Controls Web Proxy

Overview

The Controls Web Proxy is a way to view web pages from servers located inside the Accelerator Controls Firewall. An example of such pages would be web displays from Tektronix scopes. Additionally the Controls Web Proxy can be used by off-site users to access .fnal.gov web pages which are restricted to on-site users.

The Controls Web Proxy is a reasonable alternative to using the Controls VPN for users who need to access web pages inside the Controls Firewall. It is also an alternative to the Fermilab Site VPN for users who want to access restricted .fnal.gov web pages from off-site.

The Controls Web Proxy works by setting up an SSH tunnel through one of the gateway nodes, outland.fnal.gov or outback.fnal.gov. The user's web browser is configured to access control system web servers through the SSH tunnel.

The Controls Web Proxy should work with any web browser on any platform with an SSH client. It has been tested with Firefox and Internet Explorer on Microsoft Windows, Safari and Firefox on Mac, and Firefox on Scientific Linux Fermi.

Step 1: Configure Your Web Browser

Firefox

These instructions are for the Windows version of Firefox. Look for similar options on other platforms.

Go to Tools->Options...->Advanced->Network
Click the Settings... button.
Select Automitic proxy configuration URL:
Enter http://www-ad.fnal.gov/controls/proxy.pac
Click Reload, OK, OK
In the address bar, type about:config
Scroll down to network.proxy.failover_timeout
Right click and select Modify
Change the value to 60.

Internet Explorer

Go to Tools->Internet Options...->Connections
Click the LAN Settings... button.
Check the Use automatic configuration script box.
Enter http://www-ad.fnal.gov/controls/proxy.pac in the Address box
Click OK, OK

Safari

Go to Safari->Preferences...->Advanced
Click the Proxies: Change Settings... button.
Click the lock and enter your password.
Check the Automatic Proxy Configuration box.
Enter http://www-ad.fnal.gov/controls/proxy.pac in the Proxy Configuration File box.
Click the Apply Now button.

The Automatic Proxy Configuration file directs web requests as follows:

If your computer is at Fermilab, requests to web servers inside the controls firewall use the Controls Web Proxy. All other requests use direct access.

If your computer is not at Fermilab, all requests to web servers inside the controls firewall use the Controls Web Proxy. Requests to other .fnal.gov servers use the proxy, but failover to direct access if the proxy is not active. All other requests use direct access.

Step 2: Open the SSH Tunnel

Windows With Exceed

Go to Start->Programs->Acnet and select Controls Proxy.
If you don't have this menu item, install the latest versrion of Exceed Customizations for ACNET Users. An SSH window to one of the gateway nodes will open. The Controls Web Proxy will remain active until this window is closed.

Mac

ssh -p 12 -C -D 1080 outland.fnal.gov
This command will open an SSH session to outland. dynamically forwarding port 1080. The Controls Web Proxy will reamin active until the SSH session is ended.

Scientific Linux Fermi

ssh -C -D 1080 outland.fnal.gov
This command will open an SSH session to outland. dynamically forwarding port 1080. The Controls Web Proxy will reamin active until the SSH session is ended.

Step 3: Access Web Sites

Last updated 10-Apr-2008 by Jim Smedinghoff

Security, Privacy, Legal