Submenu – Reverse Proxy

The Reverse Proxy page is the primary page of the Airlock Gateway configuration. Here, virtual hosts and back-end groups can be connected to mappings in a table view. This view lists the virtual hosts, mappings, and back-end groups and displays the connections of each mapping, when selected.

The page header offers the following options:

The currently active search filter also restricts the content of the quick navigation drop-downs on the top right of the details view, visible when opening a mapping, virtual host, or back-end group.

The connection lines between Virtual Hosts, Mappings,and Back-end Groups define how HTTP requests are forwarded to the back-end applications.

Airlock Gateway always matches the most qualified entry path first. A back-end application should either use relative HTTP links in its HTML pages and HTTP headers, or both the entry and back-end path should be equal. If both is not the case, the content rewriting settings may be needed to make the application reverse proxy compatible (see HTTP/HTML rewriting).

• A mapping may be connected to one or more virtual hosts. If no virtual host is connected, a warning is displayed and the mapping will not be accessible after activation.
• A mapping may be connected to one or more back-end groups. Errors are displayed when a mapping is not connected to a back-end group or if one or more back-end groups are not configured correctly. See also Dynamic back-end group selection.

Due to the many-to-many relationships between the virtual hosts and mappings, only the connections of the selected element are shown. The selected element and its connected 'neighbors' are always shown at the top of the list. The remaining (not directly connected) elements are listed below (sorted alphabetically).

• To connect two elements, select the first element and click between the two elements (between the columns).
  As long as the elements are not connected, a dotted line and a plus-sign (+) is shown when you hover over the white space between the columns. A mouse click will then connect these elements and a new connection line will appear.
• To disconnect two elements, select the first element and click on the connecting line to another element.
  When hovering over the line with the mouse, a dotted line and a minus symbol (-) is shown. A mouse click will then disconnect just one or all connected elements, depending on which end of the line you click. A popup dialog will prompt for confirmation before any connection is removed.

A single mapping can be exported and imported as a partial configuration zip-file.

• A mapping export zip-file contains:
• all the settings of the mappings
• including the allow rules and the corresponding patterns,
• the names of the connected virtual and back-end groups
• and the references to the enabled deny rules.

However, the export file does not contain the referenced elements themselves (like virtual hosts, back-end groups or deny rules), it just contains references to those elements.

• When importing a mapping zip-file, Airlock Gateway will perform the following checks:
• If a mapping with the same name already exists, its settings/connections will be overwritten (manual confirmation necessary).
• If the connected elements exist they will be reconnected. Otherwise, a warning lists the elements that are not found.

When a mapping filter is active, it is possible to export all displayed mappings at once using the export button in the table header of the Mapping column.

0. Two mappings can be compared to each other as follows:
1. Select the first mapping by clicking on the mapping name.
2. Click on the compare icon of a second mapping.

• Back-end Group Status
• Dynamic back-end group selection