Configure standalone webdispatcher as a reverse proxy

[Former Member]

Hi

I am planning to install a standalone webdispatcher with NW 7.4 base. The intention is to have this standalone instance in the DMZ and redirect the traffic to our PI system.

Technically this webdispatcher should act like a reverse proxy  between our external  system and PI system. Webdispatcher should accept the external traffic and redirect the request to PI system.

I tried looking for config guides for this config but couldnt find any. Can someone please help me?

Thanks

Poornima

[Former Member · Accepted solution]

Hi,

Installation of web displatcher is quite easy and simple.

to do reverse proxy you just need to set two parameters in the web displatcher.

# SID Message Service Connections

wdisp/system_0 = SID=PI SID,MSHOST=hostname of the PI server,MSPORT=81XX,SRCSRV=*:80

icm/server_port_0 = PROT=HTTP,PORT=80,TIMEOUT=360,PROCTIMEOUT=360,EXTBIND=1

When using the Web Dispatcher for several systems, ports with the ROUTER protocol cannot be used for the system selection. All requests that were received via ports with the ROUTER protocol are always transferred to the first system (wdisp/system_0) where all of the selection criteria (SRCSRV, SRCURL, and so on) are ignored.

SO web dispatcher is excepting all the traffic on port 80 and redirecting on to the message server.

As you are in DMZ remember to get the firewall rule for the required ports needed.

Please use webdispatcher 740.

908097 - SAP Web Dispatcher: Released releases and applying patches

Thanks

Rishi Abrol

[Former Member · Accepted solution]

Thank you for your response Rishi, so after the webdispatcher install this is the parameter I have to set  right?

wdisp/system_0 = SID=<PI SID>,MSHOST=<hostname of the PI server>,MSPORT=81<Message Server Port for PI> ,SRCSRV=*:80

icm/server_port_0 = PROT=HTTP,PORT=80,TIMEOUT=360,PROCTIMEOUT=360,EXTBIND=1

Also need to have the SSL termination at the webdispatcher ie the incoming external traffic to web dispatcher will be HTTPS and will need to have this converted to HTTP to the PI system.

Would the steps outlined in the below URL suffice

http://help.sap.com/saphelp_nw74/helpdata/en/49/3db10a19341067e10000000a42189c/content.htm

And yes I am installing NW 7.4 standalone option (web dispacther ) for the install

[Former Member · Accepted solution]

Hi,

there are three options ..

1.SSL termination

Web browser ----https-----> web dyspatcher ----http-----> Pi system

2. SSL Re-encryption.

Web browser ----https-----> web dyspatcher ----https-----> Pi system

3. END to END SSL.

Web browser ----https- web dyspatcher-----> Pi system

So as you want to terminate the ssl at web dispatcher you need to follow the blow link.

http://help.sap.com/saphelp_nw70ehp1/helpdata/en/36/fd39eacf4cde4a8fe32d7f29b3db16/content.htm

Thanks

Rishi Abrol

[Former Member · Accepted solution]

Rishi

Thank you for your response again. I was looking at the URL your provided.

Looking for some clarifications on the below 2 steps. Are we creating a certificate in WebDispatcher in Step 6 and importing the same on the backend (In our case the PI system) in Step 7.

6.  Create credentials for the user that runs the SAP Web Dispatcher. Use the configuration tool’s commandseclogin as shown below. Use the –O option to create the credentials for the specific user that runs the SAP Web Dispatcher, for example, SYSTEM.

sapgenpse seclogin –p <PSE_Name> -x <PIN> -O [Windows_Domain>\]<user_ID>

  7.  Using the configuration tool’s command maintain_pk, import the root certificate for the CA that issued the AS Java its certificate into the SSL client PSE.

Thanks

Poornima

[Former Member · Accepted solution]

Hi,

Step 6 is you configure the SSL and this command creates a file cert_v2 which contains the password for the web dispatcher user to access.

Are you configuring the SSL to the Java server. I think no.

Please use the below guide link as its more clear.

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/60b1edfb-2a5c-2d10-2294-d1777056c...

Thanks

Rishi Abrol

[Former Member · Accepted solution]

Thank you Rishi I am doing the install will let you know how it goes.

Have awared the points

[Reagan]

Hello

Check this article

http://scn.sap.com/people/community.user/blog/2006/01/10/how-toconfigure-sap-webdispatcher-as-a-reve...

Additionally check these threads for some useful information.

http://scn.sap.com/message/14162821

http://scn.sap.com/thread/1244057

Regards

RB

[Former Member]

Thank you Reagan I have awared the points