Problem with opening some pages when the reverse proxy is placed in DMZ

Question

Hi, I have a problem with opening some pages, i.e.: - activity stream - /plugins/servlet/gadgets/ifr - applications - /plugins/servlet/applications/versions-licenses - UPM - /plugins/servlet/upm/manage/user-installed I have received an info: Forbidden You don't have permission to access /plugins/servlet/... on this server. My infrastructure: Client <--HTTPS--> Reverse Proxy (DMZ) <--HTTPS--> Jira Server (LAN) <--> Database server (LAN) When Reverse Proxy is in LAN zone, together with Jira Server, all works. But when I move Reverse Proxy to DMZ, some links are forbidden. I have very similar problem with Confluence server. Jira and Conlfuence are in the latest versions - 7.8.0 and 6.7.1. What are the requirements for the above locations to work?

Michal Sarna · Answer

The resolution is to replace the block: Require all granted by Require all granted

Michal Sarna · Answer

Mirek,

thank you for the tips but they did not help.

I am using Apache in version 2.4.29.

Mirek · Answer

Hmm.. I did not playaround with proxy for a while.. not sure what version are you using, but.. Try first changing the configuration with " around wildcard and all other parameters Require all granted ProxyPass "/" "https://jira_server.domain.com:8443/" ProxyPassReverse "/" "https://jira_server.domain.com:8443/" This will clean up your configuration.. then try to get the requests to redirect instead of proxying.. Move some of your configuration responsible for SSL to /etc/httpd/conf.d/ssl.conf Define a Virtual Host that will redirect, example ServerName sample RewriteEngine On RewriteRule ^(.*) https://%{HTTP_HOST}/$1 You can do this is a new file under /etc/httpd/conf.d name it with .conf at the end.. You might also need AllowOverride none Require all denied something like that inside it ..