Files
help365/platform/haproxy-external-portal.html
koziavin 00717a92fb
All checks were successful
Deploy Static Site / deploy (push) Successful in 6m6s
update
2025-05-29 16:42:45 +04:00

248 lines
23 KiB
HTML
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<!DOCTYPE html>
<html lang="en">
<head>
<title>Configure HAProxy for the Service Portal</title>
<meta name="generator" content="Help+Manual" />
<meta name="keywords" content="" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="description" content="This article shows an example of configuring HAProxy to access a Service Portal at a designated domain name using a reverse proxy." />
<meta name="picture" content="" />
<meta property="og:type" content="website" />
<meta property="og:title" content="Full documentation for BRIX365 platform. Low-code developer guide. User guide. Admin guide. Developer guide." />
<meta property="og:url" content="https://brix365.com/en/help" />
<meta property="og:image" content="" />
<link rel="icon" href="favicon.png" type="image/png" />
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet" />
<link rel="stylesheet" href="./jquery-ui.min.css" />
<link rel="stylesheet" href="default.css" />
<link rel="stylesheet" href="./search-yandex.css" />
<link rel="stylesheet" href="./article.css" />
<link rel="stylesheet" href="./glossary.css" />
<link rel="stylesheet" href="./theme.css" />
<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="helpman_settings.js"></script>
<script type="text/javascript" src="helpman_topicinit.js"></script>
<script type="text/javascript" src="highlight.js"></script>
<script type="text/javascript">
$(document).ready(function(){highlight();});
</script>
</head>
<body>
<script>!function(e,t,c,n,r,a,m){e.ym=e.ym||function(){(e.ym.a=e.ym.a||[]).push(arguments)},e.ym.l=1*new Date;for(var s=0;s<document.scripts.length;s++)if(document.scripts[s].src===n)return;a=t.createElement(c),m=t.getElementsByTagName(c)[0],a.async=1,a.src=n,m.parentNode.insertBefore(a,m)}(window,document,"script","https://mc.yandex.ru/metrika/tag.js"),ym(83179930,"init",{clickmap:!0,trackLinks:!0,accurateTrackBounce:!0,webvisor:!0})</script><noscript><div><img alt=""src=https://mc.yandex.ru/watch/83179930 style=position:absolute;left:-9999px></div></noscript>
<header class="header elma-365">
<div class="container">
<a class="header__logo" href="https://brix365.com/en/help">
<img src="./logo-en.svg" alt="header logo">
</a>
<!-- <div class="hero__search-form" id="search-panel">
<form class="search-form" onsubmit="ym(83180416,'reachGoal','poisk')">
<label class="search-form__label">
<span id="reset-search" class="search__icon"></span>
<input class="search-form__input" type="text">
</label>
<input class="search-form__submit" type="submit" value="Submit">
</form>
</div> -->
<div class="hero__search-form" id="search-panel"> <form class="search-form"> <label class="search-form__label"> <span id="reset-search" class="search__icon"></span> <input class="search-form__input" type="text"> </label> <input class="search-form__submit" type="submit" value="Submit"> </form> </div>
<div class="hero__search">
<a href="#" id="search-icon" class="hero__search-icon">
<img src="search-icon-white.svg" alt="search string">
</a>
<a href="#" id="side-menu-icon" class="hero__side-icon">
<img src="side_menu.svg" alt="side menu">
</a>
</div>
<div class="header__navi">
<ul class="header__list"><li><span class="solution-select"><span class="solution-select__selected"></span><svg width="7" height="4" viewBox="0 0 7 4" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1 1L3.5 3.5L6 1" stroke="white" stroke-linecap="round" stroke-linejoin="round"/></svg><ul class="solution-select__list"><li><a class="project-link" href="https://brix365.com/en/help/platform/get-trial.html">Platform</a></li><li><a class="project-link" href="https://brix365.com/en/help/ecm/ecm-functions.html">ECM</a></li><li><a class="project-link" href="https://brix365.com/en/help/crm/crm_overview.html">CRM</a></li><li><a class="project-link" href="https://brix365.com/en/help/service/service-functions.html">Service</a></li><li><a class="project-link" href="https://brix365.com/en/help/projects/projects-functions.html">Projects</a></li><li><a class="project-link" href="https://brix365.com/en/help/business_solutions/-elma365-store.html">Business Solutions</a></li></ul></span></li><li><a href="https://api.brix365.com/en/" target="_blank">API</a></li><li><a href="https://tssdk.brix365.com/" target="_blank">SDK</a></li></ul>
</div>
</div>
</header>
<main class="main container">
<aside class="sidebar" id="sidebar">
<div class="sidebar__header">
<a class="header__logo" href="https://brix365.com/en/help">
<img src="./logo-light-en.svg">
</a>
<span class="sidebar__close elma-365-close" id="close"></span>
</div>
<div class="sidebar__wrapper" id="side-menu">
</div>
</aside>
<article class="article" id="article">
<div class="article-inner">
<div class="content">
<header class="article__header">
<div class="article__bread" style="display:flex; gap:10px;">
