Jira Server - Allow access through HTTPS for external users and http for local users

[Alexis Ramacciotti]

Hello,

One of our client has a Jira Server instance.  They set a reverse proxy to manage SSL and enforce security.  The instance is now accessible only through https://jira.companyName.com (wich is also the base url of the instance).

Problem is the client want local users (users connecting from within the corporate network) to access Jira with a local domain name through http protocol, avoiding getting out of the local network.

I know jira can only have one base URL.

Is there a way to set server.xml to allow direct connection without passing through the proxy, and without creating a security breach by exposition of an unsecure access url to the internet?

Kind regards

[Joe Pitt · Accepted solution]

For security reasons all transmissions of data should be encrypted over https. I suggest switching to https for all users. 

[Nic Brough -Adaptavist- · Accepted solution]

You can add more connectors, so that Tomcat will listen to http on another port, which means you can have a proxy or direct connection on another url, and not use https for it.

It won't work properly.  People using a route that is not the base url will see problems with gadgets and reports, and as they start to navigate through, they will very quickly land on a link based on the base url, so they'll go back to using the https site anyway,

Plus, you should never run any system that allows people to enter any data over plain http.  Http is only suitable for pure read-only access to public sites.

[Alexis Ramacciotti]

I thought so too.

Thanks for the insight!