Starting with ISL Conference Proxy 4.0.0 it is now possible to place your ISL Conference Proxy server behind a reverse proxy/load balancer if required.
Important: Please note that placing your ISL Conference Proxy server behind a reverse proxy is not an optimal setup since it adds another single point of failure and introduces potential delays. If possible we recommend avoiding a reverse proxy and suggest opening ports directly.
Prerequisites:
- Decide on a DNS name for your ISL Conference Proxy server (isl.example.com in our examples) and create the appropriate licence file.
- Write down your reverse proxy's IP address (A.B.C.D in our examples).
- Write down your ISL Conference Proxy's IP address (E.F.G.H in our examples).
- Make sure that the chosen DNS name resolves to the reverse proxy's IP address (isl.example.com -> A.B.C.D).
The next step is to configure the required settings in ISL Conference Proxy administration:
- Go to Configuration - Advanced - Web server.
- Set Allowed IP addresses for frontends to the appropriate value: A.B.C.D
- Set External ports for frontends to: 80,443
- Set Enable HTTP frontend to: Yes
- Set Use X-Forwarded-For in HTTP frontend to: Yes
- Set Use X-Forwarded-Host in HTTP frontend to: Yes
Important: Make sure you enable access on ports 7620 and 7621 from A.B.C.D to E.F.G.H in your firewall.
Troubleshooting
If you completed the steps above and the ICP is not accesible or you do not know the address of the reverse proxy (A.B.C.D.), try the following steps:
- Set Use X-Forwarded-For in HTTP frontend to: No
- Set Use X-Forwarded-Host in HTTP frontend to: No
- Set Allowed IP addresses for frontends to: "any"
- Visit https://<your-ICP-server-address>/myip (page will show the IP address from which you are accessing the ICP)
- Copy the IP into the Allowed IP addresses for frontends setting field
- Set Use X-Forwarded-For in HTTP frontend to: Yes
- Set Use X-Forwarded-Host in HTTP frontend to: Yes
You can now proceed to setting up your reverse proxy. We have tested and provide examples for the following options: