A Kerberized Connection from the Web Gateway to InterSystems

Hi Yehuda,

To answer your first question you would probably either use TLS or Kerberos between the Web Gateway and IRIS.

But more to the point, from your second question what you seem to be desiring to accomplish is not securing/encrypting the communication between the Web Server (Web Gateway) and IRIS, but rather between the client (the browser for example) and the Web Server. For this you would define your Web Server (either IIS, apache or nginx for example) to accept TLS-based (HTTPS) connections/traffic.

This configuration is done on the Web Server side, not on the InterSystems IRIS, or InterSystems Web Gateway side. And you can consult the relevant Web Server documentation to do that.

You will also need relevant certificate/s.

For your convenience here are some sample relevant 3rd party documentation references - 

• IIS: https://learn.microsoft.com/en-us/iis/manage/configuring-security/how-to...
• Apache: https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html
• Nginx: https://nginx.org/en/docs/http/configuring_https_servers.html

If you use containers, Kubernetes and our Operator (IKO) all of this can be auto-configured by some simple definitions (see for example here).

(Note if you still want to also secure/encrypt the Web Gateway to IRIS communication you can of course do that as well, per the Docs you already looked at)