Submenu – Reverse Proxy

Reverse Proxy page

The Reverse Proxy page is the primary page of the Airlock Gateway configuration. Here, virtual hosts and back-end groups can be connected to mappings in a table view. This view lists the virtual hosts, mappings, and back-end groups and displays the connections of each mapping, when selected.

Filter and hide items from the table view

The page header offers the following options:

Filter labels

Mappings support the assignment of arbitrary labels. These labels can be used to filter displayed mappings.

In order to search for mappings with a certain label, enter the label in the Filter labels field on top of the Reverse Proxy view and click Search. This restricts the view to all matching mappings. At the same time, virtual hosts and back-end groups not attached to any matching mapping are hidden. If multiple labels are entered, only mappings having all given labels are displayed. Click Reset to show all mappings again.

When a mapping filter is active, it is possible to export all displayed mappings at once and in a single file using the export button in the table header of the Mapping column.

Hide unconnected items

Can be enabled to hide unconnected items from the Reverse Proxy table.

The currently active search filter also restricts the content of the quick navigation drop-downs on the top right of the details view, visible when opening a mapping, virtual host, or back-end group.

Connecting Virtual Hosts, Mappings, and Back-end Groups

The connection lines between Virtual Hosts, Mappings,and Back-end Groups define how HTTP requests are forwarded to the back-end applications.

Airlock Gateway always matches the most qualified entry path first. A back-end application should either use relative HTTP links in its HTML pages and HTTP headers, or both the entry and back-end path should be equal. If both is not the case, the content rewriting settings may be needed to make the application reverse proxy compatible (see HTTP/HTML rewriting).

  • A mapping may be connected to one or more virtual hosts. If no virtual host is connected, a warning is displayed and the mapping will not be accessible after activation.
  • A mapping may be connected to one or more back-end groups. Errors are displayed when a mapping is not connected to a back-end group or if one or more back-end groups are not configured correctly. See also Dynamic back-end group selection.

Due to the many-to-many relationships between the virtual hosts and mappings, only the connections of the selected element are shown. The selected element and its connected 'neighbors' are always shown at the top of the list. The remaining (not directly connected) elements are listed below (sorted alphabetically).

Adding/removing connections from a mapping

  • To connect two elements, select the first element and click between the two elements (between the columns).
    As long as the elements are not connected, a dotted line and a plus-sign (+) is shown when you hover over the white space between the columns. A mouse click will then connect these elements and a new connection line will appear.
  • To disconnect two elements, select the first element and click on the connecting line to another element.
    When hovering over the line with the mouse, a dotted line and a minus symbol (-) is shown. A mouse click will then disconnect just one or all connected elements, depending on which end of the line you click. A popup dialog will prompt for confirmation before any connection is removed.

Mapping import/export

A single mapping can be exported and imported as a partial configuration zip-file.

  • A mapping export zip-file contains:
  • all the settings of the mappings
  • including the allow rules and the corresponding patterns,
  • the names of the connected virtual and back-end groups
  • and the references to the enabled deny rules.

However, the export file does not contain the referenced elements themselves (like virtual hosts, back-end groups or deny rules), it just contains references to those elements.

  • When importing a mapping zip-file, Airlock Gateway will perform the following checks:
  • If a mapping with the same name already exists, its settings/connections will be overwritten (manual confirmation necessary).
  • If the connected elements exist they will be reconnected. Otherwise, a warning lists the elements that are not found.

When a mapping filter is active, it is possible to export all displayed mappings at once using the export button in the table header of the Mapping column.

Comparing mapping configurations

  1. Two mappings can be compared to each other as follows:
  2. Select the first mapping by clicking on the mapping name.
  3. Click on the compare icon of a second mapping.