Reverse Proxy with IIS ARR (Application Request Routing) and URL Rewrite features

 Dear folks,

Today I am going to explain how we can use the IIS as reverse proxy to secure, redirect the internal application servers.

IIS ARR 3.0 does provide load balancing, cache, forward and reverse proxy features.

This blog will cover the usage of reverse proxy.

Agenda

Secure/Hide the internal servers from public internet requests

Environment Setup

• DMZ server with IIS ARR and URL Rewrite
• Internal servers which are accessible to DMZ

Pre-requisites

1. Make sure the IIS is installed on the server
2. ARR (Application Request Routing)
3. URL Rewrite

Procedure

• Install the pre-requisites
• Create InBound and OutBound rules to configure as reverse-proxy
• Edit/Create the web.config based on your requirement
• Public facing IP - 123.10.1.12
• Internal IP - 10.1.1.192

Use case 1

• Redirect URLs with 80 port to internal application server on 8001

<?xml version="1.0" encoding="UTF-8"?>

<configuration>

  <system.webServer>

    <rewrite>

        <rules>

            <rule name="ReverseProxyInboundRule1" stopProcessing="true">

              <match url="(.*)" />

                        <conditions logicalGrouping="MatchAll">

                           <add input="{CACHE_URL}" pattern="^(https?)://" />

                        </conditions> 

      <action type="Redirect" url="{C:1}://10.1.1.192/{R:1}" />

            </rule>

     </rules>

              <outboundRules>

                <rule name="ReverseProxyOutboundRule" preCondition="IsHTML">

                    <match filterByTags="A, Form, Img" pattern="^http(s)?://10.1.1.192/(.*)" />

                   <action type="Rewrite" value="http{R:1}://123.10.1.12/{R:2}" />

                </rule>

               <preConditions>

                 <preCondition name="IsHTML">

                    <add input="{RESPONSE_CONTENT_TYPE}" pattern="^text/html" />

               </preCondition>

              </preConditions>

            </outboundRules>

           </rewrite>

          </system.webServer>

        </configuration>

Use case 2

• Redirect URLs with 9001 port to internal application server on 8081 with JSON response

<?xml version="1.0" encoding="UTF-8"?>

<configuration>

  <system.webServer>

    <rewrite>

        <rules>

            <rule name="ReverseProxyInboundRule_Port_JSON" stopProcessing="true">

              <match url="(.*)" />

      <conditions logicalGrouping="MatchAll">

                <add input="{CACHE_URL}" pattern="^(https?)://" />

              <add input="{SERVER_PORT}" pattern="9001" />

              </conditions>

              <action type="Redirect" url="http://10.1.1.192:8081/{R:1}" />

            </rule>

    </rules>

              <outboundRules>

                <rule name="ReverseProxyOutboundRule_Port_JSON" preCondition="IsJSON">

                    <match filterByTags="A, Form, Img" pattern="^http(s)?://10.1.1.192:8081/(.*)" />

                   <action type="Rewrite" value="http{R:1}://123.10.1.12:9001/{R:2}" />

                </rule>

               <preConditions>

                 <preCondition name="IsJSON">

                    <add input="{RESPONSE_CONTENT_TYPE}" pattern="^(text|application/json|application/plaintext" />

               </preCondition>

              </preConditions>

            </outboundRules> 

             </rewrite>

          </system.webServer>

        </configuration>

One can make use of the conditions and redirect accordingly

url

use the regular expression to identify the part of the URL to process further

conditions

 Use conditions with attributes to distinguish the URL

action

redirect, rewrite, abort with specific URL with arguments

Hope this helps organization to configure and secure the servers

Request you to send your valuable feedback and comments to psrdotcom@gmail.com

Run or deploy Go (Golang) project code in IIS as web server

 Hi folks,

Today we are going to see, how we can run or deploy the Go (Golang) project in IIS.

Development

1. Create your Golang project with web APIs
2. Build the Go project
3. Go build
4. Result will be an .exe file
5. Create a web.config file
6. Update the following content

<?xml version="1.0" encoding="utf-8"?>

<configuration>

    <system.webServer>

        <handlers>

            <add name="aspNetCore" path="*" verb="*" modules="AspNetCoreModule" resourceType="Unspecified" />

        </handlers>

        <aspNetCore processPath=".\<<GoProject>>.exe" />

    </system.webServer>

</configuration>

Deployment 

1. Place the <<GoProject.exe>> and web.config in IIS server accessible folder.
2. Open IIS
3. Create a new website
4. Enter the web app details with port different from the project internal port
5. Create or choose pool with .NET CLR version as "No managed code"
6. The configured website looks like below
7. 
8. After starting the website, user should be able to access the APIs

Hope, this information helps you to deploy the GOlang project in IIS.

 Request you send your feedback and comments to psrdotcom@gmail.com

Microsoft Windows Sysinternals Suite with file, disk, network, process, security utilities

Hi Folks,

Today, i will give an overview of Microsoft Windows Sysinternals Suite.

This suite helps users and admins to troubleshoot the OS and devices.

