Use a Reverse Proxy

MMAP can be installed behind a reverse proxy, for example to protect the identity of the MMAP server or provide user authentication.

NOTE: Your IDOL Media Servers must be able to access MMAP directly (without using the proxy server).

Configure the Proxy Server

You can configure Apache as a reverse proxy. The following configuration snippet shows how to accept requests on proxy-server:proxy-port/custom/mmap/ and send them to http://mmap-host:8080/. This example requires Apache 2.4.10 or later:

<Location /custom/mmap/>
        ProxyPass http://mmap-host:8080/
        RequestHeader append X-Forwarded-Proto expr=%{REQUEST_SCHEME}
</Location>

The following is an equivalent configuration snippet for NGINX:

location /custom/mmap/ {
        proxy_pass http://mmap-host:8080/;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Host $host:$server_port;
}

Configure MMAP

You might need to set the following properties, in the MMAP configuration file avalanche.properties.

avalanche.vms.server.externalBasePath

(Set this property if the proxy rewrites request paths.)

The external request path that maps to the MMAP server root path. For the example configurations, above, this is /custom/mmap.

avalanche.vms.server.externalBaseUrl

(Set this property if the proxy does not forward URL information.)

The external URL that MMAP can be accessed at (including protocol, host and port; any path is ignored). This is not required for the example configurations, above, because the RequestHeader (Apache) or proxy_set_header directives (NGINX) are used to add information to the request before it is sent to MMAP.