# Kibana 4 behind reverse proxy. Is it possible?

**URL:** https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409
**Category:** Elasticsearch
**Created:** [December 28, 2014, 12:19am UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409 "2014-12-28T00:19:31Z")
**Posts on this page:** 12
**Page:** 1

<div class="post-metadata">

### Author: ![Konstantin\_Erman](https://avatars.discourse-cdn.com/v4/letter/k/9d8465/32.png) [@Konstantin\_Erman](https://discuss.elastic.co/u/Konstantin_Erman)
#### Post date: [December 28, 2014, 12:19am UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409/1 "2014-12-28T00:19:31Z")

</div>

We currently use Kibana 3 hosted in IIS behind IIS reverse proxy for auhentication. Naturally we look at Kibana 4 Beta 3 expecting it to replace Kibana 3 soon. Kibana 4 is self hosted and works nicely when accessed directly, but we need authentication and whatever I do I cannot make it work from behind reverse proxy! Early or later I get 401 accessing some internal resource.

Wonder if anybody hit similar problem and have any insight how to make it work.  
We cannot use Shield as its price is way beyond our bounds.

Thanks!  
Konstantin

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/18a667e4-21d5-45e6-abbb-836754796ea3%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/18a667e4-21d5-45e6-abbb-836754796ea3%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![Cijo\_Thomas](https://avatars.discourse-cdn.com/v4/letter/c/41988e/32.png) [@Cijo\_Thomas](https://discuss.elastic.co/u/Cijo_Thomas)
#### Post date: [January 29, 2015, 12:38am UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409/2 "2015-01-29T00:38:00Z")

</div>

Its possible to use IIS with the following steps.

1. Disable Output cache for the website you are using as reverse proxy.
2. Run the website in a new apppool, which do not have any managed code.

With the above two steps, kibana4 runs fine with IIS as reverse proxy.

On Saturday, December 27, 2014 at 4:19:31 PM UTC-8, Konstantin Erman wrote:

> We currently use Kibana 3 hosted in IIS behind IIS reverse proxy for  
> auhentication. Naturally we look at Kibana 4 Beta 3 expecting it to replace  
> Kibana 3 soon. Kibana 4 is self hosted and works nicely when accessed  
> directly, but we need authentication and whatever I do I cannot make it  
> work from behind reverse proxy! Early or later I get 401 accessing some  
> internal resource.
> 
> Wonder if anybody hit similar problem and have any insight how to make it  
> work.  
> We cannot use Shield as its price is way beyond our bounds.
> 
> Thanks!  
> Konstantin

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/7355f0ec-1bac-4e62-b675-a5f23d04ef7a%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/7355f0ec-1bac-4e62-b675-a5f23d04ef7a%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![Konstantin\_Erman](https://avatars.discourse-cdn.com/v4/letter/k/9d8465/32.png) [@Konstantin\_Erman](https://discuss.elastic.co/u/Konstantin_Erman)
#### Post date: [January 29, 2015, 6:12pm UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409/3 "2015-01-29T18:12:28Z")

</div>

Thank you for the good news! I'm a little swamped currently, but I will  
definitely give it a try when I get a minute.

Just to make sure - "disable Output cache for the website" - where is it in  
IIS Management Console?

On Wednesday, January 28, 2015 at 4:38:01 PM UTC-8, Cijo Thomas wrote:

> Its possible to use IIS with the following steps.
> 
> 1. Disable Output cache for the website you are using as reverse proxy.
> 2. Run the website in a new apppool, which do not have any managed code.
> 
> With the above two steps, kibana4 runs fine with IIS as reverse proxy.
> 
> On Saturday, December 27, 2014 at 4:19:31 PM UTC-8, Konstantin Erman wrote:
> 
> > We currently use Kibana 3 hosted in IIS behind IIS reverse proxy for  
> > auhentication. Naturally we look at Kibana 4 Beta 3 expecting it to replace  
> > Kibana 3 soon. Kibana 4 is self hosted and works nicely when accessed  
> > directly, but we need authentication and whatever I do I cannot make it  
> > work from behind reverse proxy! Early or later I get 401 accessing some  
> > internal resource.
> > 
> > Wonder if anybody hit similar problem and have any insight how to make it  
> > work.  
> > We cannot use Shield as its price is way beyond our bounds.
> > 
> > Thanks!  
> > Konstantin

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![Cijo\_Thomas](https://avatars.discourse-cdn.com/v4/letter/c/41988e/32.png) [@Cijo\_Thomas](https://discuss.elastic.co/u/Cijo_Thomas)
#### Post date: [January 29, 2015, 6:13pm UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409/4 "2015-01-29T18:13:32Z")

</div>

I have been fighting with this for quite some time, Finally found the  
workaround. Let me know if it helps you!

On Thu, Jan 29, 2015 at 10:12 AM, Konstantin Erman [konste@gmail.com](mailto:konste@gmail.com) wrote:

> Thank you for the good news! I'm a little swamped currently, but I will  
> definitely give it a try when I get a minute.
> 
> Just to make sure - "disable Output cache for the website" - where is it  
> in IIS Management Console?
> 
> On Wednesday, January 28, 2015 at 4:38:01 PM UTC-8, Cijo Thomas wrote:
> 
> > Its possible to use IIS with the following steps.
> > 
> > 1. Disable Output cache for the website you are using as reverse proxy.
> > 2. Run the website in a new apppool, which do not have any managed code.
> > 
> > With the above two steps, kibana4 runs fine with IIS as reverse proxy.
> > 
> > On Saturday, December 27, 2014 at 4:19:31 PM UTC-8, Konstantin Erman  
> > wrote:
> > 
> > > We currently use Kibana 3 hosted in IIS behind IIS reverse proxy for  
> > > auhentication. Naturally we look at Kibana 4 Beta 3 expecting it to replace  
> > > Kibana 3 soon. Kibana 4 is self hosted and works nicely when accessed  
> > > directly, but we need authentication and whatever I do I cannot make it  
> > > work from behind reverse proxy! Early or later I get 401 accessing some  
> > > internal resource.
> > > 
> > > Wonder if anybody hit similar problem and have any insight how to make  
> > > it work.  
> > > We cannot use Shield as its price is way beyond our bounds.
> > > 
> > > Thanks!  
> > > Konstantin
> > 
> > --  
> > You received this message because you are subscribed to a topic in the  
> > Google Groups "elasticsearch" group.  
> > To unsubscribe from this topic, visit  
> > [https://groups.google.com/d/topic/elasticsearch/r\_uDcHR-rrw/unsubscribe](https://groups.google.com/d/topic/elasticsearch/r_uDcHR-rrw/unsubscribe).  
> > To unsubscribe from this group and all its topics, send an email to  
> > [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> > To view this discussion on the web visit  
> > [https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com)  
> > [https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com?utm_medium=email&utm_source=footer)  
> > .
> 
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
Warm Regards,  
Cijo Thomas  
+1 3125606441 \<#SafeHtmlFilter\_\>

