Configure a proxy

Under some circumstances, Esri Maps for IBM Cognos uses an internal proxy mechanism to broker communication with the ArcGIS platform (in addition to any web services referenced by retrieved ArcGIS items). When required, Esri Maps for IBM Cognos sends HTTP requests to the proxy, and the proxy forwards the requests to the remote web server (such as ArcGIS). The proxy then relays the response back to Esri Maps for IBM Cognos.

internal proxy mechanism

The internal proxy is not used if Esri Maps for IBM Cognos and all the data and web services it uses are on the same domain, or if both the client browser and all servers support cross-origin resource sharing (CORS). In most production environments, however, this configuration is not common, and configuring the internal proxy is recommended.

Configure the internal proxy

Although the internal proxy is designed to work with minimal custom configuration, you can customize its settings to allow only requests to specific servers; that is, you can specify the resources to which the proxy will forward requests.

To configure the internal proxy settings, modify the proxy configuration file using a standard text editor.

The proxy configuration file (proxy.conf) is located on the EM4C Gateway at: em4c_location>\temp\proxy.conf

To define the URLs that Esri Maps for IBM Cognos is allowed to access, specify each individual URL in a separate serverUrl property. Create a separate serverUrl property for every server that Esri Maps for IBM Cognos must access to retrieve map services.

For example:

matchUrls = true
serverUrl = http://www.arcgis.com
serverUrl = https://arcgis.com
serverUrl = http://myserver.mycompany.com

Test the proxy

To test the internal proxy, route an HTTP request through it. If the proxy returns the expected value, it is working correctly. The following steps provide examples of calls that simulate the HTTP traffic that Esri Maps for IBM Cognos would generate.

To verify the location of the Esri Maps for IBM Cognos internal proxy, type its URL in a web browser's address bar:
http://myibmcognosserver/ibmcognos/em4c/cgi-bin/em4c.cgi
When you successfully access the internal proxy, the page displays a timestamp. For example: Thu Oct 02 07:34:52 PDT 2014. If you do not receive the expected response, verify your internal proxy configuration settings.
Verify that your can connect to a known resource.
For example, each of the following URLs should return a JSON object that describes the version of the software installed on the server.
- ArcGIS Online: http://www.arcgis.com/sharing?f=pjson
- Portal for ArcGIS instance: http://myPortal/gis/sharing/?f=pjson
Route traffic through the internal proxy.
For example, each of the following URLs should return a JSON object that describes the version of the software installed on the server:
- ArcGIS Online: http://ibmcognosserver/ibmcognos/em4c/cgi-bin/em4c.cgi?http://www.arcgis.com/sharing?f=pjson
- Portal for ArcGIS instance: http://ibmcognosserver/ibmcognos/em4c/cgi-bin/em4c.cgi?http://myPortal/gis/sharing/?f=pjson
Note:
If routing a call to the internal proxy does not return the expected result, you may need to use an upstream proxy to access the resources. In this case, configure the upstream proxy, then run the tests in this section again. The internal proxy will route traffic through the upstream proxy and return the expected result to the web browser. For more information, see Configure an optional upstream proxy.
A successful result means that your proxies are properly configured and working as expected.

Configure an optional upstream proxy

In situations in which Esri Maps for IBM Cognos must use its internal proxy, the internal proxy must be able to forward HTTP requests to the intended target resources (such as map services). In some environments, firewall rules prevent these requests from being sent; for example, the firewall may prevent HTTP traffic from leaving the internal network.

To solve this problem, you can configure an upstream forwarding proxy.

An upstream proxy allows connections outside the network without compromising the security of the internal network. One common approach to using an upstream proxy is to place a proxy server in a perimeter network to protect the internal network.

Place the optional upstream proxy server in a perimeter network to protect the internal network.

The upstream proxy itself represents an enterprise-level, third-party (non-Esri) solution. It is not part of Esri Maps for IBM Cognos.

The Esri Maps for IBM Cognos proxy configuration file contains properties that allow you to configure an upstream proxy.

To configure upstream proxy settings, modify the proxy configuration file using a standard text editor.

Set the upStreamProxy property to true.
Specify the upStreamProxyUrl using the following convention:
```
http://<address>:<port>
```
where:
- address —the address of the proxy server; for example, proxy.mycompany.com
- port—the port number assigned to the proxy server; for example, 8888
For example:
```
upStreamProxy = true
upStreamProxyUrl = http://proxy.mycompany.com:8888
```
Note:
If you use an IP address to specify the location of your proxy server, do not type leading zeroes; for example, use 130.25.0.1 instead of 130.025.000.001.
If you do not know the web address or port number of your proxy server, contact your network administrator.
To test the upstream proxy, route a request through the internal proxy, which will in turn route the call through the upstream proxy. For more information, see Test the proxy.