Layer7 API Management

  • 1.  Unsecure or Anonymous access to status page

    Posted Sep 30, 2016 12:14 PM

    Is it possible to create a unsecured page on apigateway similar to ssg/ping?  My Load balancer can not authenticate to a webpage as it checks health of a web site or gateway in this case. If yes, what would be the best way to do it? May be I can add some assertions on it to limit access to it only from LB IP address. Thanks in advance



  • 2.  Re: Unsecure or Anonymous access to status page

    Broadcom Employee
    Posted Sep 30, 2016 07:54 PM
      |   view attached

    Good evening,

     

    Here is the policy example; you can edit and then place at the very top of any service policy such as a new Web API one called /ping; editing the one context variable will enable/disable respective SSG processing nodes from the load balancer pool in lieu of using the built-in /ssg/ping page.  This will give you control over disabling a node for the service from the load balancer without having to edit the load balancer pool directly.  Please test and advise how this works for you.

     

    Sincerely,

     

    Stephen Hughes

    Director, CA Support

    Attachment(s)



  • 3.  Re: Unsecure or Anonymous access to status page
    Best Answer

    Posted Oct 03, 2016 11:35 AM

    if your goal is to purely not enforce credentials to be required for ssg/ping, this can be done via the cluster wide property, which is detailed below. ( pingServlet.mode )(REQUIRE_CREDS is the default value)