<span id="subcategory" class="search-res__item-category search-res__item-category_subcategory subcategory article__badge"></span>
<div class="topic__breadcrumbs">
<p><a href="elma365-on-premises.html">BRIX On-Premises</a> &gt; Other &gt; Configure proxy for external portal / Configure HAProxy for the Service Portal</p>
</div>
</div>
<div class="topic__title"><h1 class="p_Heading1"><span class="f_Heading1">Configure HAProxy for the Service Portal</span></h1>
</div>
</header>
<section class="article__content">
<div class="scroll-top-inner">
<a href="#h1-article" class="scroll-top"></a>
</div>
<!-- Placeholder for topic body. -->
<p style="line-height: 1.20; margin: 7px 0 16px 0;"><span style="font-size: 13px; font-family: Inter; color: #394149;">This article shows an example of configuring </span><span style="font-family: Inter;">HAProxy </span><span style="font-size: 13px; font-family: Inter; color: #394149;">to access a Service Portal at a designated domain name using a reverse proxy.</span></p>
<p class="p_CodeExample" style="page-break-inside: avoid;"><span class="f_CodeExample">начало&nbsp;внимание</span></p>
<p style="line-height: 1.20; margin: 7px 0 16px 0;"><span style="font-family: Inter;">Before you start, you need to enable and activate a <a href="service-portal.html" class="topiclink">Service Portal</a>. </span></p>
<p class="p_CodeExample" style="page-break-inside: avoid;"><span class="f_CodeExample">конец&nbsp;внимание</span></p>
<p style="line-height: 1.20; margin: 7px 0 16px 0;"><span style="font-size: 13px; font-family: Inter; color: #394149;">We also recommend configuring </span><span style="font-family: Inter;">HAProxy </span><span style="font-size: 13px; font-family: Inter; color: #394149;">for BRIX with a reverse proxy based on the instructions in the <a href="haproxy-elma365.html" class="topiclink">Configure HAProxy to use BRIX behind a reverse proxy article</a>.</span></p>
<p style="line-height: 1.20; margin: 0 0 11px 0;"><span style="font-size: 13px; font-family: Inter; color: #394149;">The following data is used in the example:</span></p>
<ul style="list-style-type:disc">
<li style="line-height: 1.20; margin-top: 7px; margin-right: 0; margin-bottom: 7px;"><code><b>/_portal/orders</b></code><span style="font-family: Inter;">. Name of the workspace with an activated portal.</span></li><li style="line-height: 1.20; margin-top: 7px; margin-right: 0; margin-bottom: 7px;"><code><b>portal-elma365client.domain.com</b></code><span style="font-family: Inter;">. The Service Portal domain name.</span></li><li style="line-height: 1.20; margin-top: 7px; margin-right: 0; margin-bottom: 7px;"><code><b>192.168.1.10</b></code><span style="font-family: Inter;">. IP address of the server with the BRIX application.</span></li></ul>
<p style="line-height: 1.20; margin: 7px 0 16px 0;"><span style="font-size: 13px; font-family: Inter; color: #394149;">Here is an example of reverse proxy configuration to access a Service Portal at a designated domain with </span><span style="font-family: Inter;">HAProxy</span><span style="font-size: 13px; font-family: Inter; color: #394149;">:</span></p>
<p class="p_CodeExample" style="page-break-inside: avoid;"><span class="f_CodeExample">global</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;maxconn 10000</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;log /dev/log &nbsp;&nbsp;local0</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;log /dev/log &nbsp;&nbsp;local1 notice</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;chroot /var/lib/haproxy</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;stats socket /run/haproxy/admin.sock mode 660 level admin expose-fd listeners</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;stats timeout 30s</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;user haproxy</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;group haproxy</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;daemon</span><br />
<span class="f_CodeExample">&nbsp;</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;ca-</span><span class="f_CodeExample" style="font-weight: bold;">base</span><span class="f_CodeExample"> /etc/ssl/certs</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;crt-</span><span class="f_CodeExample" style="font-weight: bold;">base</span><span class="f_CodeExample"> /etc/ssl/</span><span class="f_CodeExample" style="font-weight: bold;">private</span><br />
<span class="f_CodeExample" style="font-weight: bold;">&nbsp;</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ssl-</span><span class="f_CodeExample" style="font-weight: bold;">default</span><span class="f_CodeExample">-bind-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ssl-</span><span class="f_CodeExample" style="font-weight: bold;">default</span><span class="f_CodeExample">-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ssl-</span><span class="f_CodeExample" style="font-weight: bold;">default</span><span class="f_CodeExample">-bind-options ssl-min-ver TLSv1.2 no-tls-tickets</span><br />
<span class="f_CodeExample">&nbsp;</span><br />
