Skip to Main Content
  • Questions

  • How to configure proxy server between Golden Gate source and destination servers?

Breadcrumb

Question and Answer

Connor McDonald

Thanks for the question, Shaddy.

Asked: April 24, 2025 - 5:14 pm UTC

Last updated: May 05, 2025 - 3:14 am UTC

Version: 19c MSA

Viewed 1000+ times

You Asked

Environment Information
Database : Oracle Database 19c (Multi-Tenant Architecture) - Version 19.25.0.0.0
GoldenGate : Oracle GoldenGate Microservices 19c
Replication Setup : Data replication will be configured between:
Source : On-premises database server (Server A)
Target : Azure VM Cloud database server (Server B)
Operating System : Linux x86_64 on-prem.
RHEL8 on cloud.
Security Concern
The security team has flagged the direct connection between the on-premises database server (Server A) and the cloud-based database server (Server B). They have mandated the use of a reverse proxy server to transfer GoldenGate trail files between the source and destination environments. This is to ensure secure data transfer and minimize exposure of sensitive database connections.

Challenge
The current GoldenGate configuration uses the WebUI for managing database connections and replication processes for both the source and destination.
Trail files generated by the Extract process on the source (on-premises) need to be transferred securely to the target (cloud) via the reverse proxy server.
The question is: How can we integrate a reverse proxy server into the GoldenGate replication setup to securely transfer trail files between the source and target environments?

and Connor said...

If you're using the webui, proxy services should be a simple selectable option.

https://youtu.be/Hvckwj9e5Ss?t=2337 (see the image below)

and we have a more detailed walk through here

https://www.youtube.com/watch?v=gjRX8Ue6x1M

GG_PROXY

Rating

  (1 rating)

Comments

Shaddy, May 01, 2025 - 1:54 pm UTC

Hi Connor,

In our environment we will have an independent Linux Server (Apache configured as reverse proxy) sitting between the on Prem source Golden Gate server and on Cloud Destination GG MSA server. The examples you sent me does not involve this scenario. I need to configure the GG MSA's distribution server on source to send files to the Proxy server, on proxy server the reverse proxy will simply forward the files to the destination server. On the destination server the receiver process should be configured to accept trail files for processing. This will ensure that the on prem and cloud is isolated and the database server stay hidden fulfilling our security requirement.

Any insight on how I can achieve this?










Connor McDonald
May 05, 2025 - 3:14 am UTC

For a custom setup like that, I think you're probably best opening an SR to get advise directly from GG support.
more

Connor and Chris don't just spend all day on AskTOM. You can also catch regular content via Connor's blog and Chris's blog. Or if video is more your thing, check out Connor's channel and Chris's channel from their Youtube channels. And of course, keep up to date with AskTOM via the official twitter account.