Synchronizing with existing JIRA instance in local subnet with new JIRA Service Desk: DMZ?

[Infogate AG]

Hello

We have worked with JIRA since 2006 located in our local subnet using Active Directory and SQL server database. Since this instance has classified company information it will not be exposed to the Web.

We now need to combine JIRA Service Desk with the above instance. But now customers must be able to create and view their tickets.

So the question is, if JIRA service desk has be located in the DMZ or what best practice is in this scenario.

Thanks for your help.

BB

[Alexis Robert · Accepted solution]

Hello @Infogate AG , 

in this case you should create a new Jira Service Desk instance in your DMZ, and make an Application Link between this Service Desk and your existing Jira Software instance. 

There is a great documentation by Atlassian explaning this in detail : https://confluence.atlassian.com/adminjiraserver/federating-jira-managing-multiple-instances-961257360.html

Let me know if this helps, 

--Alexis

[Infogate AG]

Hi Alexis

Thanks a lot for your quick reply!

In

https://community.atlassian.com/t5/Jira-questions/Jira-in-DMZ-AD-server-on-the-internal-network/qaq-p/1093343 

Andrei suggests using a web proxy server in the DMZ and hosting the actual Service Desk instance in the local subnet. But I do not have an experience with web proxy servers. I have to start JIRA SD from scratch, but making it work with the current internal JIRA instance as mentioned in my question.

I appreciate your help a lot.

Thanks again.

Regards,

Benno

[Alexis Robert]

Hi @Infogate AG , 

if you do not have experience with reverse proxies, you should seek help from your internal IT team as they should be the ones able to help you with this.

If you are on your own, you can check Atlassian documentation here that describes how to setup Apache as a reverse proxy : https://confluence.atlassian.com/kb/proxying-atlassian-server-applications-with-apache-http-server-mod_proxy_http-806032611.html

Let me know if this helps, 

--Alexis

[Infogate AG]

Hi Alexis

Well, it is just me doing all....

What setup would you prefer, have all JIRA servers including JIRA Service Desk in the local subnet (that is, in the same zone like the domain controllers) and using a proxy web server in the DMZ or placing JIRA Service Desk server directly in the DMZ?

Thanks!

regards,

Benno

[Alexis Robert]

Hi @Infogate AG , 

it's always good practice to have the application server (here it's Jira) in the local subnet and not in the DMZ. You should only have the proxy server in the DMZ.

--Alexis

[Infogate AG]

Hi Alexis

Thanks you ever so much; my most recent tests support your answer.

That helped me a lot deciding on the actual architecture. I will go this way.

beset regards,

Benno