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAH6LTpEkRjF1kDbKEm5Frvwb6BBCH\_Xhvm1hhKtMYtYCphrraQ%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAH6LTpEkRjF1kDbKEm5Frvwb6BBCH_Xhvm1hhKtMYtYCphrraQ%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![Konstantin\_Erman](https://avatars.discourse-cdn.com/v4/letter/k/9d8465/32.png) [@Konstantin\_Erman](https://discuss.elastic.co/u/Konstantin_Erman)
#### Post date: [January 29, 2015, 9:09pm UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409/5 "2015-01-29T21:09:00Z")

</div>

Unfortunately I could not replicate your success ☹

Let me show you what I did in case you may be notice any difference from  
your case.

[https://lh6.googleusercontent.com/-HzQRKhGl9ag/VMqfkWnSF8I/AAAAAAAAAh0/SsXrJlQ2vW8/s1600/Output\_Caching.png](https://lh6.googleusercontent.com/-HzQRKhGl9ag/VMqfkWnSF8I/AAAAAAAAAh0/SsXrJlQ2vW8/s1600/Output_Caching.png)

[https://lh6.googleusercontent.com/-V2VTx-iT888/VMqf0K7jChI/AAAAAAAAAh8/qC7umA0XP\_U/s1600/AppPool1.png](https://lh6.googleusercontent.com/-V2VTx-iT888/VMqf0K7jChI/AAAAAAAAAh8/qC7umA0XP_U/s1600/AppPool1.png)

[https://lh6.googleusercontent.com/-4jL3Hyoq0QY/VMqgF7d0-II/AAAAAAAAAiE/77VOeAZP2e0/s1600/AppPool2.png](https://lh6.googleusercontent.com/-4jL3Hyoq0QY/VMqgF7d0-II/AAAAAAAAAiE/77VOeAZP2e0/s1600/AppPool2.png)

[https://lh5.googleusercontent.com/-aBFCh\_BZKn4/VMqgnM9ejhI/AAAAAAAAAiM/zxnsdD-VK8U/s1600/Error.png](https://lh5.googleusercontent.com/-aBFCh_BZKn4/VMqgnM9ejhI/AAAAAAAAAiM/zxnsdD-VK8U/s1600/Error.png)  
Any ideas what I may be missing?

Thanks!  
Konstantin

On Thursday, January 29, 2015 at 10:13:40 AM UTC-8, Cijo Thomas wrote:

> I have been fighting with this for quite some time, Finally found the  
> workaround. Let me know if it helps you!
> 
> On Thu, Jan 29, 2015 at 10:12 AM, Konstantin Erman \<[kon...@gmail.com](mailto:kon...@gmail.com)  
> \<javascript:\>\> wrote:
> 
> > Thank you for the good news! I'm a little swamped currently, but I will  
> > definitely give it a try when I get a minute.
> > 
> > Just to make sure - "disable Output cache for the website" - where is it  
> > in IIS Management Console?
> > 
> > On Wednesday, January 28, 2015 at 4:38:01 PM UTC-8, Cijo Thomas wrote:
> > 
> > > Its possible to use IIS with the following steps.
> > > 
> > > 1. Disable Output cache for the website you are using as reverse proxy.
> > > 2. Run the website in a new apppool, which do not have any managed code.
> > > 
> > > With the above two steps, kibana4 runs fine with IIS as reverse proxy.
> > > 
> > > On Saturday, December 27, 2014 at 4:19:31 PM UTC-8, Konstantin Erman  
> > > wrote:
> > > 
> > > > We currently use Kibana 3 hosted in IIS behind IIS reverse proxy for  
> > > > auhentication. Naturally we look at Kibana 4 Beta 3 expecting it to replace  
> > > > Kibana 3 soon. Kibana 4 is self hosted and works nicely when accessed  
> > > > directly, but we need authentication and whatever I do I cannot make it  
> > > > work from behind reverse proxy! Early or later I get 401 accessing some  
> > > > internal resource.
> > > > 
> > > > Wonder if anybody hit similar problem and have any insight how to make  
> > > > it work.  
> > > > We cannot use Shield as its price is way beyond our bounds.
> > > > 
> > > > Thanks!  
> > > > Konstantin
> > > 
> > > --  
> > > You received this message because you are subscribed to a topic in the  
> > > Google Groups "elasticsearch" group.  
> > > To unsubscribe from this topic, visit  
> > > [https://groups.google.com/d/topic/elasticsearch/r\_uDcHR-rrw/unsubscribe](https://groups.google.com/d/topic/elasticsearch/r_uDcHR-rrw/unsubscribe).  
> > > To unsubscribe from this group and all its topics, send an email to  
> > > [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \<javascript:\>.  
> > > To view this discussion on the web visit  
> > > [https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com)  
> > > [https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com?utm_medium=email&utm_source=footer)  
> > > .
> > 
> > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> 
> --  
> Warm Regards,  
> Cijo Thomas  
> +1 3125606441  
> \<#CAH6LTpEkRjF1kDbKEm5Frvwb6BBCH\_Xhvm1hhKtMYtYCphrraQ@mail.gmail.com\_SafeHtmlFilter\_\>

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![Cijo\_Thomas](https://avatars.discourse-cdn.com/v4/letter/c/41988e/32.png) [@Cijo\_Thomas](https://discuss.elastic.co/u/Cijo_Thomas)
#### Post date: [January 29, 2015, 11:31pm UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409/6 "2015-01-29T23:31:48Z")

</div>

Can you show your URL rewrite rules ? Also are you using Kibana 4 beta 3 ?

