Re: [ajug-members]: Restrict Access to Weblogic App by IP Address

[Andy <anand@gmx.net>]

Hey Wade,

I have never had a chance to do this, but here's what I think can be done:

A custom HTTP server (*only* Apache, IIS, or Netscape Enterprise Server) 
can be setup as proxy. Weblogic has various plugins, which allows the 
requests from these servers to be proxied to the Weblogic server. Please
find the details of setting up these plugins to work with WLS in the WLS
server administration guide.

And then, you can setup access restriction for your HTTP server for the
particular IP addresses which you would want to allow/disallow. 

Configurable through console? Well, not for the above servers but you can
make your WLS server to act as proxy using the HTTPClusterServlet and then
setup a weblogic cluster to work with this. But don't know if you can add
a access restriction in this case.

HTH,
: Andy

On Wednesday 07 April 2004 08:32 pm, Wade Steele wrote:
> Does anyone know of an easy way to restrict access to Weblogic application
> by IP address.  What I want to do is have all access to a Weblogic
> application come through a proxy server, and for the Weblogic application
> to only accept requests from this proxy server by checking the IP.  Is this
> something configurable through the console?  I've been informed that using
> BlackIce can work for this, but is there a means of setting this up through
> the Weblogic console rather than using a third party tool?
>
> Thanks in advance.
>
> Wade Steele
> Computer Sciences Corporation - Civil Group
> Computer Scientist
> CDC NEDSS Project :  404-417-3142
> wsteele3@csc.com