My organization uses Confluence internally. It has the following setup:
Now we would like to expose parts of this instance on the internet (includes putting the confluence instance in a DMZ). If a user accesses our confluence site from the internet we would like the following setup:
Is it possible to mix these policys on the same confluence instance based on IP adress?
Thanks in advance,
This was put on hold by my organization.
After thinking about this for a while I would buy a second confluence instance and export/import spaces because of security concerns. That way I am assured that only public information is available on the internet.
The part with anonymous users might be a problem
I would use a webserver in front of the confluence tomcat doing a sso with ntlm or kerberos, so your internal users are automatically logged in (with a special authenticator you have to write).
Use a second webserver for the web traffic.
The only problem, you have two servers but only one baseurl.
Maybe you can use the same domain and map it internally to a different ip?
If you get this working, the only thing you have to deal with is permission management.
You don't need internal anonymous access and can work with qualified user names.
Or do you need the anonymous access due to licensing?
Hello Community, Jessica here from the Confluence product marketing team! Today I wanted to get your takes on project planning –– what works, what doesn’t, how do you know if you’re doing it r...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs