{"id":18124,"date":"2023-12-12T08:52:48","date_gmt":"2023-12-12T07:52:48","guid":{"rendered":"https:\/\/www.boc.de\/watchguard-info-portal\/?p=18124"},"modified":"2024-02-19T10:18:23","modified_gmt":"2024-02-19T09:18:23","slug":"howto-reverse-proxy-mit-https-content-inspection-und-domain-name-rules-deep-packet-inspection","status":"publish","type":"post","link":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/2023\/12\/howto-reverse-proxy-mit-https-content-inspection-und-domain-name-rules-deep-packet-inspection\/","title":{"rendered":"HOWTO: Reverse Proxy mit HTTPS Content Inspection und Domain Name Rules (Deep Packet Inspection)"},"content":{"rendered":"<p>Der nachfolgende Artikel beschreibt die Absicherung HTTPS basierter Anwendungen via einer Incoming Proxy Regel mit aktivierter HTTPS Content Inspection und Domain Name Rules.<br \/>\nDie Firewall Regel und die HTTPS Proxy Action beinhalten folgende Security Features der Total Security Suite: Intrusion Prevention, Gateway AV, Intelligent AV, Geolocation und den APT Blocker.<\/p>\n<p><em><strong>Optional:<\/strong><\/em><br \/>\nWenn Sie die Konfiguration entsprechend unseres Howto&#8217;s umsetzen, haben Sie einen guten Schutz vor ext. Angriffen. Um die Sicherheit weiter zu erh\u00f6hen kann man vor einer WatchGuard Firebox einen weiteren Proxy z.B. NGINX (ausgelagert) mit vorgeschalteter DDOS Protection einsetzen. Somit wird unter anderem die IP-Adresse, des Backends verschleiert.<\/p>\n<h5>Voraussetzungen:<\/h5>\n<p><!--more--><\/p>\n<ul>\n<li>g\u00fcltiges Zertifikat (passendes SAN oder besser Wildcard)<\/li>\n<li>F\u00fcr den vollen Security Umfang wird eine Total Security Suite ben\u00f6tigt<\/li>\n<li>Unterschiedliche Domains oder Subdomains<em> (Die Domain Name Rules greifen nur f\u00fcr Domains\/Subdomains, nicht f\u00fcr URLs)<\/em><\/li>\n<\/ul>\n<h4>1. Zertifikat lmport<\/h4>\n<p>a) Import Zertifikat f\u00fcr &#8220;Proxy Server\u201c (PFX inkl. Zertifikatskette und private Key):<br \/>\n<strong>(Firebox System Manager) (FSM) -&gt; View -&gt; Certificates -&gt; Import Certificate -&gt; Proxy Server<\/strong><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-17363 size-full\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-07-10_11h16_01.png\" alt=\"\" width=\"516\" height=\"413\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-07-10_11h16_01.png 516w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-07-10_11h16_01-300x240.png 300w\" sizes=\"(max-width: 516px) 100vw, 516px\" \/><\/p>\n<p>b) Je nach Bedarf als &#8220;default&#8221; oder als &#8220;another&#8221; Proxy Server ausw\u00e4hlen<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-17365 size-full\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-07-10_11h16_46.png\" alt=\"\" width=\"516\" height=\"413\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-07-10_11h16_46.png 516w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-07-10_11h16_46-300x240.png 300w\" sizes=\"(max-width: 516px) 100vw, 516px\" \/><\/p>\n<h4>2. HTTP Proxy Konfiguration<\/h4>\n<p>a) HTTP-Server.Standard Proxy klonen<br \/>\nWenn ein Backend Server abweichende Parameter ben\u00f6tigt, muss eine weitere HTTP Proxy Action angelegt werden. In unserem Beispiel verwenden wir die selbe HTTP Proxy Action f\u00fcr zwei Backend Server.<br \/>\n<strong>(Policy Manager) -&gt; Setup -&gt; Actions -&gt; Proxies<br \/>\n<\/strong><\/p>\n<p><strong><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18759 size-full\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/12\/2024-01-10_11h02_48.png\" alt=\"\" width=\"825\" height=\"804\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/12\/2024-01-10_11h02_48.png 825w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/12\/2024-01-10_11h02_48-300x292.png 300w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/12\/2024-01-10_11h02_48-768x748.png 768w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/12\/2024-01-10_11h02_48-800x780.png 800w\" sizes=\"(max-width: 825px) 100vw, 825px\" \/>\u00a0<\/strong><\/p>\n<p>b) Request Methods<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18260 size-full\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_07.png\" alt=\"\" width=\"825\" height=\"804\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_07.png 825w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_07-300x292.png 300w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_07-768x748.png 