problem

The application has several modules calling services in firewall protected client networks, like:

• VisualReview: GET content
• automated TBX download
• Import / Worklow callbacks

Depending on the client the called endpoints may be protected by a firewall allowing only traffic form specific IP addresses.

In some setups (hosted cloud environment, services spread on different hardware with different outgoing IPs, no control over which outgoing IP is used) it is not easy to just allow one or multiple IPs.

solution

For such cases the outbound traffic of the affected modules should go over a outbound proxy with well known IP which then can be distributed to the clients.

todos

• In the current stage of implementation we setup a level 1 config to define the hostname and port of the outbound proxy
• The parts of the application were we encounter problems are changed to use the proxy if configured → on demand, currently only VisualReview GET content
  • → both parts axelbecher 
• change proxy in cloud hosting to be usable as outbound proxy → tlauria 
• Change config in necessary instances