How to replace the ARIS server hostname with a Load Balancer alias

Last activity on February 19, 2024 - 17:56 127 Views 3 Replies Administration & User Management

Pablo Gonzalez on February 15, 2024

I have a particular request where we need to replace the main ARIS server hostname by a Load Balancer alias.

Current installation: https://hostname/#default/home

Current Load Balancer alias: https://aris.my-company.cloud

From server side, how to replace the hostname with the LB alias?

Expected result: https://aris.my-company.cloud/#default/home

It's important to note that SSL is enabled and we intend to enable Single sign-on as well. We also intend to reach out the server via ARIS Client and ARIS Connect.

Possible solution:

I was thinking of using the hosts file of the server but it didn't work. Another assumption is to use the default Apache installation within ARIS but I don't know the impact of doing that or even HOW TO do that.

Any example is much appreciate.

Thanks in advance.

Tags: #aris10

Bookmark

Notify Moderator

Best Reply

André Vitor Oliveira on February 15, 2024

Hi Pablo

You can use these commands:

ACC+ localhost> reconfigure loadbalancer_<s,m,l> +HTTPD.servername="<AliasofARISLoadbalancer>"
ACC+ localhost> reconfigure loadbalancer_<s,m,l> + HTTPD.zookeeper.application.instance.host=”<ServerAlias>”

Regarding the SSL certificates usually should matches the name of Alias, however in same cases could use (*) parameter to define the "domain", example (*.)arisconnect.com .. I mean The SSL-certificate needs to fit to the name the user enter in the browser/client. In all other cases the certificate is invalid

BR
AO

or register to reply.

Show in context Notify Moderator

3 Replies

André Vitor Oliveira on February 15, 2024

Best reply

Hi Pablo

You can use these commands:

ACC+ localhost> reconfigure loadbalancer_<s,m,l> +HTTPD.servername="<AliasofARISLoadbalancer>"
ACC+ localhost> reconfigure loadbalancer_<s,m,l> + HTTPD.zookeeper.application.instance.host=”<ServerAlias>”

Regarding the SSL certificates usually should matches the name of Alias, however in same cases could use (*) parameter to define the "domain", example (*.)arisconnect.com .. I mean The SSL-certificate needs to fit to the name the user enter in the browser/client. In all other cases the certificate is invalid

BR
AO

Like

Sign in
or register to reply.

Notify Moderator
Pablo Gonzalez Author on February 16, 2024 as Reply to André Vitor Oliveira

Thank you for the quick reply @Andre.

An additional question: When the SSL is enabled, the normal behavior of ARIS is to replace https://localhost with https://<hostname>. Is there any way to avoid this replacement and keep ARIS reachable?

Thanks in advance.

Like

Sign in
or register to reply.

Notify Moderator
André Vitor Oliveira on February 19, 2024

Hi Pablo

The security mechanism notices that specified localhost name doesn't match the name in the certificate. To establish a connection via SSL you have to use the name specified in the certificate.

BR
AO

Like

Sign in
or register to reply.

Notify Moderator

There are currently no upcoming events.