My organization uses Confluence internally. It has the following setup:
Now we would like to expose parts of this instance on the internet (includes putting the confluence instance in a DMZ). If a user accesses our confluence site from the internet we would like the following setup:
Is it possible to mix these policys on the same confluence instance based on IP adress?
Thanks in advance,
The part with anonymous users might be a problem
I would use a webserver in front of the confluence tomcat doing a sso with ntlm or kerberos, so your internal users are automatically logged in (with a special authenticator you have to write).
Use a second webserver for the web traffic.
The only problem, you have two servers but only one baseurl.
Maybe you can use the same domain and map it internally to a different ip?
If you get this working, the only thing you have to deal with is permission management.
You don't need internal anonymous access and can work with qualified user names.
Or do you need the anonymous access due to licensing?
Badges are a great way to show off community activity, whether you’re a newbie or a Champion.Learn more
I am gathering information about resources available for Atlassian product knowledge transferring for a presentation in our local Atlassian User Group. I want to group them in four categories From ...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs