Use a Reverse Proxy with FME Flow

Introduction

A reverse proxy is an intermediary server that forwards client requests from the Internet or intranet to a private server that fulfills them. A secure (SSL) reverse proxy is often used to provide a secure entry point into a private internal network through a DMZ or firewall.



To configure this setup, you will need to configure the reverse proxy to forward requests to FME Flow and configure FME Flow to use the reverse proxy's hostname.

 Process Overview

Part 1: Configure the Reverse Proxy

The instructions for configuring your reverse proxy will depend on the web server you select to fill this role. Apache, NGINX, IIS, or IBM HTTP Server are commonly provisioned as reverse proxy servers.

Regardless of the reverse proxy used, you must configure a redirect/rewrite so that all URLs matching the pattern 'fme.+' are forwarded to FME Flow. The port used by FME Flow's Web Application Server can be configured during installation or changed afterward by following these instructions in the documentation.

Example instructions for some reverse proxy servers have been provided.

Instructions for configuring Apache and IIS as reverse proxies for FME Flow are available here:
Using IIS and ARR with FME Flows Web Application Server.

If you want to use NGINX as a reverse proxy for FME Flow, follow these instructions:
Configure FME Flow for SSL using NGINX as a reverse proxy.

If you are using a different reverse proxy, make sure to follow parts 2 and 3 to complete your configuration.

Part 2: Configure FME Flow

Update Service URLs

FME Flow's Web User Interface uses various service URLs when submitting requests to each service. These service URLs must be updated to use the hostname of the reverse proxy. Start by logging into FME Flow under an admin account:

1. Locate Services under Admin > System Configuration> Network & Email.
2. Expand the “Services" section.
3. Click the “Change All Hosts" button.
4. Update the hostname for all Service URLs to use the hostname of the reverse proxy.

This screenshot was taken in FME Flow 2025.1; the interface may differ, but the concepts are the same.

Part 3: Verify the Configuration

• Confirm that FME Flow can run a workspace with Service: Job Submitter

1. Log in to the FME Flow Web User Interface with the administrator account you created during installation.
2. Click Run Workspace.
3. On the Run Workspace page, specify:

a. Repository: Samples
b. Workspace: austinApartments.fmw
c. Service: Job Submitter

4. Click Run.

• Similarly, confirm that FME Flow can run the workspace with Service: Data Streaming
• Confirm that FME Flow can run the workspace with Service: Data Download 

5. On the Run Workspace page, specify:

a. Repository: Samples
b. Workspace: austinDownload.fmw
c. Service: Data Download

6. Click Run, and upon job completion, click the “Data Download URL” to download the result. Ensure that the URL uses the reverse proxy hostname.

Confirm that you can still publish workspaces from FME Form using the URL that contains the reverse proxy hostname.