Creating user friendly OBIEE URL and SSL certificates

Question

Hi Team,

We have  a bit  complex unreadable  OBIEE url (for example http://s61dc4vl210.USHSSRND4.SAPVIS.NET:19502/analytics )in our environment

and we are planning to move to simpler DNS web url  like  company-obiee-dev:19502/analytics with SSL  certificate .

Please suggest best practice and share related resource/documents to refer

Gianni Ceresa · Answer

An added point for the proxy option: you can get rid of the port as well. No need to have it in the URL as you could use the default 443 with SSL.

And the proxy could also forward / to /analytics by default if you forget it. So your nicer url would only be: https://company-obiee-dev

Gianni Ceresa · Answer

The proxy can be on the OBIEE server itself.

For example OAC (at least the "Classic" one) came with a proxy setup on the OBIEE server itself doing the redirect and the SSL offloading: so you connect over SSL till the proxy, and the traffic between the proxy and OBIEE isn't SSL as it's on the same server and therefore it's "local" traffic. This can also make the management of SSL easier as it's maybe easier to setup a SSL in a proxy (OAC used Nginx, Apache HTTP Server can do the same) than OBIEE.

For example something a client I worked with had was Apache HTTP Server installed on the OBIEE server and allowed to more easily move to a different server and doing upgrades as it was just a change in the proxy to get everybody sent to a different OBIEE. It also made it simpler to setup temporary pages when the service was down for maintenance.

Taking your original request a proxy could allow you to more easily move your "company-obiee-dev" around. Today your DEV is s61dc4vl210.USHSSRND4.SAPVIS.NET, tomorrow you installed a new OBIEE and after some testing you want to get rid of the old and use the new one instead. You change the proxy to point to something-new-2132131.USHSSRND4.SAPVIS.NET and you already have everybody reaching the new server instead of the old.

It depends a lot on your own corporate rules for these things and also how you plan to manage upgrades and updates to OBIEE etc.

User_YMTQZ · Answer

Thanks for your response. On, now I got an idea. We have to host dns server/proxy for the server itself where OBIEE is installed.