This discussion is archived
6 Replies Latest reply: May 24, 2013 11:04 AM by DBA_EBiz_EBS RSS

Setting multiple R12 iModules on same external tier which is in DMZ Zone

1010617 Newbie
Currently Being Moderated
Experts,

Could some one guide me on how to setup more than one iModules on same external tier which is in DMZ Zone.

We have already setup iStore and its working fine.

Now we would like to extend it to other modules like : iPayables, iReceivables and iRecruitment.

Our current setup is :
Whenever external users try to access iStore : https://iStore.domain.com, It reaches F5 Load Balancer using SSL Port 443.
LB has the redirection rule setup to http://hostname.internal.domain.com:8000, with the help of 8000 port the requests reaches External Web Tier in DMZ Zone and gets served.

If we need to deploy/enable another iModules, how the setup needs to be served.

We referred the Metalink Note: 380490.1 for iStore setup.

Please advise as I am new to these external web tier setup.

Regards,
RR.
  • 1. Re: Setting multiple R12 iModules on same external tier which is in DMZ Zone
    mzshaw Explorer
    Currently Being Moderated
    Once you have created an external node using "Oracle E-Business Suite R12 Configuration in a DMZ" [Note 380490.1] then it can be used for any number of modules you choose to use.

    At a high level, to add a new module, you would need to create a new DNS entry for it (it you choose) then from eBiz side, you work through note 380490.1 again, as you will need to update the appropriate responsibility trust level and URL firewall entries for the module concerned. Then you would need to do any module specific setup, such as profile options.

    Apart from that should be fairly straightforward, especially as you can practise the steps in your test instance first (of course)

    Hope this helps

    Mike
  • 2. Re: Setting multiple R12 iModules on same external tier which is in DMZ Zone
    DBA_EBiz_EBS Explorer
    Currently Being Moderated
    I'm sure you have done this for iStore already - uncomment out the appropriate entries in url_fw.conf for the new modules in your external apps tier in the dmz.

    Hope this helps.

    Regards,
  • 3. Re: Setting multiple R12 iModules on same external tier which is in DMZ Zone
    1010617 Newbie
    Currently Being Moderated
    Yes, We have un-commented and written the rule as below for iStore as per the Metalink note.

    RewriteRule ^/$ https://iStore.domain.com/OA_HTML/ibeCZzpHome.jsp [R,L]

    However I am worried more about the defining routing rules in the reverse proxy:
    as of now F5 mapping has -- https://iStore.domain.com:443 -> http://hostname.internal.domain.com:8000

    Would it fine if we write the mapping as https://iStore.domain.com:443 -> http://hostname.internal.domain.com:8002

    Apologies if my understanding is wrong, as updated I am new to this external tier setups.

    Regards,
    RR.
  • 4. Re: Setting multiple R12 iModules on same external tier which is in DMZ Zone
    DBA_EBiz_EBS Explorer
    Currently Being Moderated
    >
    Yes, We have un-commented and written the rule as below for iStore as per the Metalink note.

    RewriteRule ^/$ https://iStore.domain.com/OA_HTML/ibeCZzpHome.jsp [R,L]

    However I am worried more about the defining routing rules in the reverse proxy:
    as of now F5 mapping has -- https://iStore.domain.com:443 -> http://hostname.internal.domain.com:8000

    Would it fine if we write the mapping as https://iStore.domain.com:443 -> http://hostname.internal.domain.com:8002

    Apologies if my understanding is wrong, as updated I am new to this external tier setups.

    Regards,
    RR.
    >

    Hi,

    From your reverse proxy server setting it looks like you are planning on using module name in the url (i.e. https://iStore.domain.com:443) - in my case
    what I did was I used a more generic url (e.g. https://sswa.domain.com - sswa meaning self service web apps) that way my url was not dependent upon a particular
    module from the reverse proxy server. Since you mentioned change of port from 8000 (port pool zero) to 8002 (port pool two) - were you using
    port 8000 and now planning on changing
    your port on the system where you were already running iStore or is this for a non production/test system?

    Hope this helps :-)

    Regards,
  • 5. Re: Setting multiple R12 iModules on same external tier which is in DMZ Zone
    1010617 Newbie
    Currently Being Moderated
    Hi,

    We would like to use the URL with module name only as per the client need.

    Also coming to port, I mentioned 2 ports by keeping this in mind:
    Requests from 8000 would be used for external iStore users.
    Requests from 8001 would be used for internal iStore users.

    Similarly, 8002 would be used for external iRecruitment users.
    and 8003 would be used for internal iRecruitment users.

    This could be wrong as I am not sure whether it works that way or not.

    Please review and suggest.

    Regards,
    RR.
  • 6. Re: Setting multiple R12 iModules on same external tier which is in DMZ Zone
    DBA_EBiz_EBS Explorer
    Currently Being Moderated
    In my case for external users I have been using standard 443 SSL port so that the external users just enter https://xxxxx.xxxx.xxxx and not worry about putting in port numbers.

    I have not tried separate names for different modules; sounds like a great idea but havent worked on that so not sure. Will see if I can find something about - it would be interesting to try the same at my place too.

    Regards,

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points