768w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_07-800x780.png 800w\" sizes=\"(max-width: 825px) 100vw, 825px\" \/><\/p>\n<p>c) URL Paths<strong><br \/>\n<\/strong><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18261 size-full\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_12.png\" alt=\"\" width=\"825\" height=\"804\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_12.png 825w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_12-300x292.png 300w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_12-768x748.png 768w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_12-800x780.png 800w\" sizes=\"(max-width: 825px) 100vw, 825px\" \/><\/p>\n<p>d) Gateway AV<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18262 size-full\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_21.png\" alt=\"\" width=\"825\" height=\"804\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_21.png 825w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_21-300x292.png 300w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_21-768x748.png 768w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_21-800x780.png 800w\" sizes=\"(max-width: 825px) 100vw, 825px\" \/><\/p>\n<p>e) APT Blocker<strong><br \/>\n<\/strong><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18263 size-full\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_31.png\" alt=\"\" width=\"825\" height=\"804\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_31.png 825w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_31-300x292.png 300w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_31-768x748.png 768w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h08_31-800x780.png 800w\" sizes=\"(max-width: 825px) 100vw, 825px\" \/><\/p>\n<h4>3. HTTPS Proxy Action Konfiguration<\/h4>\n<p>HTTPS-Server.Standard Proxy klonen und die Domain Name Rules anlegen<br \/>\n<strong>(Policy Manager) -&gt; Setup -&gt; Actions -&gt; Proxies<\/strong><\/p>\n<p>Die Rule Actions auf Inspect setzen und das importierte Proxy Server Zertifikat, sowie die zuvor erstellte HTTP-Proxy Action ausw\u00e4hlen.<br \/>\nF\u00fcr Beispiel1 wird die Routing Action aus der SNAT ausgef\u00fchrt. Bei Beispiel2 setzen wir eine Routing Action.<br \/>\nWenn die Anwendung auf einem anderen Port lauscht kann man den Port mit angeben.<strong><br \/>\n<\/strong><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-19067 size-large\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/12\/2024-02-07_16h10_02-1024x729.png\" alt=\"\" width=\"800\" height=\"570\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/12\/2024-02-07_16h10_02-1024x729.png 1024w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/12\/2024-02-07_16h10_02-300x214.png 300w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/12\/2024-02-07_16h10_02-768x547.png 768w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/12\/2024-02-07_16h10_02-800x570.png 800w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/12\/2024-02-07_16h10_02.png 1115w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-18290 size-full alignnone\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h06_00.png\" alt=\"\" width=\"606\" height=\"405\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h06_00.png 606w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h06_00-300x200.png 300w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h06_00-272x182.png 272w\" sizes=\"(max-width: 606px) 100vw, 606px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18291 size-full\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h08_30.png\" alt=\"\" width=\"606\" height=\"405\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h08_30.png 606w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h08_30-300x200.png 300w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h08_30-272x182.png 272w\" sizes=\"(max-width: 606px) 100vw, 606px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18295 \" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h13_12-1.png\" alt=\"\" width=\"984\" height=\"546\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h13_12-1.png 1431w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h13_12-1-300x166.png 300w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h13_12-1-1024x568.png 1024w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h13_12-1-768x426.png 768w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h13_12-1-800x444.png 