GW.Srvc Setup

steps

DEV

dev.apis.hominv.aspireclan.com
Port: 443/80

dev-app-01 setup (63.98.29.73)

SSL: → Create and/or Install
Site Name : →

dev.HomInv.GW.Srvc

Select Physicalpath
Type HTTPS
IP address All Unassigned
Port : →

Host Name : → (Same)

dev-app-01.apis.hominv.aspireclan.com

Check Require Server Name Indication (SNI)
Select Correct SSL Certificate
Create another Binding → Type HTTP
IP address All Unassigned
Port : →

Host Name : → (Same)

dev-app-01.apis.hominv.aspireclan.com

IP Address and Domain Restrictions : → Allow

63.98.29.73|63.98.29.53|127.0.0.1

URL Rewrite Rule →
•Rule Name:

HTTP to HTTPS Redirect

•Pattern:

(.*)

•Condition Input:

{HTTPS}

•Condition Pattern:

^OFF$

• Action Type: Redirect
•Redirect URL:

https://{HTTP_HOST}{REQUEST_URI}

• Redirect type: Permanent (301)
DNS Record : →

dev-app-01.apis.hominv|63.98.29.73

Ocelot JSON → Ocelot.dev.json (Base URL, Hosts, and Ports)
Visual Studio → HomInv.GW.Srvc: Publish profile → Point to dev.HomInv.GW.Srvc (app server)
Publish → HomInv.GW.Srvc
Test 1 : → in dev-app-01

http://dev-app-01.apis.hominv.aspireclan.com

dev-lb-01 setup (63.98.29.53)

SSL: → Create and/or Install
Site Name : →

dev-lb-01.apis.hominv.aspireclan.com

Select Physicalpath
Type HTTPS
IP address All Unassigned
Port : →

Host Name : → (Same)

dev-lb-01.apis.hominv.aspireclan.com

Check Require Server Name Indication (SNI)
Select Correct SSL Certificate
Create another Binding → Type HTTP
IP address All Unassigned
Port : →

Host Name : → (Same)

dev-lb-01.apis.hominv.aspireclan.com

IP Address and Domain Restrictions : → Allow

63.98.29.33

URL Rewrite Rule →
•Rule Name:

HTTP to HTTPS Redirect

•Pattern:

(.*)

•Condition Input:

{HTTPS}

•Condition Pattern:

^OFF$

• Action Type: Redirect
•Redirect URL:

https://{HTTP_HOST}{REQUEST_URI}

• Redirect type: Permanent (301)
Reverse Proxy : →

https://dev-app-01.apis.hominv.aspireclan.com

DNS Record : →

dev-lb-01.apis.hominv|63.98.29.53

Test 1 : → in dev-lb-01

https://dev-app-01.apis.hominv.aspireclan.com

dev-proxy-01 setup (63.98.29.33)

SSL: → Create or Install
Site Name : →

dev.apis.hominv.aspireclan.com

Select Physicalpath
Type HTTPS
IP address All Unassigned
Port : →

Host Name : → (Same)

dev.apis.hominv.aspireclan.com

Check Require Server Name Indication (SNI)
Select Correct SSL Certificate
Create another Binding → Type HTTP
IP address All Unassigned
Port : →

Host Name : → (Same)

dev.apis.hominv.aspireclan.com

URL Rewrite Rule →
•Rule Name:

HTTP to HTTPS Redirect

•Pattern:

(.*)

•Condition Input:

{HTTPS}

•Condition Pattern:

^OFF$

• Action Type: Redirect
•Redirect URL:

https://{HTTP_HOST}{REQUEST_URI}

• Redirect type: Permanent (301)
Reverse Proxy : →

https://dev-lb-01.apis.hominv.aspireclan.com

DNS Record : →

dev.apis.hominv|63.98.29.33

Test 1 : → in AM-PC

http://dev.apis.hominv.aspireclan.com

Create postman folder structure and request
Test in postman

steps

QA

qa.apis.hominv.aspireclan.com
Port: 443/80

qa-app-01 setup (63.98.29.72)

SSL: → Create and/or Install
Site Name : →

qa.HomInv.GW.Srvc

Select Physicalpath
Type HTTPS
IP address All Unassigned
Port : →

Host Name : → (Same)

qa-app-01.apis.hominv.aspireclan.com

Check Require Server Name Indication (SNI)
Select Correct SSL Certificate
Create another Binding → Type HTTP
IP address All Unassigned
Port : →

Host Name : → (Same)

qa-app-01.apis.hominv.aspireclan.com

IP Address and Domain Restrictions : → Allow

63.98.29.72|63.98.29.52|127.0.0.1

URL Rewrite Rule →
•Rule Name:

HTTP to HTTPS Redirect

•Pattern:

(.*)

•Condition Input:

{HTTPS}

•Condition Pattern:

