What is the role of Proxy Service in alfresco installation(6.2V)

cancel
Showing results for 
Search instead for 
Did you mean: 
Active Member II

What is the role of Proxy Service in alfresco installation(6.2V)

Hi, 

I'm trying to install the alfresco 6.2V with docker containers with the ref: https://www.alfresco.com/system/files_force/docker-compose-6.2-ga.zip.

Q1) can we install alfresco without proxy service, if yes.. what are the advantages and disadvantages? 

Thanks in Advance!

1 Reply
Moderator
Moderator

Re: What is the role of Proxy Service in alfresco installation(6.2V)

yes, you can setup without proxy. 

Using proxy helps protect unwanted requests being sent to your acs/share instances, you control what paths should reach acs/share and what not (via e.g. ngnix.conf, httpd.conf, haproxy.cfg etc.). You expose only ports that you intend to make it public where users connect to your acs/share endpoint via proxy and you redirect to acs/share on different ports which is not available to open network. Think of it as a gateway to your alfresco instances. 

If proxy is setup considering all security aspects, i am not sure if there would be any disadvantages. Couple of things to note from my experience.

1- Never run a production instance without proxy.

2- Identify and allow only paths that you indent to allow access. 

3- User SSL 

4- Do not create endpoints which needs sensitive data and returns sensitive data as a GET request, always use POST request as much as possible. So that if someone somehow gets access to your proxy server, you don't want your data to be compromised. 

5- Do not log sensitive info. 

etc. 

There are plenty of resources available online about proxy server, just google it. 

 

~Abhinav
(ACSCE, AWS SAA-C02, GAIQ)