On Thu, Jan 29, 2015 at 1:09 PM, Konstantin Erman [konste@gmail.com](mailto:konste@gmail.com) wrote:

> Unfortunately I could not replicate your success ☹
> 
> Let me show you what I did in case you may be notice any difference from  
> your case.
> 
> [https://lh6.googleusercontent.com/-HzQRKhGl9ag/VMqfkWnSF8I/AAAAAAAAAh0/SsXrJlQ2vW8/s1600/Output\_Caching.png](https://lh6.googleusercontent.com/-HzQRKhGl9ag/VMqfkWnSF8I/AAAAAAAAAh0/SsXrJlQ2vW8/s1600/Output_Caching.png)
> 
> [https://lh6.googleusercontent.com/-V2VTx-iT888/VMqf0K7jChI/AAAAAAAAAh8/qC7umA0XP\_U/s1600/AppPool1.png](https://lh6.googleusercontent.com/-V2VTx-iT888/VMqf0K7jChI/AAAAAAAAAh8/qC7umA0XP_U/s1600/AppPool1.png)
> 
> [https://lh6.googleusercontent.com/-4jL3Hyoq0QY/VMqgF7d0-II/AAAAAAAAAiE/77VOeAZP2e0/s1600/AppPool2.png](https://lh6.googleusercontent.com/-4jL3Hyoq0QY/VMqgF7d0-II/AAAAAAAAAiE/77VOeAZP2e0/s1600/AppPool2.png)
> 
> [https://lh5.googleusercontent.com/-aBFCh\_BZKn4/VMqgnM9ejhI/AAAAAAAAAiM/zxnsdD-VK8U/s1600/Error.png](https://lh5.googleusercontent.com/-aBFCh_BZKn4/VMqgnM9ejhI/AAAAAAAAAiM/zxnsdD-VK8U/s1600/Error.png)  
> Any ideas what I may be missing?
> 
> Thanks!  
> Konstantin
> 
> On Thursday, January 29, 2015 at 10:13:40 AM UTC-8, Cijo Thomas wrote:
> 
> > I have been fighting with this for quite some time, Finally found the  
> > workaround. Let me know if it helps you!
> > 
> > On Thu, Jan 29, 2015 at 10:12 AM, Konstantin Erman [kon...@gmail.com](mailto:kon...@gmail.com)  
> > wrote:
> > 
> > > Thank you for the good news! I'm a little swamped currently, but I will  
> > > definitely give it a try when I get a minute.
> > > 
> > > Just to make sure - "disable Output cache for the website" - where is it  
> > > in IIS Management Console?
> > > 
> > > On Wednesday, January 28, 2015 at 4:38:01 PM UTC-8, Cijo Thomas wrote:
> > > 
> > > > Its possible to use IIS with the following steps.
> > > > 
> > > > 1. Disable Output cache for the website you are using as reverse proxy.
> > > > 2. Run the website in a new apppool, which do not have any managed code.
> > > > 
> > > > With the above two steps, kibana4 runs fine with IIS as reverse proxy.
> > > > 
> > > > On Saturday, December 27, 2014 at 4:19:31 PM UTC-8, Konstantin Erman  
> > > > wrote:
> > > > 
> > > > > We currently use Kibana 3 hosted in IIS behind IIS reverse proxy for  
> > > > > auhentication. Naturally we look at Kibana 4 Beta 3 expecting it to replace  
> > > > > Kibana 3 soon. Kibana 4 is self hosted and works nicely when accessed  
> > > > > directly, but we need authentication and whatever I do I cannot make it  
> > > > > work from behind reverse proxy! Early or later I get 401 accessing some  
> > > > > internal resource.
> > > > > 
> > > > > Wonder if anybody hit similar problem and have any insight how to make  
> > > > > it work.  
> > > > > We cannot use Shield as its price is way beyond our bounds.
> > > > > 
> > > > > Thanks!  
> > > > > Konstantin
> > > > 
> > > > --  
> > > > You received this message because you are subscribed to a topic in the  
> > > > Google Groups "elasticsearch" group.  
> > > > To unsubscribe from this topic, visit [https://groups.google.com/d/](https://groups.google.com/d/)  
> > > > topic/elasticsearch/r\_uDcHR-rrw/unsubscribe.  
> > > > To unsubscribe from this group and all its topics, send an email to  
> > > > [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com).  
> > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/)  
> > > > msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%  
> > > > [40googlegroups.com](http://40googlegroups.com)  
> > > > [https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com?utm_medium=email&utm_source=footer)  
> > > > .
> > > 
> > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> > 
> > --  
> > Warm Regards,  
> > Cijo Thomas  
> > +1 3125606441  
> > \<#14b3786b590d6772\_CAH6LTpEkRjF1kDbKEm5Frvwb6BBCH\_Xhvm1hhKtMYtYCphrraQ@mail.gmail.com\_SafeHtmlFilter\_\>
> 
> --  
> You received this message because you are subscribed to a topic in the  
> Google Groups "elasticsearch" group.  
> To unsubscribe from this topic, visit  
> [https://groups.google.com/d/topic/elasticsearch/r\_uDcHR-rrw/unsubscribe](https://groups.google.com/d/topic/elasticsearch/r_uDcHR-rrw/unsubscribe).  
> To unsubscribe from this group and all its topics, send an email to  
> [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%40googlegroups.com)  
> [https://groups.google.com/d/msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%40googlegroups.com?utm_medium=email&utm_source=footer)  
> .
> 
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
Warm Regards,  
Cijo Thomas  
+1 3125606441 \<#SafeHtmlFilter\_\>

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAH6LTpE1RoLVPN1aQWeJm-6nyWiovzr%3DhGudAmUeAGGgBAuYWg%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAH6LTpE1RoLVPN1aQWeJm-6nyWiovzr%3DhGudAmUeAGGgBAuYWg%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![Konstantin\_Erman](https://avatars.discourse-cdn.com/v4/letter/k/9d8465/32.png) [@Konstantin\_Erman](https://discuss.elastic.co/u/Konstantin_Erman)
#### Post date: [January 29, 2015, 11:38pm UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409/7 "2015-01-29T23:38:01Z")

</div>

Yes, Kibana 4 beta 3. And I have just one URL rewrite rule (pictured).  
Were you getting the same error when it was not working for you?

