App Proxy Across Servers

Question

App Proxy Across Servers

JohnTristam 20

I'm using Azure/Entra ID Application Proxy with an on-prem Windows Server running IIS. It successfully routes traffic to our homepage (web01.local/home/), but I'm facing issues with navigation links to resources on different servers. For instance, clicking a link meant for a SharePoint server (sharepointserver.local/documents/test) incorrectly tries to navigate via the homepage server URL (web01.local/documents/test), which doesn't work because it's the wrong server. Obviously, this works on prem since each navbar is just linked to the internal URL for each local machine, which are all accessible on prem, but the App Proxy doesn't know how to translate to something publicly available with these conditions.

Has anyone tackled this problem of configuring the Application Proxy to correctly handle URLs for resources across multiple servers? Would the best solution here be to create an app proxy for each server, then adjust the navigation links to point to the respective Application Proxy URLs instead of relying on internal DNS names?

1 answer

Your answer

Answer 1

Fabio Andrade 1,665 Microsoft Employee Moderator

Hi @JohnTristam

Thanks for reaching out to Microsoft Q&A.

I believe the documentation below describes very similar issue as yours, and it provides some options for you to solve it, but it also has other options as a workaround.

https://learn.microsoft.com/en-us/entra/identity/app-proxy/application-proxy-configure-hard-coded-link-translation

Let me know if that relates to your issue or if I'm missing anything :)

Thanks,

Fabio

JohnTristam 20 Reputation points

2024-04-10T23:39:40.24+00:00

@Fabio Andrade currently I have option 3, link translation configured. That being said, the server that the hard coded URLs route to isn't actually connected to the application proxy, which is why I asked if i needed to connect an additional app proxy to the other server and then change the hard coded URL to route to the external URL of the secondary app proxy.
Fabio Andrade 1,665 Reputation points Microsoft Employee Moderator

2024-04-11T23:20:02.8633333+00:00

Hi @JohnTristam, thanks for sharing more information.

You are right, for the link translation to work you'd need to have the other URL published with App Proxy as well.

I'm sorry if I made some confusion, I was just trying to understand your scenario. :)

Thanks,

Fabio
JohnTristam 20 Reputation points

2024-04-12T03:16:43.2133333+00:00

@Fabio Andrade No worries, thanks for the information. So for example in the diagram you provided, if you have 4 sites that all need to have link translation would you use 4 separate application proxys, or the same app proxy with 4 separate connectors?
Fabio Andrade 1,665 Reputation points Microsoft Employee Moderator

2024-04-12T22:14:10.7866667+00:00

Hi @JohnTristam

You are right, both approaches would work, you should publish the apps to the Application Proxy so they could have an external URL, but you are not required to create separate connectors for it, only if you want to for high availability purposes.

Let me know if you have any questions.

Thanks,

Fabio
Givary-MSFT 35,686 Reputation points Microsoft Employee Moderator

2024-04-16T04:52:54.1233333+00:00

@JohnTristam Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
Fabio Andrade 1,665 Reputation points Microsoft Employee Moderator

2024-04-19T23:23:03.68+00:00

Hi @JohnTristam

I just wanted to check in and see if you had any other questions or if you were able to resolve your issue.

If you have any other questions, please let me know.

Thanks,

Fabio
Fabio Andrade 1,665 Reputation points Microsoft Employee Moderator

2024-04-22T23:31:14.0133333+00:00

@JohnTristam

I just wanted to check in and see if you had any other questions or if you were able to resolve your issue.

If you have any other questions, please let me know.

Thanks,

Fabio

Share via

App Proxy Across Servers

1 answer

Your answer