (SSL certified )where mod_proxy is also running. When the client accessing to a specific folder (say website.org/spclfolder) the https request will be redirected to the equivalent directory in the third pary site (thirdpartysite.org/spclfolder) and the response will again come to the Apache webserver. The mod_proxy will then send the response back to the client.

Since the client receives the response from the Webserver (which is a SSL certified), the Gateway on the client side will allow this response.

But if we simply redirect the request to the third-party website, the response from third-party site will directly go to client (instead of coming to webserver) and hence the Gateway on the client side will block the response.

This works fine in Apache because we have mod_proxy there.

We need a same setup for IIS webserver too and I would like to know how to achieve this. Can this be done using ISA ?

(Sorry for my lengthy description but it is mandatory to explain my situation)

(in reply to mosheberg)

Post #: 6

RE: Rule for Reverse Proxy and URL path forwarding - 25.Dec.2007 12:54:18 PM

mosheberg

Posts: 8
Joined: 22.Oct.2007
Status: offline

Yes, I understood what you are trying to do and ISAPI_Rewrite does redirects as well as proxy, have a look at these:

Examples:
http://www.helicontech.com/isapi_rewrite/doc/examples.htm#proxy
Reference:
http://www.helicontech.com/isapi_rewrite/doc/RewriteProxy.htm

(in reply to sagiragu)

Post #: 7

RE: Rule for Reverse Proxy and URL path forwarding - 25.Dec.2007 10:20:07 PM

sagiragu

Posts: 6
Joined: 19.Dec.2007
Status: offline

Thanks mosheberg.
I will look into this.

Anyhow, is there a possibility to do this in ISA? (just want to know)

(in reply to mosheberg)

Post #: 8

RE: Rule for Reverse Proxy and URL path forwarding - 26.Dec.2007 11:00:12 AM

mosheberg

Posts: 8
Joined: 22.Oct.2007
Status: offline

I don't think it's possible within ISA and although ISAPI_Rewrite can be a plug-in for ISA it's only the Light version, which does not support the proxy module.

(in reply to sagiragu)

Post #: 9

RE: Rule for Reverse Proxy and URL path forwarding - 14.Jan.2008 3:46:24 PM

liridon

Posts: 7
Joined: 13.Jan.2008
Status: offline

you can do this with isa server, create a web publishing rule to point to www.thirdpartyserver.com, but configure that rule to accept request for any domain name

as far this publishing rule will work, isa server will cache that web page, to reply to other users with reverse caching

i can do it

_____________________________

Liridon
MCP

(in reply to sagiragu)

Post #: 10