My organization uses Confluence internally. It has the following setup:
Now we would like to expose parts of this instance on the internet (includes putting the confluence instance in a DMZ). If a user accesses our confluence site from the internet we would like the following setup:
Is it possible to mix these policys on the same confluence instance based on IP adress?
Thanks in advance,
This was put on hold by my organization.
After thinking about this for a while I would buy a second confluence instance and export/import spaces because of security concerns. That way I am assured that only public information is available on the internet.
The part with anonymous users might be a problem
I would use a webserver in front of the confluence tomcat doing a sso with ntlm or kerberos, so your internal users are automatically logged in (with a special authenticator you have to write).
Use a second webserver for the web traffic.
The only problem, you have two servers but only one baseurl.
Maybe you can use the same domain and map it internally to a different ip?
If you get this working, the only thing you have to deal with is permission management.
You don't need internal anonymous access and can work with qualified user names.
Or do you need the anonymous access due to licensing?
Hi Community! 2018 was filled with changes for our team, both big and small, and we've taken a lot of time to both celebrate our wins and recognize areas of improvement. One thing that we're a...
Connect with like-minded Atlassian users at free events near you!Find a group
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no AUG chapters near you at the moment.Start an AUG
You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs