IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  create junction to backend url

    Posted 12/18/19 03:12 AM
    Edited by Treephat Duangtanoo 12/18/19 11:17 PM
    Hi 

    Can I create junction for point to backend server like this

    junction name : /web1 point to  192.168.10.10/webapp





    ------------------------------
    Treephat Duangtanoo
    ------------------------------


  • 2.  RE: create junction to backend url

    Posted 12/18/19 04:05 AM
    Hello Treephat,

    You can't directly create a junction as you describe.  There are three types of junction:

    1) Standard Junction.  Matches on path.  Path is modified to remove junction component:
    https://www.webseal.com/app/webapp/page.html  ----> https://host.backend.com/webapp/page.html

    2) Transparent Path Junction.  Matches on path.  Path is not modified:
    https://www.webseal.com/webapp/page.html ----> https://host.backend.com/webapp/page.html

    3) Virtual Host Junction.  Matches on the Host header.  Path is not modified.
    https://host.backend.com/webapp/page.html ----> https://host.backend.com/webapp/page.html

    In your case, you could use a Standard Junction if you don't mind the reference to webapp being in the URL accessed by customer:
    https://www.webseal.com/web1/webapp/page.html ----> https://192.168.10.10/webapp/page.html

    If you wanted to replace /web1 with /webapp in the Reverse Proxy you could use an HTTP Transformation to do this.  Transformations are done before junction processing:

    https://www.ws.com/web1/page.html -> https://www.ws.com/webapp/page.html -> https://192.168.10.10/webapp/page.html
    -                      ----Transformation--->                    -----Junction------>


    Modifying the path in this way, you would very likely have issues with Links returned from the backend application which would reference /webapp.  These would arrive back at the client.   They might work in some cases but things like path based cookies could have an issue.  You would need to test.

    Cheers... Jon.


    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------