Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Deleted user
0 / 0 points
badges earned

Your Points Tracker
  • Global
  • Feed

Badge for your thoughts?

You're enrolled in our new beta rewards program. Join our group to get the inside scoop and share your feedback.

Join group
Give the gift of kudos
You have 0 kudos available to give
Who do you want to recognize?
Why do you want to recognize them?
Great job appreciating your peers!
Check back soon to give more kudos.

Past Kudos Given
No kudos given
You haven't given any kudos yet. Share the love above and you'll see it here.

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

migrating to confluence cloud (from server) application link to existing jira srever (behind nat)

Need help to link migrated confluence cloud to my existing Jira & bitbucket server.    Previously all of my services were behind out firewall - access through VPN only.    I am testing migration of Confluence to the Cloud ( which worked fine).  But now I have to create application links from cloud to server instances.    I've opened up the Jira port and NATed it only giving access to atlassian IP ranges for security.   

Application link on confluence cloud site 

application url  and display url are set to the NATed IP address.   security is set to Oauth.  

But since my jira is on the internal network, it's base IP url is not the same as the NATed URL known to confluence cloud. 

I'm am getting this error message from confluence cloud application link 

"We can't enable the incoming authentication because Jira-hosted is not reachable."


Has anyone done this?    I would assume since atlassian is making us migrate to the cloud they would have made this easy and worked out these problems.    we are planning on moving jira  and bitbucket  to the cloud but we cannot do a all-in-one forklift - we have to migrate it over the course of months to ensure we don't have downtime and migrate our user based correctly. 


1 answer

0 votes
Thomas Deiler Community Leader Apr 25, 2021

Dear @John Casey ,

to make it work, you need to move Jira or at least its reverse proxy (nginx, apache, ...) into the DMZ. The URL to reach Jira has to work from Internet (sure, with limited IP range) and from internal network.

An option can also be the enterpise cloud. Contact Atlassian and ask if they are supporting VPNs. This is much more secure than allowing IP ranges to your Jira from outside.

So long


Hi Tom - thanks for that answer -  I setup nginx reverse proxy.  I'm getting farther in the config but still stuck on oath config. 


my nginx config includes these entries:

proxy_set_header Authorization "";
proxy_set_header X-Forwarded-User $remote_user;

outgoing auth is set to OAuth

incoming auth is set to disable


on the cloud side my remote app [application and display url] are set to my proxy address:port


but I'm now I'm getting this error.   it's says to check the applications logs for further information.  but  I cannot find out where to view logs on confluence-cloud.    Do you know where i can view them?


Unexpected response

We received an unexpected response from Jira-hosted. If the remote application is behind a proxy, check that the application is operational. Troubleshoot this for other possible causes.

403: Forbidden

To see the full response content look at your application logs.

Thomas Deiler Community Leader Apr 27, 2021

Dear @John Casey ,

first ensure that Jira is fully operational through your reverse proxy. This also means that Jira itself (Tomcat) can conntect to the reverse proxy.

No bypass, even for internal calls, should be possible. If that proxy is fully available to the internet (filtered / stateful), Cloud should be able to connect.

Have a look at my article - eventually there is some useful information inside.

So long


thanks ! will try.  

Suggest an answer

Log in or Sign up to answer
Community showcase
Published in Confluence

🥓🙅🏻‍♀️ Meet-less May Badge!

Hello Confluence Community!  What if i told you that you could have a healthier life and be 100% meet-less? This month, we're promoting a healthy, balanced work diet with Confluence. We la...

205 views 2 13
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you