BPE Reverse Proxy

Purpose

The DSF BPE Reverse Proxy is an Apache HTTP Server based front for the BPE Server. It terminates TLS for the BPE's web UI and OIDC-authenticated administrative endpoints, and forwards authenticated requests to the BPE backend. Unlike the FHIR Reverse Proxy, it is intended for internal operator and administrator access only, not for DSF-to-DSF traffic.

Docker Image

• Registry: ghcr.io/datasharingframework/bpe_proxy
• Tag for this release: 2.1.1

Verify Image Signature

Verify the signed image before deploying. See How to Verify Image Signatures for prerequisites, SBOM verification, and troubleshooting.

cosign verify \
  ghcr.io/datasharingframework/bpe_proxy:2.1.1@sha256:cabedb0ed04191ae82d9d64ad141ee9ef2a3420daba777ca223700a61cad9285 \
  --certificate-identity-regexp "https://github.com/datasharingframework/dsf/.*" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Useful Pages

• Configuration Parameters
• How to Verify Image Signatures