Sysinternals Suite

The Suite is a bundling of the following selected Sysinternals Utilities: AccessChk, AccessEnum, AdExplorer, AdInsight, AdRestore, Autologon, Autoruns, BgInfo, BlueScreen, CacheSet, ClockRes, Contig, Coreinfo, Ctrl2Cap, DebugView, Desktops, Disk2vhd, DiskExt, DiskMon, DiskView, Disk Usage (DU), EFSDump, FindLinks, Handle, Hex2dec, Junction, LDMDump, ListDLLs, LiveKd, LoadOrder, LogonSessions, MoveFile, NotMyFault, NTFSInfo, PageDefrag, PendMoves, PipeList, PortMon, ProcDump, Process Explorer, Process Monitor, PsExec, PsFile, PsGetSid, PsInfo, PsKill, PsList, PsLoggedOn, PsLogList, PsPasswd, PsPing, PsService, PsShutdown, PsSuspend, PsTools, RAMMap, RegDelNull, RegHide, RegJump, Registry Usage (RU), SDelete, ShareEnum, ShellRunas, Sigcheck, Streams, Strings, Sync, Sysmon, TCPView, VMMap, VolumeID, WhoIs, WinObj, ZoomIt

Individual Utilities

If you want to use or explore individual utilities then please use the below links for navigation

1. File and Disk Utilities
2. Networking Utilities
3. Process Utilities
4. Security Utilities
5. System Information
6. Miscellaneous

My favorites

1. DiskMon - Disk monitor whenever read/write happens to hard disk
2. Disk2vhd - Convert your physical harddisk to Microsoft VHD (Virtual Hard Disk) format
3. TCPView - List the TCP and UDP ports usage with process name
4. Active Director Explorer - Advanced Active Directory (AD) viewer and editor
5. VMMap - Virutal and physical memory analysis utility

Hope, these tools will help you to troubleshoot and/or make use of official Microsoft utilities to explore OS more.

Please send your feedback and comments to psrdotcom@gmail.com

Connect to public hosted Ubuntu server MySQL Docker Image from local MySQL Workbench

Hi folks,

Today I am going to explain the procedure to test the public cloud hosted MySQL docker in Ubuntu Server to your local MySQL WorkBench.

We configured a Ubuntu Server on public cloud and installed docker.
Ping the public IP address to make sure, it is reachable to your pc/laptop.

Configure System

Install MySQL Docker Image

# docker pull mysql/mysql-server:latest

Check the images

#docker images

You should be able to view the downloaded mysql server image

Start the MySQL Server

# docker run --name=mysql1 -p 33061:3306 -d mysql/mysql-server
-d : Run in daemon mode
-p host_port:container_port
--name: container name

The mapped public ubuntu server port is 33061, which is mapped to the mysql server port 3306.

Check the containers

# docker ps

You should be able to view your mysql docker containers with container id and ports information

Get the MySQL root user password

MySQL generates a one-time password for docker container and writes to the log.

• To view the log, execute the following command

# docker logs mysql1

• To get the generate one-time password, filter the log with keyworkd "GENERATED"

# docker logs mysql1 2>&1 | grep GENERATED

• You should be able to get the line like below

GENERATED ROOT PASSWORD: Axegh3kAJyDLaRuBemecis&EShOs

• Copy the one-time password. In the next step, we will use this to login.

Reset MySQL root user password

• Connect to MySQL server

# docker exec -it mysql1 -uroot -p

• Paste the generated root password
• Change the password

mysql> ALTER USER 'root'@'localhost' IDENTIFIED BY 'yourpwd';
mysql> FLUSH PRIVILEGES;

• Though you have the root user credentials, you won't be able to connect.

Root cause: root user belongs to localhost, not for the public host usage
Solution: create another user with all privileges

mysql> CREATE USER 'username'@'%' IDENTIFIED BY 'youpwd';
mysql> GRANT ALL PRIVILEGES on *.* TO USER 'username'@'%' WITH GRANT OPTION;
mysql> FLUSH PRIVILEGES;

• Exit the mysql

mysql> exit;

• Restart the docker

# docker restart mysql1

Connect from MySQL Workbench

1. Open MySQL Workbench
2. Click on add new connection icon
3. Enter the "Connection name"
4. Enter host name "public IP address" or "URL"
5. Enter username as "dev" (Above created user)
6. Click on Password "Store in vault" button and enter the "dev" user password
7. Click on "Test Connection" button
8. You should be able to view the "Successfully made the SQL Connection" pop-up

Hope this tutorial helps you to get connected with your public hosted mysql docker instance to your local mysql workbench.

Please send your feedback and comments to psrdotcom@gmail.com

node server address in use error resolution for Windows and Linux machines

Hi friends,

Today, I have come across a situation, where my node server existed unproperly and address has been blocked. Because of which, I am unable to run the node server on the same port.

System configuration

Running my node server on port 3000.

Resolution

Windows Machine

We will first try to find whether the port has been still in listening mode.
> netstat -ano | find "LISTENING" | find "3000"
When the above command returns result then take the last number (Process ID)
We will kill the process with the following command.
> taskkill /f /pid

Linux Machine

> netstat -nlp | grep :3000
> kill -9

Now, you will be able to run the node server on the same port which has been blocked.

Please send your comments and feedback to psrdotcom@gmai.com

Windows: Find which port is getting used/mapped by which process/program with details from task manager

Hi friends,

Today, I have come across with a situation of finding the port-program mapping.

Procedure

• Open command prompt
• Enter the following command
• Syntax: netstat -aon | find ":"
• Example: netstat -aon | find ":80"
• Get the PID (Process Id) from the list

• Execute the following command
• Syntax: tasklist "PID eq "
• Example: tasklist "PID eq 9192"

Please send your queries and feedback to psrdotcom@gmail.com