^OFF$

• Action Type: Redirect
•Redirect URL:

https://{HTTP_HOST}{REQUEST_URI}

• Redirect type: Permanent (301)
DNS Record : →

qa-app-01.apis.hominv|63.98.29.72

Ocelot JSON → Ocelot.qa.json (Base URL, Hosts, and Ports)
Visual Studio → HomInv.GW.Srvc: Publish profile → Point to qa.HomInv.GW.Srvc (app server)
Publish → HomInv.GW.Srvc
Test 1 : → in qa-app-01

http://qa-app-01.apis.hominv.aspireclan.com

qa-lb-01 setup (63.98.29.52)

SSL: → Create and/or Install
Site Name : →

qa-lb-01.apis.hominv.aspireclan.com

Select Physicalpath
Type HTTPS
IP address All Unassigned
Port : →

Host Name : → (Same)

qa-lb-01.apis.hominv.aspireclan.com

Check Require Server Name Indication (SNI)
Select Correct SSL Certificate
Create another Binding → Type HTTP
IP address All Unassigned
Port : →

Host Name : → (Same)

qa-lb-01.apis.hominv.aspireclan.com

IP Address and Domain Restrictions : → Allow

63.98.29.32

URL Rewrite Rule →
•Rule Name:

HTTP to HTTPS Redirect

•Pattern:

(.*)

•Condition Input:

{HTTPS}

•Condition Pattern:

^OFF$

• Action Type: Redirect
•Redirect URL:

https://{HTTP_HOST}{REQUEST_URI}

• Redirect type: Permanent (301)
Reverse Proxy : →

https://qa-app-01.apis.hominv.aspireclan.com

DNS Record : →

qa-lb-01.apis.hominv|63.98.29.52

Test 1 : → in qa-lb-01

http://qa-app-01.apis.hominv.aspireclan.com

qa-proxy-01 setup (63.98.29.32)

SSL: → Create or Install
Site Name : →

qa.apis.hominv.aspireclan.com

Select Physicalpath
Type HTTPS
IP address All Unassigned
Port : →

Host Name : → (Same)

qa.apis.hominv.aspireclan.com

Check Require Server Name Indication (SNI)
Select Correct SSL Certificate
Create another Binding → Type HTTP
IP address All Unassigned
Port : →

Host Name : → (Same)

qa.apis.hominv.aspireclan.com

URL Rewrite Rule →
•Rule Name:

HTTP to HTTPS Redirect

•Pattern:

(.*)

•Condition Input:

{HTTPS}

•Condition Pattern:

^OFF$

• Action Type: Redirect
•Redirect URL:

https://{HTTP_HOST}{REQUEST_URI}

• Redirect type: Permanent (301)
Reverse Proxy : →

https://qa-lb-01.apis.hominv.aspireclan.com

DNS Record : →

qa.apis.hominv|63.98.29.32

Test 1 : → in AM-PC

http://qa.apis.hominv.aspireclan.com

Create postman folder structure and request
Test in postman

steps

PROD

prod.apis.hominv.aspireclan.com
Port: 443/80

prod-app-01 setup (63.98.29.71)

SSL: → Create and/or Install
Site Name : →

prod.HomInv.GW.Srvc

Select Physicalpath
Type HTTP
IP address All Unassigned
Port : →

Host Name : → (Same)

prod-app-01.apis.hominv.aspireclan.com

Check Require Server Name Indication (SNI)
Select Correct SSL Certificate
Create another Binding → Type HTTP
IP address All Unassigned
Port : →

Host Name : → (Same)

prod-app-01.apis.hominv.aspireclan.com

IP Address and Domain Restrictions : → Allow

63.98.29.71|63.98.29.51|127.0.0.1

URL Rewrite Rule →
•Rule Name:

HTTP to HTTPS Redirect

•Pattern:

(.*)

•Condition Input:

{HTTPS}

•Condition Pattern:

^OFF$

• Action Type: Redirect
•Redirect URL:

https://{HTTP_HOST}{REQUEST_URI}

• Redirect type: Permanent (301)
DNS Record : →

prod-app-01.apis.hominv|63.98.29.71

Ocelot JSON → Ocelot.prod.json ←← Ocelot.qa.json (Base URL, Hosts, and Ports)
Visual Studio → HomInv.GW.Srvc: Publish profile → Point to prod.HomInv.GW.Srvc (app server)
Publish → HomInv.GW.Srvc
Test 1 : → in prod-app-01

http://prod-app-01.apis.hominv.aspireclan.com

prod-lb-01 setup (63.98.29.51)

SSL: → Create and/or Install
Site Name : →

prod-lb-01.apis.hominv.aspireclan.com

Select Physicalpath
Type HTTPS
IP address All Unassigned
Port : →

Host Name : → (Same)

prod-lb-01.apis.hominv.aspireclan.com

Check Require Server Name Indication (SNI)
Select Correct SSL Certificate
Create another Binding → Type HTTP
IP address All Unassigned
Port : →

Host Name : → (Same)

prod-lb-01.apis.hominv.aspireclan.com

IP Address and Domain Restrictions : → Allow

63.98.29.31

URL Rewrite Rule →
•Rule Name:

HTTP to HTTPS Redirect

•Pattern:

(.*)

•Condition Input:

{HTTPS}

•Condition Pattern:

