Take the 2-minute tour ×
Stack Overflow is a question and answer site for professional and enthusiast programmers. It's 100% free, no registration required.

Is it possible to achieve the below mentioned scenario with IIS - ARR combination? or with any additional development.

Have a front end web server (reverse proxy kind of), in DMZ, which will authenticate (and if possible authorize) users and then forwards the request to corresponding application servers with in the internal network.

Any suggestions / thoughts would be really helpful.

share|improve this question
    
How do you plan on passing authentication from your "DMZ" to an internal network if they aren't aware of each other? The only way I know to do this is to use Windows Authentication - all computers part of the same domain - which negates your DMZ requirement. –  Brock Hensley Apr 28 '14 at 20:27
    
Even I can use Http Headers for that (if custom code development is an option). internal network systems can trust HTTP Headers from the DMZ server. Windows authentication might be an overhead, since delegation might need to be enabled). Whole point is to authenticate users in DMZ, pass on the authenticated user info to internal network, which internal systems will trust. Will this be an option? –  user1206686 Apr 29 '14 at 5:59
    
Am trying to draw parallels with the IBM webseal product here, which does similar stuff. Trying to see if we can achieve a similar thing using MS stack. –  user1206686 Apr 29 '14 at 6:01

1 Answer 1

You could achieve this by adding in a Query String value equivalent to "?authorized=false/true", Use ARR to evalute the Query String Value - if authorized=false route to authorization server farm, then send the same URL from the authorization process with query string authorized=true which will route to the "live" server farm.

Of course you will probably want to use some other value than "authorized" in plain text in your URL!

You could possibly do the same thing in the header, using appcmd you can manipulate headers in ARR. The schema for ARR is in the C:\Windows\system32\inetsrv\config\schema\arr_schema.xml file. If you examine this schema you will see where the Header elements are.

HTH

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.