<span class="f_CodeExample">defaults</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;log &nbsp;&nbsp;global</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;mode &nbsp;&nbsp;http</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;option &nbsp;&nbsp;httplog</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;option &nbsp;&nbsp;dontlognull</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;timeout connect 5000</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;timeout client &nbsp;50000</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;timeout server &nbsp;50000</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;errorfile 400 /etc/haproxy/errors/400.http</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;errorfile 403 /etc/haproxy/errors/403.http</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;errorfile 408 /etc/haproxy/errors/408.http</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;errorfile 500 /etc/haproxy/errors/500.http</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;errorfile 502 /etc/haproxy/errors/502.http</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;errorfile 503 /etc/haproxy/errors/503.http</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;errorfile 504 /etc/haproxy/errors/504.http</span><br />
<span class="f_CodeExample">&nbsp;</span><br />
<span class="f_CodeExample">frontend elma365_portal</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;mode http</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;bind *:80</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;bind *:443 ssl crt /etc/ssl/</span><span class="f_CodeExample" style="font-weight: bold;">private</span><span class="f_CodeExample">/elma365.pem</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;redirect scheme https code 301 unless { ssl_fc }</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;maxconn 10000</span><br />
<span class="f_CodeExample">&nbsp;</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;acl elma365 hdr(host) -i portal-elma365client.domain.com</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;use_backend elma365_server </span><span class="f_CodeExample" style="font-weight: bold;">if</span><span class="f_CodeExample"> elma365</span><br />
<span class="f_CodeExample">&nbsp;</span><br />
<span class="f_CodeExample">backend elma365_server</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;mode http</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;balance leastconn</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;option forwardfor</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;option httpclose</span><br />
<span class="f_CodeExample">&nbsp;</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;acl elma365_portal_url url_beg -i /_portal/orders</span><span class="f_CodeExample" style="color: #ffffff;">&nbsp;</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;acl elma365_redirect url -i /index.html</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;acl elma365_portal_addr url_reg -i ^.+.(jpg|jpeg|gif|png|svg|ico|js|woff|woff|woff2|css|po)$</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;acl elma365_portal_addr url_beg -i /ws /api /s3elma365 /guard /assets</span><br />
<span class="f_CodeExample">&nbsp;</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http-request redirect code 301 prefix /_portal/orders</span><span class="f_CodeExample" style="color: #ffffff;">&nbsp;</span><span class="f_CodeExample"> </span><span class="f_CodeExample" style="font-weight: bold;">if</span><span class="f_CodeExample"> elma365_redirect OR !elma365_portal_url !elma365_portal_addr</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http-request deny </span><span class="f_CodeExample" style="font-weight: bold;">if</span><span class="f_CodeExample"> !elma365_portal_url !elma365_portal_addr !elma365_redirect</span><br />
<span class="f_CodeExample">&nbsp;</span><br />
<span class="f_CodeExample"> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;server elma365-1 192.168.1.10:443 verify none check ssl</span></p>
<p style="line-height: 1.20; margin: 7px 0 16px 0;"><span style="font-size: 15px; font-family: Inter; color: #394149;">During installation or reconfiguration, in the </span><span style="font-family: Inter; font-weight: bold;">Enter BRIX domain name (FQDN) or IP address</span><span style="font-size: 15px; font-family: Inter; color: #394149;"> field, specify </span><code><b>elma365client.domain.com</b></code><span style="font-size: 15px; font-family: Inter; font-weight: bold; color: #394149;"> </span><span style="font-size: 15px; font-family: Inter; color: #394149;">as the external domain that BRIX will be available at and enable </span><span style="font-size: 15px; font-family: Inter; font-weight: bold; color: #394149;">SSL termination</span><span style="font-size: 15px; font-family: Inter; color: #394149;">.</span></p>
<div class="bottom-nav">
<a id="prev-link" class="topic__navi_prev" href="kubernetes-on-redos.html">
<span class="bottom-nav__arrow bottom-nav__arrow--prev"></span> <span
class="bottom-nav__link">kubernetes-on-redos.html</span>