^OFF$

• Action Type: Redirect
•Redirect URL:

https://{HTTP_HOST}{REQUEST_URI}

• Redirect type: Permanent (301)
Reverse Proxy : →

https://prod-app-01.apis.hominv.aspireclan.com

DNS Record : →

prod-lb-01.apis.hominv|63.98.29.51

Test 1 : → in prod-lb-01

https://prod-app-01.apis.hominv.aspireclan.com

prod-in-prxy-01 setup (63.98.29.31)

SSL: → Create or Install
Site Name : →

prod.apis.hominv.aspireclan.com

Select Physicalpath
Type HTTPS
IP address All Unassigned
Port : →

Host Name : → (Same)

prod.apis.hominv.aspireclan.com

Check Require Server Name Indication (SNI)
Select Correct SSL Certificate
Create another Binding → Type HTTP
IP address All Unassigned
Port : →

Host Name : → (Same)

prod.apis.hominv.aspireclan.com

URL Rewrite Rule →
•Rule Name:

HTTP to HTTPS Redirect

•Pattern:

(.*)

•Condition Input:

{HTTPS}

•Condition Pattern:

^OFF$

• Action Type: Redirect
•Redirect URL:

https://{HTTP_HOST}{REQUEST_URI}

• Redirect type: Permanent (301)
Reverse Proxy : →

https://prod-lb-01.apis.hominv.aspireclan.com

DNS Record : →

prod.apis.hominv|63.98.29.31

Test 1 : → in AM-PC

http://prod.apis.hominv.aspireclan.com

Create postman folder structure and request
Test in postman

Internal redirect site (prod-in-prxy-01)

63.98.29.31

SSL: → Create or Install
Site Name : →

apis.hominv.aspireclan.com

Select Physicalpath
Type HTTPS
IP address All Unassigned
Port : →

Host Name : → (Same)

apis.hominv.aspireclan.com

Check Require Server Name Indication (SNI)
Select Correct SSL Certificate
Create another Binding → Type HTTP
IP address All Unassigned
Port : →

Host Name : → (Same)

apis.hominv.aspireclan.com

URL Rewrite Rule →
•Rule Name:

HTTP to HTTPS Redirect

•Pattern:

(.*)

•Condition Input:

{HTTPS}

•Condition Pattern:

^OFF$

• Action Type: Redirect
•Redirect URL:

https://{HTTP_HOST}{REQUEST_URI}

• Redirect type: Permanent (301)
Reverse Proxy : →

https://prod-lb-01.apis.hominv.aspireclan.com

DNS Record : →

apis.hominv|63.98.29.31

Test 1 : → in AM-PC

http://apis.hominv.aspireclan.com

steps

EXTERNAL ACCESS

apis.hominv.aspireclan.com
Port: 10000

prod-ex-prxy-01 (63.98.29.34)

SSL: → Create or Install
Site Name : →

apis.hominv.aspireclan.com

Select Physicalpath
Type HTTPS
IP address All Unassigned
Port : →

Host Name : → (Same)

apis.hominv.aspireclan.com

Check Require Server Name Indication (SNI)
Select Correct SSL Certificate
NO HTTP BINDING
Windows Defender Firewall : →

apis.hominv_TCP|10000

MUST FOLLOW..... : → When creating the reverse proxy URL, the Rewrite URL under the Action Properties section MUST BE https as the http access is not enabled for external access. Without which the site/api cannot be accessed through the internet.

img alt

Reverse Proxy : →

prod.apis.hominv.aspireclan.com

Open the reverse proxy rule, just created
Scroll down to the Action Properties section
Change the protocol from http to https in the Rewrite URL: field
Click "Apply"
Test 1 : → in Mobile connected to 5G Data

https://apis.hominv.aspireclan.com

Create postman folder structure and request
Test in postman

DEV​

dev-app-01 setup (63.98.29.73)​

dev-lb-01 setup (63.98.29.53)​

dev-proxy-01 setup (63.98.29.33)​

QA​

qa-app-01 setup (63.98.29.72)​

qa-lb-01 setup (63.98.29.52)​

qa-proxy-01 setup (63.98.29.32)​

PROD​

prod-app-01 setup (63.98.29.71)​

prod-lb-01 setup (63.98.29.51)​

prod-in-prxy-01 setup (63.98.29.31)​

Internal redirect site (prod-in-prxy-01)​

63.98.29.31

EXTERNAL ACCESS​

prod-ex-prxy-01 (63.98.29.34)​

DEV

dev-app-01 setup (63.98.29.73)

dev-lb-01 setup (63.98.29.53)

dev-proxy-01 setup (63.98.29.33)

QA

qa-app-01 setup (63.98.29.72)

qa-lb-01 setup (63.98.29.52)

qa-proxy-01 setup (63.98.29.32)

PROD

prod-app-01 setup (63.98.29.71)

prod-lb-01 setup (63.98.29.51)

prod-in-prxy-01 setup (63.98.29.31)

Internal redirect site (prod-in-prxy-01)

EXTERNAL ACCESS

prod-ex-prxy-01 (63.98.29.34)