[https://lh3.googleusercontent.com/-oDiu\_ncjJlA/VMrEJL-Qj\_I/AAAAAAAAAic/so2IvrgTQbY/s1600/RewriteRule.png](https://lh3.googleusercontent.com/-oDiu_ncjJlA/VMrEJL-Qj_I/AAAAAAAAAic/so2IvrgTQbY/s1600/RewriteRule.png)

On Thursday, January 29, 2015 at 3:31:56 PM UTC-8, Cijo Thomas wrote:

> Can you show your URL rewrite rules ? Also are you using Kibana 4 beta 3 ?
> 
> On Thu, Jan 29, 2015 at 1:09 PM, Konstantin Erman \<[kon...@gmail.com](mailto:kon...@gmail.com)  
> \<javascript:\>\> wrote:
> 
> > Unfortunately I could not replicate your success ☹
> > 
> > Let me show you what I did in case you may be notice any difference from  
> > your case.
> > 
> > [https://lh6.googleusercontent.com/-HzQRKhGl9ag/VMqfkWnSF8I/AAAAAAAAAh0/SsXrJlQ2vW8/s1600/Output\_Caching.png](https://lh6.googleusercontent.com/-HzQRKhGl9ag/VMqfkWnSF8I/AAAAAAAAAh0/SsXrJlQ2vW8/s1600/Output_Caching.png)
> > 
> > [https://lh6.googleusercontent.com/-V2VTx-iT888/VMqf0K7jChI/AAAAAAAAAh8/qC7umA0XP\_U/s1600/AppPool1.png](https://lh6.googleusercontent.com/-V2VTx-iT888/VMqf0K7jChI/AAAAAAAAAh8/qC7umA0XP_U/s1600/AppPool1.png)
> > 
> > [https://lh6.googleusercontent.com/-4jL3Hyoq0QY/VMqgF7d0-II/AAAAAAAAAiE/77VOeAZP2e0/s1600/AppPool2.png](https://lh6.googleusercontent.com/-4jL3Hyoq0QY/VMqgF7d0-II/AAAAAAAAAiE/77VOeAZP2e0/s1600/AppPool2.png)
> > 
> > [https://lh5.googleusercontent.com/-aBFCh\_BZKn4/VMqgnM9ejhI/AAAAAAAAAiM/zxnsdD-VK8U/s1600/Error.png](https://lh5.googleusercontent.com/-aBFCh_BZKn4/VMqgnM9ejhI/AAAAAAAAAiM/zxnsdD-VK8U/s1600/Error.png)  
> > Any ideas what I may be missing?
> > 
> > Thanks!  
> > Konstantin
> > 
> > On Thursday, January 29, 2015 at 10:13:40 AM UTC-8, Cijo Thomas wrote:
> > 
> > > I have been fighting with this for quite some time, Finally found the  
> > > workaround. Let me know if it helps you!
> > > 
> > > On Thu, Jan 29, 2015 at 10:12 AM, Konstantin Erman [kon...@gmail.com](mailto:kon...@gmail.com)  
> > > wrote:
> > > 
> > > > Thank you for the good news! I'm a little swamped currently, but I will  
> > > > definitely give it a try when I get a minute.
> > > > 
> > > > Just to make sure - "disable Output cache for the website" - where is  
> > > > it in IIS Management Console?
> > > > 
> > > > On Wednesday, January 28, 2015 at 4:38:01 PM UTC-8, Cijo Thomas wrote:
> > > > 
> > > > > Its possible to use IIS with the following steps.
> > > > > 
> > > > > 1. Disable Output cache for the website you are using as reverse proxy.
> > > > > 2. Run the website in a new apppool, which do not have any managed  
> > > > > code.
> > > > > 
> > > > > With the above two steps, kibana4 runs fine with IIS as reverse proxy.
> > > > > 
> > > > > On Saturday, December 27, 2014 at 4:19:31 PM UTC-8, Konstantin Erman  
> > > > > wrote:
> > > > > 
> > > > > > We currently use Kibana 3 hosted in IIS behind IIS reverse proxy for  
> > > > > > auhentication. Naturally we look at Kibana 4 Beta 3 expecting it to replace  
> > > > > > Kibana 3 soon. Kibana 4 is self hosted and works nicely when accessed  
> > > > > > directly, but we need authentication and whatever I do I cannot make it  
> > > > > > work from behind reverse proxy! Early or later I get 401 accessing some  
> > > > > > internal resource.
> > > > > > 
> > > > > > Wonder if anybody hit similar problem and have any insight how to  
> > > > > > make it work.  
> > > > > > We cannot use Shield as its price is way beyond our bounds.
> > > > > > 
> > > > > > Thanks!  
> > > > > > Konstantin
> > > > > 
> > > > > --  
> > > > > You received this message because you are subscribed to a topic in the  
> > > > > Google Groups "elasticsearch" group.  
> > > > > To unsubscribe from this topic, visit [https://groups.google.com/d/](https://groups.google.com/d/)  
> > > > > topic/elasticsearch/r\_uDcHR-rrw/unsubscribe.  
> > > > > To unsubscribe from this group and all its topics, send an email to  
> > > > > [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com).  
> > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/)  
> > > > > msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%  
> > > > > [40googlegroups.com](http://40googlegroups.com)  
> > > > > [https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com?utm_medium=email&utm_source=footer)  
> > > > > .
> > > > 
> > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> > > 
> > > --  
> > > Warm Regards,  
> > > Cijo Thomas  
> > > +1 3125606441  
> > > \<#CAH6LTpE1RoLVPN1aQWeJm-6nyWiovzr=hGudAmUeAGGgBAuYWg@mail.gmail.com\_14b3786b590d6772\_CAH6LTpEkRjF1kDbKEm5Frvwb6BBCH\_Xhvm1hhKtMYtYCphrraQ@mail.gmail.com\_SafeHtmlFilter\_\>
> > 
> > --  
> > You received this message because you are subscribed to a topic in the  
> > Google Groups "elasticsearch" group.  
> > To unsubscribe from this topic, visit  
> > [https://groups.google.com/d/topic/elasticsearch/r\_uDcHR-rrw/unsubscribe](https://groups.google.com/d/topic/elasticsearch/r_uDcHR-rrw/unsubscribe).  
> > To unsubscribe from this group and all its topics, send an email to  
> > [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \<javascript:\>.  
> > To view this discussion on the web visit  
> > [https://groups.google.com/d/msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%40googlegroups.com)  
> > [https://groups.google.com/d/msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%40googlegroups.com?utm_medium=email&utm_source=footer)  
> > .
> > 
> > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> 
> --  
> Warm Regards,  
> Cijo Thomas  
> +1 3125606441  
> \<#CAH6LTpE1RoLVPN1aQWeJm-6nyWiovzr=hGudAmUeAGGgBAuYWg@mail.gmail.com\_SafeHtmlFilter\_\>