</a>
<a id="next-link" class="topic__navi_next" href="nginx-external-portal.html">
<span class="bottom-nav__link">nginx-external-portal.html</span> <span
class="bottom-nav__arrow bottom-nav__arrow--next"></span>
</a>
</div>
<!-- добавляет на страницу строку блок Была ли статья полезной? -->
<div class="feedback" id="feedback"><div class="feedback-help"><span><b>Was this helpful?</b></span><form action="" method="POST" class="feedback-form" id="feedback-form"><div class="feedback__popup feedback__popup-response" id="feedback__popup_thx" style="display: none;">Thanks for your feedback!</div><div class="feedback__popup" id="feedback__popup_why" style="display: none;"><div class="feedback__popup-header">Please specify why:</div><input type="radio" name="category" id="bad_recommendation" value="bad_recommendation"><label for="bad_recommendation">Recommendations did not help me</label><input type="radio" name="category" id="difficult_text" value="difficult_text"><label for="difficult_text">Article is hard to understand</label><input type="radio" name="category" id="no_answer" value="no_answer"><label for="no_answer">Didn`t answer my question</label><input type="radio" name="category" id="bad_header" value="bad_header"><label for="bad_header">Content does not match the topic</label><input type="radio" name="category" id="other_reason" value="other_reason"><label for="other_reason">Other</label></div><div class="feedback__popup" id="feedback__popup-other" style="display: none;"><div class="feedback__popup-header">How we can improve it?</div><textarea class="feedback__textarea" name="other" id=""></textarea><input type="submit" class="feedback__other-btn" value="Submit"></div><div class="feedback-form__btn-group"><input type="radio" name="useful" id="feedback__useful_yes" value="true"><label for="feedback__useful_yes"><img src="like.svg" class="small-img" alt="like"><spanclass="feedback-form__btn-group_yes-btn">Yes</spanclass="feedback-form__btn-group_yes-btn"></label><input type="radio" name="useful" id="feedback__useful_no" value="false"><label for="feedback__useful_no"><img src="dislike.svg" class="small-img" alt="dislike"><spanclass="feedback-form__btn-group_no-btn">No</spanclass="feedback-form__btn-group_no-btn"></label></div><select name="category"><option disabled="">Please specify why</option><option value="bad_recommendation" selected="">Recommendations did not help me</option><option value="difficult_text">Article is hard to understand</option><option value="no_answer">Didn`t answer my question</option><option value="bad_header">Content does not match the topic</option><option value="other_reason">Other</option></select><input type="submit"></form></div><div class="found_typo"><p style="margin: 0px; margin-top: 16px !important;"><span><b>Found a typo?</b></span> Select it and press <i>Ctrl+Enter</i> to send us feedback</p></div></div>
</section>
</div>
<aside class="article__sidebar" style="display:none">
<input type="checkbox" />
<div class="article__arrow"></div>
<div class="table-of-contents elma365-right" id="toc2Content">
<h3 class="h3-toc">In this topic</h3>
<nav id="toc2"></nav>
</div>
</aside>
</div>
</article>
</main>
<footer class="footer">
<div class="footer-container">
<div class="footer-mobile">
<ul class="footer-mobile__list"><li><a href="https://brix365.com/en/" target="_blank">BRIX</a></li><li><a href="https://tssdk.brix365.com/en/latest/" target="_blank">SDK</a></li><li><a href="https://api.brix365.com/en/" target="_blank">API</a></li></ul><ul class="footer-mobile__list"><li><a href="https://brix365.com/en/help/platform/get-trial.html">Platform</a></li><li><a href="https://brix365.com/en/help/ecm/ecm-functions.html">ECM</a></li><li><a href="https://brix365.com/en/help/service/service-functions.html">Service</a></li><li><a href="https://brix365.com/en/help/projects/projects-functions.html">Projects</a></li></ul>
</div>
<div class="footer-wrap">
<div><span class="mobile-question-popup">Send feedback</span><form method="POST" action class="question__popup question-xs" id="question__popup"><div class="question-wrap"><span class="close"></span><span class="title">Ask a question</span><label for="help_question" style="display: none;"></label><textarea name="help_question" id="help_question"></textarea><input type="submit" value="Send"></div></form><div class="hidden fade-in question-success-xs">Sent</div></div>
<div class="footer-flex-b">
<span class="footer-copy">&copy; 2025 BRIX</span>
<ul class="footer-list">
<li class="footer-item">
<a href="#" class="arrow-top" style="display: block;"></a>
</li>
</ul>
</div>
</div>
</div>
</footer>
<iframe name="hmnavigation" style="display:none!important"></iframe>
<script src="./jquery-ui.js"></script>
<!--script src="//cdn.jsdelivr.net/npm/featherlight@1.7.14/release/featherlight.min.js" type="text/javascript" charset="utf-8"></script-->
<script src="./jquery.tocify.min.js"></script>
<script src="./TypoReporter.min.js"></script>
<script src="./google-search.js"></script>
<script src="./main.js"></script>
</body>
</html>