Skip to main content
C
CHASEONHO18-Opal
18-Opal
November 8, 2017
Solved

Questions about external access via Reverse Proxy

  • November 8, 2017
  • 11 replies
  • 6703 views

Good morning i'm SeonHo

 

i have question about external access ..

 

Windchill is said to be web-based.
Web-based means that you can access from outside if you have a valid account or privilege.


However, it can only be accessed within the network where the Windchill installed server is located.
In order to allow external access, all of the firewalls are released, port 80 is opened, and port forwarding is set to internal IP installed with Windchill.


When you access Windchill, the PTC logo and login pop-up appear, but after logging in, an error is displayed and you can not access Windchill.


I tried external access through a reverse proxy, but this was also possible only on the internal network.
I would like to access Windchill even when using an external network due to my business trip, not my internal network.


Let me know how to configure it


Please tell us which section of the document you need to refer to or how to access it externally.

 

Thank you.

Best answer by olivierfresse
  • First, it need two Windchill for reverse proxy configuration?

 No, only an Apache server in the DMZ. It's the reverse proxy.

 

  • Second, Windchill was configured reverse proxy in DMZ and point it inside the original Windchill?

 I don't understand this question , but the reverse proxy configuration is done ... on the reverse proxy,  in the DMZ.
It does the URL rewrite job, changes the server name between internet and the intranet, and eventually the port number.

  • Third, should you use HTTPS only to allow external access with a reverse proxy configuration? Is that correct?

Yes, it's wiser. Not mandatory but wiser
First, for safety. HTTP is not safe at all...
Second, if you need to access to applets ( admin task) you need to setup RMI tunelling, and HTTPS is a prerequesite to this.

  • Finally, where does ProxyPassReverse or ProxyPass work? Is ProxyPass the original Windchill? Or is Windchill with a reverse proxy configuration?

On the reverse proxy server. 

11 replies

O
olivierfresse15-Moonstone
15-Moonstone
November 8, 2017

Hi,

Yes, reverse proxy is the solution.

The main reason lies in the way PDMLink generates URLs.

These URLs use the internal name of the server, so they can't be used on an extranet...

If it doesn't work, something's wrong in yout configuration !


Documentation : http://support.ptc.com/help/windchill/wc110_hc/whc_en/index.html#page/Windchill_Help_Center%2FWCAdvDepNetworkConfig_ReverseProxy.html%23

 

 

 

 

C
CHASEONHO18-OpalAuthor
18-Opal
November 9, 2017

Thanks  olivierfresse

 

I'll give you some confirmation, let me know if I'm right.

 

First, it need two Windchill for reverse proxy configuration?

 

Second, Windchill was configured reverse proxy in DMZ and point it inside the original Windchill?

 

Third, should you use HTTPS only to allow external access with a reverse proxy configuration? Is that correct?

 

Finally, where does ProxyPassReverse or ProxyPass work? Is ProxyPass the original Windchill? Or is Windchill with a reverse proxy configuration?

 

 

thank

 

O
olivierfresse15-MoonstoneAnswer
15-Moonstone
November 9, 2017
  • First, it need two Windchill for reverse proxy configuration?

 No, only an Apache server in the DMZ. It's the reverse proxy.

 

  • Second, Windchill was configured reverse proxy in DMZ and point it inside the original Windchill?

 I don't understand this question , but the reverse proxy configuration is done ... on the reverse proxy,  in the DMZ.
It does the URL rewrite job, changes the server name between internet and the intranet, and eventually the port number.

  • Third, should you use HTTPS only to allow external access with a reverse proxy configuration? Is that correct?

Yes, it's wiser. Not mandatory but wiser
First, for safety. HTTP is not safe at all...
Second, if you need to access to applets ( admin task) you need to setup RMI tunelling, and HTTPS is a prerequesite to this.

  • Finally, where does ProxyPassReverse or ProxyPass work? Is ProxyPass the original Windchill? Or is Windchill with a reverse proxy configuration?

On the reverse proxy server. 

    Terms & ConditionsAccessibility statement