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/4f92ab6c-024c-4557-867f-51e514b0f465%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4f92ab6c-024c-4557-867f-51e514b0f465%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![Cijo\_Thomas](https://avatars.discourse-cdn.com/v4/letter/c/41988e/32.png) [@Cijo\_Thomas](https://discuss.elastic.co/u/Cijo_Thomas)
#### Post date: [February 7, 2015, 12:30am UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409/8 "2015-02-07T00:30:39Z")

</div>

I hit the same issue when accessing the site using DNS name. When I am in  
the machine, http:localhost:xxxx/ works though. Have not figured out the  
fix for this yet. It seems like Kibana 4 CORS issue.

On Thu, Jan 29, 2015 at 3:38 PM, Konstantin Erman [konste@gmail.com](mailto:konste@gmail.com) wrote:

> Yes, Kibana 4 beta 3. And I have just one URL rewrite rule (pictured).  
> Were you getting the same error when it was not working for you?
> 
> [https://lh3.googleusercontent.com/-oDiu\_ncjJlA/VMrEJL-Qj\_I/AAAAAAAAAic/so2IvrgTQbY/s1600/RewriteRule.png](https://lh3.googleusercontent.com/-oDiu_ncjJlA/VMrEJL-Qj_I/AAAAAAAAAic/so2IvrgTQbY/s1600/RewriteRule.png)
> 
> On Thursday, January 29, 2015 at 3:31:56 PM UTC-8, Cijo Thomas wrote:
> 
> > Can you show your URL rewrite rules ? Also are you using Kibana 4 beta 3  
> > ?
> > 
> > On Thu, Jan 29, 2015 at 1:09 PM, Konstantin Erman [kon...@gmail.com](mailto:kon...@gmail.com)  
> > wrote:
> > 
> > > Unfortunately I could not replicate your success ☹
> > > 
> > > Let me show you what I did in case you may be notice any difference from  
> > > your case.
> > > 
> > > [https://lh6.googleusercontent.com/-HzQRKhGl9ag/VMqfkWnSF8I/AAAAAAAAAh0/SsXrJlQ2vW8/s1600/Output\_Caching.png](https://lh6.googleusercontent.com/-HzQRKhGl9ag/VMqfkWnSF8I/AAAAAAAAAh0/SsXrJlQ2vW8/s1600/Output_Caching.png)
> > > 
> > > [https://lh6.googleusercontent.com/-V2VTx-iT888/VMqf0K7jChI/AAAAAAAAAh8/qC7umA0XP\_U/s1600/AppPool1.png](https://lh6.googleusercontent.com/-V2VTx-iT888/VMqf0K7jChI/AAAAAAAAAh8/qC7umA0XP_U/s1600/AppPool1.png)
> > > 
> > > [https://lh6.googleusercontent.com/-4jL3Hyoq0QY/VMqgF7d0-II/AAAAAAAAAiE/77VOeAZP2e0/s1600/AppPool2.png](https://lh6.googleusercontent.com/-4jL3Hyoq0QY/VMqgF7d0-II/AAAAAAAAAiE/77VOeAZP2e0/s1600/AppPool2.png)
> > > 
> > > [https://lh5.googleusercontent.com/-aBFCh\_BZKn4/VMqgnM9ejhI/AAAAAAAAAiM/zxnsdD-VK8U/s1600/Error.png](https://lh5.googleusercontent.com/-aBFCh_BZKn4/VMqgnM9ejhI/AAAAAAAAAiM/zxnsdD-VK8U/s1600/Error.png)  
> > > Any ideas what I may be missing?
> > > 
> > > Thanks!  
> > > Konstantin
> > > 
> > > On Thursday, January 29, 2015 at 10:13:40 AM UTC-8, Cijo Thomas wrote:
> > > 
> > > > I have been fighting with this for quite some time, Finally found the  
> > > > workaround. Let me know if it helps you!
> > > > 
> > > > On Thu, Jan 29, 2015 at 10:12 AM, Konstantin Erman [kon...@gmail.com](mailto:kon...@gmail.com)  
> > > > wrote:
> > > > 
> > > > > Thank you for the good news! I'm a little swamped currently, but I  
> > > > > will definitely give it a try when I get a minute.
> > > > > 
> > > > > Just to make sure - "disable Output cache for the website" - where is  
> > > > > it in IIS Management Console?
> > > > > 
> > > > > On Wednesday, January 28, 2015 at 4:38:01 PM UTC-8, Cijo Thomas wrote:
> > > > > 
> > > > > > Its possible to use IIS with the following steps.
> > > > > > 
> > > > > > 1. Disable Output cache for the website you are using as reverse  
> > > > > > proxy.
> > > > > > 2. Run the website in a new apppool, which do not have any managed  
> > > > > > code.
> > > > > > 
> > > > > > With the above two steps, kibana4 runs fine with IIS as reverse proxy.
> > > > > > 
> > > > > > On Saturday, December 27, 2014 at 4:19:31 PM UTC-8, Konstantin Erman  
> > > > > > wrote:
> > > > > > 
> > > > > > > We currently use Kibana 3 hosted in IIS behind IIS reverse proxy for  
> > > > > > > auhentication. Naturally we look at Kibana 4 Beta 3 expecting it to replace  
> > > > > > > Kibana 3 soon. Kibana 4 is self hosted and works nicely when accessed  
> > > > > > > directly, but we need authentication and whatever I do I cannot make it  
> > > > > > > work from behind reverse proxy! Early or later I get 401 accessing some  
> > > > > > > internal resource.
> > > > > > > 
> > > > > > > Wonder if anybody hit similar problem and have any insight how to  
> > > > > > > make it work.  
> > > > > > > We cannot use Shield as its price is way beyond our bounds.
> > > > > > > 
> > > > > > > Thanks!  
> > > > > > > Konstantin
> > > > > > 
> > > > > > --  
> > > > > > You received this message because you are subscribed to a topic in the  
> > > > > > Google Groups "elasticsearch" group.  
> > > > > > To unsubscribe from this topic, visit [https://groups.google.com/d/to](https://groups.google.com/d/to)  
> > > > > > pic/elasticsearch/r\_uDcHR-rrw/unsubscribe.  
> > > > > > To unsubscribe from this group and all its topics, send an email to  
> > > > > > [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com).  
> > > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/)  
> > > > > > msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40goo  
> > > > > > [glegroups.com](http://glegroups.com)  
> > > > > > [https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com?utm_medium=email&utm_source=footer)  
> > > > > > .
> > > > > 
> > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> > > > 
> > > > --  
> > > > Warm Regards,  
> > > > Cijo Thomas  
> > > > +1 3125606441  
> > > > \<#14b380f1ef4f9e0e\_CAH6LTpE1RoLVPN1aQWeJm-6nyWiovzr=hGudAmUeAGGgBAuYWg@mail.gmail.com\_14b3786b590d6772\_CAH6LTpEkRjF1kDbKEm5Frvwb6BBCH\_Xhvm1hhKtMYtYCphrraQ@mail.gmail.com\_SafeHtmlFilter\_\>
> > > 
> > > --  
> > > You received this message because you are subscribed to a topic in the  
> > > Google Groups "elasticsearch" group.  
> > > To unsubscribe from this topic, visit [https://groups.google.com/d/](https://groups.google.com/d/)  
> > > topic/elasticsearch/r\_uDcHR-rrw/unsubscribe.  
> > > To unsubscribe from this group and all its topics, send an email to  
> > > [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com).  
> > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/)  
> > > msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%  
> > > [40googlegroups.com](http://40googlegroups.com)  
> > > [https://groups.google.com/d/msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%40googlegroups.com?utm_medium=email&utm_source=footer)  
> > > .
> > > 
> > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> > 
> > --  
> > Warm Regards,  
> > Cijo Thomas  
> > +1 3125606441  
> > \<#14b380f1ef4f9e0e\_CAH6LTpE1RoLVPN1aQWeJm-6nyWiovzr=hGudAmUeAGGgBAuYWg@mail.gmail.com\_SafeHtmlFilter\_\>
> 
> --  
> You received this message because you are subscribed to a topic in the  
> Google Groups "elasticsearch" group.  
> To unsubscribe from this topic, visit  
> [https://groups.google.com/d/topic/elasticsearch/r\_uDcHR-rrw/unsubscribe](https://groups.google.com/d/topic/elasticsearch/r_uDcHR-rrw/unsubscribe).  
> To unsubscribe from this group and all its topics, send an email to  
> [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/4f92ab6c-024c-4557-867f-51e514b0f465%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4f92ab6c-024c-4557-867f-51e514b0f465%40googlegroups.com)  
> [https://groups.google.com/d/msgid/elasticsearch/4f92ab6c-024c-4557-867f-51e514b0f465%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/4f92ab6c-024c-4557-867f-51e514b0f465%40googlegroups.com?utm_medium=email&utm_source=footer)  
> .
> 
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
Warm Regards,  
Cijo Thomas  
+1 3125606441 \<#SafeHtmlFilter\_\>

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAH6LTpG0QV0FbqeTOfun3avjkH96u8ONZ\_HYWrS\_40JzrEBO%2Bg%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAH6LTpG0QV0FbqeTOfun3avjkH96u8ONZ_HYWrS_40JzrEBO%2Bg%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![Konstantin\_Erman](https://avatars.discourse-cdn.com/v4/letter/k/9d8465/32.png) [@Konstantin\_Erman](https://discuss.elastic.co/u/Konstantin_Erman)
#### Post date: [February 7, 2015, 12:37am UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409/9 "2015-02-07T00:37:02Z")

</div>

Well, access through localhost worked for me from the very beginning, as  
well as access through LAN. But external access is also necessary, that's  
where the whole issue with IIS reverse proxy stemmed from!

