Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have an internal windows authenticated website that I need to expose anonymously to external users.

extern: http://foo.com/ (public) intern: http://privatefoo/ (requires windows auth)

I want people hitting foo.com to see no security prompt, just get access to privatefoo - I know this is possible in a simple reverse proxy setup but does anyone know how to make the proxy provide windows credentials?

share|improve this question
add comment

1 Answer

Consider using Application Request Routing (ARR). http://www.iis.net/expand/ApplicationRequestRouting

This will do the reverse proxy using IIS7 all the way. You can have it on the same machine or a separate machine(s).

For authentication, your best bet is to have the private site auto authenticate requests from the reverse proxy. You can do that with a HTTP Module on the private site that runs before authentication.

I'm curious though why you would lock down a site locally that you are giving the world access to anyway? If you're giving the world access to it, why not open it up privately too?

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.