Configuring File Upload in Channels 9.2 and later when Channels Servers are behind a firewall

 

Additional configurations are required when channels Servers are behind a firewall for proper operation of File Upload feature of Chat

 

Using the following as example environment:

Firewall Host Name: company.com

Firewall IP address: 1.1.1.1

Attachment service host name: attachment.localserver.corp

Attachment service IP address: 192.168.1.1

Attachment service port: 8080

 

Option 1: Site supports an open port 8080 on firewall.

  1. Create an entry in host file for the attachment service to map firewall host name to attachment service IP address. For example, company.com mapped to 192.168.1.1 in host file.

  2. Update host name of attachment service in services table to company.com.

  3. Create a rule in firewall to route requests to company.com:8080 to 192.168.1.1:8080.

Option 2: Site will only support ports 80 and 443.

  1. Create new external facing host name for firewall as attachment.company.com.

  2. Add another internal IP to the attachment service server such as 192.168.1.2.

  3. Create an entry in the host file for the attachment service to map the firewall host name to attachment service IP address. For example, attachment.company.com mapped to 192.168.1.2 in host file.

  4. Update host name of attachment service in services table to attachment.company.com.

  5. Update the port of attachment service in services table to 80 (443).

  6. Create a rule in fire wall to route request to attachment.company.com:80 (443) to 192.168.1.2:80 (443).

If there are more than one Channels server used then each Channels server must be able to connect to the attachment service, then the host file of each Channels server must be updated to map the attachment server IP with firewall host name as in step 1 of option 1 or step 2 of option 2.