It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Synchronizing with existing JIRA instance in local subnet with new JIRA Service Desk: DMZ?

Hello

We have worked with JIRA since 2006 located in our local subnet using Active Directory and SQL server database. Since this instance has classified company information it will not be exposed to the Web.

We now need to combine JIRA Service Desk with the above instance. But now customers must be able to create and view their tickets.

So the question is, if JIRA service desk has be located in the DMZ or what best practice is in this scenario.

Thanks for your help.

BB

1 answer

1 accepted

0 votes
Answer accepted
Alexis Robert Community Leader Oct 23, 2019

Hello @Infogate AG , 

 

in this case you should create a new Jira Service Desk instance in your DMZ, and make an Application Link between this Service Desk and your existing Jira Software instance. 

There is a great documentation by Atlassian explaning this in detail : https://confluence.atlassian.com/adminjiraserver/federating-jira-managing-multiple-instances-961257360.html

 

Let me know if this helps, 

 

--Alexis

Hi Alexis

Thanks a lot for your quick reply!

In

https://community.atlassian.com/t5/Jira-questions/Jira-in-DMZ-AD-server-on-the-internal-network/qaq-p/1093343 

Andrei suggests using a web proxy server in the DMZ and hosting the actual Service Desk instance in the local subnet. But I do not have an experience with web proxy servers. I have to start JIRA SD from scratch, but making it work with the current internal JIRA instance as mentioned in my question.

I appreciate your help a lot.

Thanks again.

Regards,

Benno

Alexis Robert Community Leader Oct 24, 2019

Hi @Infogate AG , 

 

if you do not have experience with reverse proxies, you should seek help from your internal IT team as they should be the ones able to help you with this.

If you are on your own, you can check Atlassian documentation here that describes how to setup Apache as a reverse proxy : https://confluence.atlassian.com/kb/proxying-atlassian-server-applications-with-apache-http-server-mod_proxy_http-806032611.html

 

Let me know if this helps, 

 

--Alexis

Hi Alexis

Well, it is just me doing all....

What setup would you prefer, have all JIRA servers including JIRA Service Desk in the local subnet (that is, in the same zone like the domain controllers) and using a proxy web server in the DMZ or placing JIRA Service Desk server directly in the DMZ?

Thanks!

regards,

Benno

Alexis Robert Community Leader Oct 25, 2019

Hi @Infogate AG , 

 

it's always good practice to have the application server (here it's Jira) in the local subnet and not in the DMZ. You should only have the proxy server in the DMZ.

 

--Alexis

Hi Alexis

Thanks you ever so much; my most recent tests support your answer.

That helped me a lot deciding on the actual architecture. I will go this way.

beset regards,

Benno

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Published in Jira Align

Best Practices in Jira Align

Hello Jira Align customers! In order to better serve you on your journey with Jira Align, the Community team has worked with the Jira Align team to curate the content in this collection to better s...

114 views 0 4
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you