ownCloud Routing
-
@scottalanmiller I honestly dont want to do it. My boss is recommending it because I cant it working any other way. I started off very strong on this project but I feel stuck now. I had Windstream route traffic from a public IP to my OC server but the public IP doesnt work from inside the network and my boss thinks if It did that would solve the issue.
-
@alex.olynyk said:
@scottalanmiller I honestly dont want to do it. My boss is recommending it because I cant it working any other way.
Let's start with "fixing the problem" rather than "disabling security." What's the actual issue that you are having?
-
@alex.olynyk said:
I had Windstream route traffic from a public IP to my OC server but the public IP doesnt work from inside the network and my boss thinks if It did that would solve the issue.
Why would you try to connect to the OUTSIDE IP address for internal users?
-
Whether I access OC from inside the network on the private IP or outside on the public, when I share a link with a user the shared link field populates with the private IP so outside users cant access the file
-
@scottalanmiller My boss wants one address for both internal and external
-
@alex.olynyk said:
Whether I access OC from inside the network on the private IP or outside on the public, when I share a link with a user the shared link field populates with the private IP so outside users cant access the file
Ah, I see. What does your DNS look like?
-
@alex.olynyk said:
@scottalanmiller My boss wants one address for both internal and external
Why would he inject a technical opinion in that way? What if the solution is to have different addresses? What he "wants" is not a business goal, why would he "want" something like that?
-
@scottalanmiller We are in the middle of a project to bring all centers under 1 domain. Currently all centers have a different domain.
-
@alex.olynyk said:
@scottalanmiller We are in the middle of a project to bring all centers under 1 domain. Currently all centers have a different domain.
Hmmm... so part of the issue is that everything has its own DNS domains and there is no central resolution?
-
@scottalanmiller Correct
-
So first issue is... Windstream. The absolute worst ISP ever. So bad. They actually changed their name to hide their shame. They were Paetec in Rochester and were famous for being unable to get their own lines working. Drop them the moment you can. Hopefully you didn't get into any contracts with them.
Why does Windstream have a router there? They are managing the router for you?
-
What router do you have? What you need is called hairpin routing.
-
@scottalanmiller Yes they are.
-
@scottalanmiller adtran netvanta 4430
-
@scottalanmiller said:
So first issue is... Windstream. The absolute worst ISP ever. So bad. They actually changed their name to hide their shame. They were Paetec in Rochester and were famous for being unable to get their own lines working. Drop them the moment you can. Hopefully you didn't get into any contracts with them.
Were in a contract. The boss is trying to move to Bright House
-
@alex.olynyk said:
@scottalanmiller adtran netvanta 4430
AdTran is good, we should be able to figure this out.
-
@scottalanmiller said:
@alex.olynyk said:
@scottalanmiller My boss wants one address for both internal and external
Why would he inject a technical opinion in that way? What if the solution is to have different addresses? What he "wants" is not a business goal, why would he "want" something like that?
He doesnt want to be bothered teaching anyone how to use it
-
@alex.olynyk said:
@scottalanmiller said:
@alex.olynyk said:
@scottalanmiller My boss wants one address for both internal and external
Why would he inject a technical opinion in that way? What if the solution is to have different addresses? What he "wants" is not a business goal, why would he "want" something like that?
He doesnt want to be bothered teaching anyone how to use it
That's not related. What he stated as a "want" isn't the goal. The goal might be "easy to use", having one IP address may or may not solve that problem. That's the problem - it's a proximate goal, not the real goal. Getting focused on a proximate goal is a good way to get derailed and create things that don't really work for the given need.
-
I'm assuming that you do not have a DMZ?
-
We mentioned previously that you need to configure ownCloud to use the hostname in those shared links. That won't help for external communication but as long as you have the DNS A record pointing to the ownCloud server you won't have an issue internally. You probably have to configure this in the apache file. What you want to do can't be done externally to the ownCloud server. Until you configure this any link you attempt to send out will always have the IP address instead of the hostname.
