I have Umbraco set up on an internal site. I'd like to make this site accessible from the internet and was thinking to just use IIS reverse proxy through a server in our DMZ. I am learning as I go and have very little experience working with a reverse proxy. I set up a rewrite rule in our DMZ, and it works, but just brings up a page stripped of images and formatting. And, when you click on the Login button, it gives an error "405 - HTTP verb used to access this page is not allowed." We have a login setup to go through Azure Active Directory.
The server in the DMZ already acts as a reverse proxy for 2 other applications that are unrelated to our Umbraco site. Also, the DMZ server has a digicert certificate, while the internal Umbraco server has a certificate issued from our own local CA (not sure this is releveant).
Is a reverse proxy the best way of doing this? I've thought of putting our Umbraco site in the DMZ and letting our internal users access it that way. It's just that the Umbraco site queries information from a SQL server on our local network so I'd have to open up additional ports on our firewall to allow this traffic from the DMZ to internal, which isn't a problem, but I would like to limit what is opened from the DMZ to the internal network.
Another idea I had was to set up a second website on the DMZ server that is just a straight reverse proxy where anything sent to the base URL would be sent to the Umbraco website. The DMZ rewrite rule right now is ^oms(.*) -> https://oms.hartemc.com{R:1}
reverse proxy
I have Umbraco set up on an internal site. I'd like to make this site accessible from the internet and was thinking to just use IIS reverse proxy through a server in our DMZ. I am learning as I go and have very little experience working with a reverse proxy. I set up a rewrite rule in our DMZ, and it works, but just brings up a page stripped of images and formatting. And, when you click on the Login button, it gives an error "405 - HTTP verb used to access this page is not allowed." We have a login setup to go through Azure Active Directory.
The server in the DMZ already acts as a reverse proxy for 2 other applications that are unrelated to our Umbraco site. Also, the DMZ server has a digicert certificate, while the internal Umbraco server has a certificate issued from our own local CA (not sure this is releveant).
Is a reverse proxy the best way of doing this? I've thought of putting our Umbraco site in the DMZ and letting our internal users access it that way. It's just that the Umbraco site queries information from a SQL server on our local network so I'd have to open up additional ports on our firewall to allow this traffic from the DMZ to internal, which isn't a problem, but I would like to limit what is opened from the DMZ to the internal network.
Another idea I had was to set up a second website on the DMZ server that is just a straight reverse proxy where anything sent to the base URL would be sent to the Umbraco website. The DMZ rewrite rule right now is ^oms(.*) -> https://oms.hartemc.com{R:1}
Any ideas would be helpful. Thanks.
is working on a reply...