On Friday, February 6, 2015 at 4:30:47 PM UTC-8, Cijo Thomas wrote:

> I hit the same issue when accessing the site using DNS name. When I am in  
> the machine, http:localhost:xxxx/ works though. Have not figured out the  
> fix for this yet. It seems like Kibana 4 CORS issue.
> 
> On Thu, Jan 29, 2015 at 3:38 PM, Konstantin Erman \<[kon...@gmail.com](mailto:kon...@gmail.com)  
> \<javascript:\>\> wrote:
> 
> > Yes, Kibana 4 beta 3. And I have just one URL rewrite rule (pictured).  
> > Were you getting the same error when it was not working for you?
> > 
> > [https://lh3.googleusercontent.com/-oDiu\_ncjJlA/VMrEJL-Qj\_I/AAAAAAAAAic/so2IvrgTQbY/s1600/RewriteRule.png](https://lh3.googleusercontent.com/-oDiu_ncjJlA/VMrEJL-Qj_I/AAAAAAAAAic/so2IvrgTQbY/s1600/RewriteRule.png)
> > 
> > On Thursday, January 29, 2015 at 3:31:56 PM UTC-8, Cijo Thomas wrote:
> > 
> > > Can you show your URL rewrite rules ? Also are you using Kibana 4 beta  
> > > 3 ?
> > > 
> > > On Thu, Jan 29, 2015 at 1:09 PM, Konstantin Erman [kon...@gmail.com](mailto:kon...@gmail.com)  
> > > wrote:
> > > 
> > > > Unfortunately I could not replicate your success ☹
> > > > 
> > > > Let me show you what I did in case you may be notice any difference  
> > > > from your case.
> > > > 
> > > > [https://lh6.googleusercontent.com/-HzQRKhGl9ag/VMqfkWnSF8I/AAAAAAAAAh0/SsXrJlQ2vW8/s1600/Output\_Caching.png](https://lh6.googleusercontent.com/-HzQRKhGl9ag/VMqfkWnSF8I/AAAAAAAAAh0/SsXrJlQ2vW8/s1600/Output_Caching.png)
> > > > 
> > > > [https://lh6.googleusercontent.com/-V2VTx-iT888/VMqf0K7jChI/AAAAAAAAAh8/qC7umA0XP\_U/s1600/AppPool1.png](https://lh6.googleusercontent.com/-V2VTx-iT888/VMqf0K7jChI/AAAAAAAAAh8/qC7umA0XP_U/s1600/AppPool1.png)
> > > > 
> > > > [https://lh6.googleusercontent.com/-4jL3Hyoq0QY/VMqgF7d0-II/AAAAAAAAAiE/77VOeAZP2e0/s1600/AppPool2.png](https://lh6.googleusercontent.com/-4jL3Hyoq0QY/VMqgF7d0-II/AAAAAAAAAiE/77VOeAZP2e0/s1600/AppPool2.png)
> > > > 
> > > > [https://lh5.googleusercontent.com/-aBFCh\_BZKn4/VMqgnM9ejhI/AAAAAAAAAiM/zxnsdD-VK8U/s1600/Error.png](https://lh5.googleusercontent.com/-aBFCh_BZKn4/VMqgnM9ejhI/AAAAAAAAAiM/zxnsdD-VK8U/s1600/Error.png)  
> > > > Any ideas what I may be missing?
> > > > 
> > > > Thanks!  
> > > > Konstantin
> > > > 
> > > > On Thursday, January 29, 2015 at 10:13:40 AM UTC-8, Cijo Thomas wrote:
> > > > 
> > > > > I have been fighting with this for quite some time, Finally found the  
> > > > > workaround. Let me know if it helps you!
> > > > > 
> > > > > On Thu, Jan 29, 2015 at 10:12 AM, Konstantin Erman [kon...@gmail.com](mailto:kon...@gmail.com)  
> > > > > wrote:
> > > > > 
> > > > > > Thank you for the good news! I'm a little swamped currently, but I  
> > > > > > will definitely give it a try when I get a minute.
> > > > > > 
> > > > > > Just to make sure - "disable Output cache for the website" - where is  
> > > > > > it in IIS Management Console?
> > > > > > 
> > > > > > On Wednesday, January 28, 2015 at 4:38:01 PM UTC-8, Cijo Thomas wrote:
> > > > > > 
> > > > > > > Its possible to use IIS with the following steps.
> > > > > > > 
> > > > > > > 1. Disable Output cache for the website you are using as reverse  
> > > > > > > proxy.
> > > > > > > 2. Run the website in a new apppool, which do not have any managed  
> > > > > > > code.
> > > > > > > 
> > > > > > > With the above two steps, kibana4 runs fine with IIS as reverse  
> > > > > > > proxy.
> > > > > > > 
> > > > > > > On Saturday, December 27, 2014 at 4:19:31 PM UTC-8, Konstantin Erman  
> > > > > > > wrote:
> > > > > > > 
> > > > > > > > We currently use Kibana 3 hosted in IIS behind IIS reverse proxy  
> > > > > > > > for auhentication. Naturally we look at Kibana 4 Beta 3 expecting it to  
> > > > > > > > replace Kibana 3 soon. Kibana 4 is self hosted and works nicely when  
> > > > > > > > accessed directly, but we need authentication and whatever I do I cannot  
> > > > > > > > make it work from behind reverse proxy! Early or later I get 401 accessing  
> > > > > > > > some internal resource.
