How to pass the request through a virtual server to physical server using Apache

Shib Saha

Hello Everyone,

We have Jira and Confluence server version installed on the same sever. With the help of Apache using as reverse proxy both the application is accessible on the user friendly URL with self signed certificate as it is our stagging environment.

Here the concern is request is directly hitting the physical server and it is a security concern as per our network security.

Is there any way to pass the request through a virtual server and then it hits on the physical server(When we ping the jira url, virtual server IP should be found and not the original IP), with the help of Apache as reverse proxy.

Any comment is most welcomed!!

Thanks and Regards,
Shib Saha 

 

Nic Brough -Adaptavist-

Most of us get our Atlassian stacks working, then put the Apache in front of them, and simply firewall the application server off from the rest of the world.  My Jira server is firewalled to the point where it only listens to ssh on the local network, talks to Apache on one other machine on the network and a database server on another local machine.  All other networking is firewalled completely.

That will stop the security problem of people hitting the service direct, as they'll get nothing back from it.

Redirecting them is possibly more complex, but mostly possible.  If you edit the hosts file on the Jira server so that it uses the right names for itself and the proxy server without going to DNS, then you can poison your DNS - tell it to resolve the name of the Jira server is the ip address of the proxy.  This won't (and can't) stop people using the raw ip address of the jira server (that may be possible with routing in your network, but I've never tried it), so you should still do the firewall thing.