Rev. proxy in front of Hana Express XSA

[former_member651738]

Hei,

I want to put an Rev. proxy (Apache) in front of the Hana Express XSA server.

And access all XSA apps via this proxy using one single virtualhost. (443)

Hana express is using port routing.

A first try to do this with a as generic as possible ruleset with header edit location and rewriterule works for some apps but fails if the uaa-security becomes involved.

Header edit location ^https://real_host.com:30032/(.*)(virtual_host.com)(.*)$ https://virtual_host.com/$1virtual_host.com$3 Header edit location ^https://([a-zA-Z0-9.-]+):(\d+)(.*)$ https://virtual_host.com/prt/$2$3

ProxyPass /uaa-security-oidc https://real_host.com:30032/uaa-security-oidc

ProxyPass /uaa-security https://real_host.com:30032/uaa-security

ProxyPass / https://real_host.com:30030/

RewriteRule "^/prt/(\d+)(.*)$" "https://real_host.com:$1$2" [P,L]

Did anyone manage to get something like this in place ?

And are you willing to share how you did it ?

What did SAP think during the design ? Should the Hana Express server be placed somewhere in the DMZ ?

Regards,

Frans

[dvankempen · Accepted solution]

Hi Frans,

Have you tried to use NGINX?

How To use NGINX Reverse Proxy for your SAP HANA Express apps (hosting mode = ports)

Blog post by radusimen

[former_member247294 · Accepted solution]

trip.frans : Let me know if you still need help with reverse proxy

[former_member651738 · Accepted solution]

Radu,

I would like some help with reverse proxy setup.

Do you have maybe some example material ?

Regards,

Frans

[Andreas_Schsser]

Hi, 

XS Advanced 1.3.0 or higher eventually supports so called "external domains". You can use this feature to setup a reverse proxy as described here:

https://help.sap.com/docs/PRODUCT_ID/2c1988d620e04368aa4103bf26f17727/4357904d410645ecb14611d6db0a6f...

If you use hostname-based routing, you can even use a different port (e.g. 443) for external requests with the option

xs create-domain <your external domain> --external --port 443

Best regards,
Andreas

[former_member651738]

We also looked at: https://github.com/andrewlunde/hxe_installer_scripts/blob/master/prep4hostnames.sh

In combination with a rev. proxy.

As a possible solution.

But here you need some Dyn. DNS solution in place also. And this we do not have/want.

Regards,

Frans

[former_member651738]

Denys,

This is a solution for some apps that you want to access.

We are looking for something that can handle the XSA page with all his apps.

So you answer might be a part of the solution.

Regards,

Frans