> > > > > > > > 
> > > > > > > > Wonder if anybody hit similar problem and have any insight how to  
> > > > > > > > make it work.  
> > > > > > > > We cannot use Shield as its price is way beyond our bounds.
> > > > > > > > 
> > > > > > > > Thanks!  
> > > > > > > > Konstantin
> > > > > > > 
> > > > > > > --  
> > > > > > > You received this message because you are subscribed to a topic in  
> > > > > > > the Google Groups "elasticsearch" group.  
> > > > > > > To unsubscribe from this topic, visit [https://groups.google.com/d/to](https://groups.google.com/d/to)  
> > > > > > > pic/elasticsearch/r\_uDcHR-rrw/unsubscribe.  
> > > > > > > To unsubscribe from this group and all its topics, send an email to  
> > > > > > > [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com).  
> > > > > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/)  
> > > > > > > msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40goo  
> > > > > > > [glegroups.com](http://glegroups.com)  
> > > > > > > [https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/d089ed71-71c4-4997-93fa-2dc7125b7f49%40googlegroups.com?utm_medium=email&utm_source=footer)  
> > > > > > > .
> > > > > > 
> > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> > > > > 
> > > > > --  
> > > > > Warm Regards,  
> > > > > Cijo Thomas  
> > > > > +1 3125606441  
> > > > > \<#CAH6LTpG0QV0FbqeTOfun3avjkH96u8ONZ\_HYWrS\_40JzrEBO+g@mail.gmail.com\_14b380f1ef4f9e0e\_CAH6LTpE1RoLVPN1aQWeJm-6nyWiovzr=hGudAmUeAGGgBAuYWg@mail.gmail.com\_14b3786b590d6772\_CAH6LTpEkRjF1kDbKEm5Frvwb6BBCH\_Xhvm1hhKtMYtYCphrraQ@mail.gmail.com\_SafeHtmlFilter\_\>
> > > > 
> > > > --  
> > > > You received this message because you are subscribed to a topic in the  
> > > > Google Groups "elasticsearch" group.  
> > > > To unsubscribe from this topic, visit [https://groups.google.com/d/](https://groups.google.com/d/)  
> > > > topic/elasticsearch/r\_uDcHR-rrw/unsubscribe.  
> > > > To unsubscribe from this group and all its topics, send an email to  
> > > > [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com).  
> > > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/)  
> > > > msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%  
> > > > [40googlegroups.com](http://40googlegroups.com)  
> > > > [https://groups.google.com/d/msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/cbf5e8d0-6769-4ef5-b625-9a6457fac86c%40googlegroups.com?utm_medium=email&utm_source=footer)  
> > > > .
> > > > 
> > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> > > 
> > > --  
> > > Warm Regards,  
> > > Cijo Thomas  
> > > +1 3125606441  
> > > \<#CAH6LTpG0QV0FbqeTOfun3avjkH96u8ONZ\_HYWrS\_40JzrEBO+g@mail.gmail.com\_14b380f1ef4f9e0e\_CAH6LTpE1RoLVPN1aQWeJm-6nyWiovzr=hGudAmUeAGGgBAuYWg@mail.gmail.com\_SafeHtmlFilter\_\>
> > 
> > --  
> > You received this message because you are subscribed to a topic in the  
> > Google Groups "elasticsearch" group.  
> > To unsubscribe from this topic, visit  
> > [https://groups.google.com/d/topic/elasticsearch/r\_uDcHR-rrw/unsubscribe](https://groups.google.com/d/topic/elasticsearch/r_uDcHR-rrw/unsubscribe).  
> > To unsubscribe from this group and all its topics, send an email to  
> > [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \<javascript:\>.  
> > To view this discussion on the web visit  
> > [https://groups.google.com/d/msgid/elasticsearch/4f92ab6c-024c-4557-867f-51e514b0f465%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/4f92ab6c-024c-4557-867f-51e514b0f465%40googlegroups.com)  
> > [https://groups.google.com/d/msgid/elasticsearch/4f92ab6c-024c-4557-867f-51e514b0f465%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/4f92ab6c-024c-4557-867f-51e514b0f465%40googlegroups.com?utm_medium=email&utm_source=footer)  
> > .
> > 
> > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).
> 
> --  
> Warm Regards,  
> Cijo Thomas  
> +1 3125606441  
> \<#CAH6LTpG0QV0FbqeTOfun3avjkH96u8ONZ\_HYWrS\_40JzrEBO+g@mail.gmail.com\_SafeHtmlFilter\_\>

