Synchronizing with existing JIRA instance in local subnet with new JIRA Service Desk: DMZ?

Infogate AG October 23, 2019

Hello

We have worked with JIRA since 2006 located in our local subnet using Active Directory and SQL server database. Since this instance has classified company information it will not be exposed to the Web.

We now need to combine JIRA Service Desk with the above instance. But now customers must be able to create and view their tickets.

So the question is, if JIRA service desk has be located in the DMZ or what best practice is in this scenario.

Thanks for your help.

BB

1 answer

1 accepted

Suggest an answer

Log in or Sign up to answer
0 votes
Answer accepted
Alexis Robert
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
October 23, 2019

Hello @Infogate AG , 

 

in this case you should create a new Jira Service Desk instance in your DMZ, and make an Application Link between this Service Desk and your existing Jira Software instance. 

There is a great documentation by Atlassian explaning this in detail : https://confluence.atlassian.com/adminjiraserver/federating-jira-managing-multiple-instances-961257360.html

 

Let me know if this helps, 

 

--Alexis

Infogate AG October 23, 2019

Hi Alexis

Thanks a lot for your quick reply!

In

https://community.atlassian.com/t5/Jira-questions/Jira-in-DMZ-AD-server-on-the-internal-network/qaq-p/1093343 

Andrei suggests using a web proxy server in the DMZ and hosting the actual Service Desk instance in the local subnet. But I do not have an experience with web proxy servers. I have to start JIRA SD from scratch, but making it work with the current internal JIRA instance as mentioned in my question.

I appreciate your help a lot.

Thanks again.

Regards,

Benno

Alexis Robert
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
October 24, 2019

Hi @Infogate AG , 

 

if you do not have experience with reverse proxies, you should seek help from your internal IT team as they should be the ones able to help you with this.

If you are on your own, you can check Atlassian documentation here that describes how to setup Apache as a reverse proxy : https://confluence.atlassian.com/kb/proxying-atlassian-server-applications-with-apache-http-server-mod_proxy_http-806032611.html

 

Let me know if this helps, 

 

--Alexis

Infogate AG October 25, 2019

Hi Alexis

Well, it is just me doing all....

What setup would you prefer, have all JIRA servers including JIRA Service Desk in the local subnet (that is, in the same zone like the domain controllers) and using a proxy web server in the DMZ or placing JIRA Service Desk server directly in the DMZ?

Thanks!

regards,

Benno

Alexis Robert
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
October 25, 2019

Hi @Infogate AG , 

 

it's always good practice to have the application server (here it's Jira) in the local subnet and not in the DMZ. You should only have the proxy server in the DMZ.

 

--Alexis

Infogate AG October 25, 2019

Hi Alexis

Thanks you ever so much; my most recent tests support your answer.

That helped me a lot deciding on the actual architecture. I will go this way.

beset regards,

Benno

TAGS
AUG Leaders

Atlassian Community Events