Use a Reverse Proxy with FME Server

Introduction

A reverse proxy is an intermediary server that forwards client requests from the internet/intranet to a private server that fulfills the requests. Often a secure (SSL) reverse proxy will be used to provide a secure entry point into a private internal network through a DMZ/Firewall.



To configure this setup, you will need to configure the reverse proxy to forward requests to FME Server and configure FME Server to use the hostname of the reverse proxy.

Step-by-Step Instructions

Part 1: Configure the Reverse Proxy

The instructions for configuring your reverse proxy will depend on the web server you select to fill this role. Commonly Apache, NGINX, IIS or IBM HTTP Server are provisioned as reverse proxy servers. 

Regardless of the reverse proxy used, you will need to configure a redirect/rewrite so that all URLs matching the pattern 'fme.+' are forwarded to FME Server. The port used by FME Server's Web Application Server can be configured during installation or changed afterward by following these instructions in the documentation .

Example instructions for some reverse proxy servers have been provided. 

Instructions for configuring Apache and IIS as reverse proxies for FME Server are available here: 
Using IIS and ARR with FME Servers Web Application Server

If you want to use NGINX as a reverse proxy for FME Server, follow these instructions:
Configure FME Server for SSL using NGINX as a reverse proxy

If you are using a different reverse proxy, make sure to follow part 2 and 3 to complete your configuration. 
 

Part 2: Configure FME Server

Update Service URLs

FME Server's Web User Interface uses various service URLs when submitting requests to each service. These service URLs must be updated to use the hostname of the reverse proxy:

1. Log in to FME Server under an admin account.
2. Locate Services under Admin > System Configuration > Network & Email.
3. Expand the “Services” section.
4. Click  the “Change All Hosts” button .
5. Update the hostname for all Service URLs to use the hostname of the reverse proxy.

 This screenshot was taken in FME Server 2021, the interface may be different but the concepts are the same. 
 

Part 3: Verify the Configuration

• Confirm that FME Server can run a workspace with Service: Job Submitter

1. Login to the FME server Web User Interface with the administrator account that you created during installation.

2. Click Run Workspace.

3. On the Run Workspace page, specify: 

a. Repository: Samples
b. Workspace: austinApartments.fmw
c. Service: Job Submitter

4.  Click Run.

• Similarly, confirm that FME Server can run the workspace with Service: Data Streaming 

• Confirm that FME Server can run the workspace with Service: Data Download 

1. On the Run Workspace page, specify:

a. Repository: Samples
b. Workspace: austinDownload.fmw
c. Service: Data Download

2. Click Run and upon job completion, click the “Data Download URL” to download the result. Ensure that the URL uses the reverse proxy hostname.

This screenshot was taken in FME Server 2021.2, the interface may be different but the concepts are the same. 

• Confirm that you can still publish workspaces from FME Desktop using the URL that contains the reverse proxy hostname.