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/c38048f7-f2a3-4241-9d1d-7958c8b9a5c4%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/c38048f7-f2a3-4241-9d1d-7958c8b9a5c4%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

### Author: ![mvleandro](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mvleandro/32/14268_2.png) [@mvleandro](https://discuss.elastic.co/u/mvleandro)
#### Post date: [January 21, 2016, 2:47pm UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409/10 "2016-01-21T14:47:57Z")

</div>

Hi there!

I just found the solution for this problem in my case.

The problem is occurring because ISS server is classifying the request "/elasticsearch/.kibana/\_mapping/\*/field/_source?_=1453386587718" as a "potentially dangerous Request".

So, after i realized that i just change my web.config file to ignore this validation, as seen bellow:

I just added the code bellow between the tags;

```
<system.web>
	<httpRuntime requestPathInvalidCharacters="" requestValidationMode="2.0" />
	<pages validateRequest="false" />
</system.web>

```

I think it will help you.

See my full web.config file:

```
<?xml version="1.0" encoding="UTF-8"?>
<configuration>
	<system.web>
		<httpRuntime requestPathInvalidCharacters="" requestValidationMode="2.0" />
		<pages validateRequest="false" />
	</system.web>
    <system.webServer>
        <rewrite>
            <outboundRules>
                <preConditions>
                    <preCondition name="ResponseIsHtml1">
                        <add input="{RESPONSE_CONTENT_TYPE}" pattern="^text/html" />
                    </preCondition>
                </preConditions>
            </outboundRules>
            <rules>		
                <rule name="ReverseProxyInboundRule1" stopProcessing="true">
                    <match url="(.*)" />
                    <conditions>
                        <add input="{CACHE_URL}" pattern="^(https?)://" />
                    </conditions>
                    <action type="Rewrite" url="{C:1}://127.0.0.1:5601/{R:1}" />
                </rule>				
            </rules>
        </rewrite>
        <urlCompression doStaticCompression="false" doDynamicCompression="false" />
    </system.webServer>
</configuration>
```

---

<div class="post-metadata">

### Author: ![konste](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/konste/32/6079_2.png) [@konste](https://discuss.elastic.co/u/konste)
#### Post date: [January 22, 2016, 8:03pm UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409/11 "2016-01-22T20:03:38Z")

</div>

I am confused now! When I logged to my IIS servers to apply your fix, Marcus, to my surprise I have found that those two lines are already there! Now I have no idea how they got there in the first place, but I don't remember adding those manually. Could some other process add those for me? Puzzling...

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 11:22pm UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-is-it-possible/21409/12 "2017-07-05T23:22:13Z")

</div>


