nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

JIRA / Confluence external access via Azure Application Proxy

Stian Bentsen Sveen

Hi,

We recently exposed our on site JIRA to external access.

It requires Azure MFA and then runs via Azure application proxy.

Its mostly used by external consultants so they dont need a VPN connection if they are just working on project management and nothing else.

I've gotten a few tickets from some of these users regarding performance in JIRA. I've brushed it off as something local to their connection since none of our 200+ JIRA software users or 1700+ service desk users have complained about performance issues.

This weekend I worked from home and decided testing out JIRA via external access (without VPN) and I sometimes experienced similar issues to what some of the consultants were complaining about. My issue was being unable to click in the comment box and type text. It just displayed a "blocking" sign on my mouse and I wasnt able to click in the comment field.

Some of the consultants reported the same and others said they were unable to click a button (to f.ex do a transition). They could click it, but nothing happened.

Doing a force cache refresh in the browser 1 or more times fixed the issue for me.

We're only using Azure application proxy for JIRA and Confluence so far so were not that familiar with it, but couldnt see anything wrong there.

Anyone else have experience with accessing JIRA externally via Azure application proxy?

Br,

Stian

Accepted answers

Andy Heinzer

It sounds like the proxy could be blocking certain rest calls periodically. But this is difficult to confirm until you look closer at the client's browser console logs when this happens. You can also try to recreate this problem and then generate a HAR file to see this too.

Basically, I would look for any HTTP error codes that you might see in the console logs when this happens. Those specific error codes will tell us more about why this happening.

Scott Neumann_rc3gli

Stian Bentsen Sveen,

I'm trying to roll out the same solution as you described above. (There doesn't seem to be a lot in the Jira support forums of folks doing this.) I'm hoping maybe you can shed some light! I'm getting this error on the login screen. ***JIRA is reporting that it is using the URL scheme 'http', which does not match the scheme used to run these diagnostics, 'https'. This is known to cause JIRA to construct URLs using an incorrect hostname, which will result in errors in the dashboard, among other issues.***

It feels like I'm just missing the correct setting... Can you share what settings you configured for theAzure App Proxy and anything that you needs to be set on the Jira side?

It seems to half work... I can log in, but some things do not seem to load correctly.

Thanks,

-Scott

All comments

Andy Heinzer

Basically, I would look for any HTTP error codes that you might see in the console logs when this happens. Those specific error codes will tell us more about why this happening.

Stian Bentsen Sveen

Hi Andrew,

Thanks! I'll start debugging with the console logs. It doesnt happen that often, so i'll just try to provoke it. Thanks for a pointer in the right direction!

Br,

Stian

Scott Neumann_rc3gli

Stian Bentsen Sveen,

It feels like I'm just missing the correct setting... Can you share what settings you configured for theAzure App Proxy and anything that you needs to be set on the Jira side?

It seems to half work... I can log in, but some things do not seem to load correctly.

Thanks,

-Scott

Stian Bentsen Sveen

Hi Scott,

There might not be a big usage around this as I think many people who want JIRA accessible via internet uses JIRA cloud, wheras hosted server is for "internal use". I couldnt find anything on the subject, so thats why I posted here.

It almost sounds like your JIRA is setup to run via HTTP but your external URL for in application proxy for JIRA is setup to run via HTTPS?

Are some of the things that doesnt seem to be loading correctly gadgets for the dashboard (you can load most of them but their names seem weird, like gadget.issue.filters instead of Issue Filter)?

In the application proxy configuration is your internal and external link the same?

Br,

Stian

Toto Tamberine

I have been trying to get this working as well with confluence and noticed a bunch of XSRF check failures, 403 Forbidden.

Would following this guide possible solve this?

https://confluence.atlassian.com/kb/cross-site-request-forgery-csrf-protection-changes-in-atlassian-rest-779294918.html

Stian Bentsen Sveen

Hi Toto,

Which version of Confluence are you running? Im running an old 6.4.0 version (upgrading soon) and I havent noticed any issues with Confluence via application proxy, only JIRA. When are you getting the errors?

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

server

confluence-server

jira

jira-service-desk

jira-server

jira-service-desk-server