800w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h13_12-1-1200x666.png 1200w\" sizes=\"(max-width: 984px) 100vw, 984px\" \/><\/p>\n<h4>4) SNAT Action und HTTPS-Proxy Regel anlegen<\/h4>\n<p><strong>(Policy Manager) -&gt; Setup -&gt; Actions -&gt; SNAT<\/strong><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18267 size-full\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h24_04.png\" alt=\"\" width=\"375\" height=\"374\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h24_04.png 375w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h24_04-300x300.png 300w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h24_04-150x150.png 150w\" sizes=\"(max-width: 375px) 100vw, 375px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18268 size-full\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h23_59.png\" alt=\"\" width=\"353\" height=\"297\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h23_59.png 353w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-21_14h23_59-300x252.png 300w\" sizes=\"(max-width: 353px) 100vw, 353px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-18303 size-full\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h23_57.png\" alt=\"\" width=\"565\" height=\"775\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h23_57.png 565w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/11\/2023-11-22_08h23_57-219x300.png 219w\" sizes=\"(max-width: 565px) 100vw, 565px\" \/><\/p>\n<h4>5) Geolocation Konfiguration<\/h4>\n<p><strong>(Policy Manager) -&gt; Subscription Services -&gt; Geolocation<\/strong><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-17612 size-full\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-09-06_09h25_27.png\" alt=\"\" width=\"645\" height=\"644\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-09-06_09h25_27.png 645w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-09-06_09h25_27-300x300.png 300w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-09-06_09h25_27-150x150.png 150w\" sizes=\"(max-width: 645px) 100vw, 645px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-17611 size-full\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-09-06_09h23_54.png\" alt=\"\" width=\"645\" height=\"644\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-09-06_09h23_54.png 645w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-09-06_09h23_54-300x300.png 300w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-09-06_09h23_54-150x150.png 150w\" sizes=\"(max-width: 645px) 100vw, 645px\" \/><\/p>\n<h4>6) Intelligent AV aktivieren<\/h4>\n<p><strong>(Policy Manager) -&gt; Subscription Services -&gt; IntelligentAV<\/strong><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-17600 size-full\" src=\"https:\/\/www.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-09-06_09h02_21.png\" alt=\"\" width=\"545\" height=\"216\" srcset=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-09-06_09h02_21.png 545w, https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-content\/uploads\/2023\/07\/2023-09-06_09h02_21-300x119.png 300w\" sizes=\"(max-width: 545px) 100vw, 545px\" \/><\/p>\n<h5><strong>Fazit:<\/strong><\/h5>\n<p>Ist die Konfiguration umgesetzt und erfolgreich getestet, sind die Backend Server von Extern nur noch via Incoming Proxy mit HTTPS Content Inspection zu erreichen und man wird mit einem entsprechend hohem Schutzniveau belohnt.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Der nachfolgende Artikel beschreibt die Absicherung HTTPS basierter Anwendungen via einer Incoming Proxy Regel mit aktivierter HTTPS Content Inspection und Domain Name Rules. Die Firewall Regel und die HTTPS Proxy Action beinhalten folgende Security Features der Total Security Suite: Intrusion Prevention, Gateway AV, Intelligent AV, Geolocation und den APT Blocker. Optional: Wenn Sie die Konfiguration entsprechend unseres Howto&#8217;s umsetzen, haben Sie einen guten Schutz vor &hellip; <a href=\"https:\/\/wordpress.boc.de\/watchguard-info-portal\/2023\/12\/howto-reverse-proxy-mit-https-content-inspection-und-domain-name-rules-deep-packet-inspection\/\" class=\"more-link\">Weiterlesen <span class=\"screen-reader-text\">HOWTO: Reverse Proxy mit HTTPS Content Inspection und Domain Name Rules (Deep Packet Inspection)<\/span> <span class=\"meta-nav\">&raquo;<\/span><\/a><\/p>\n","protected":false},"author":14,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[362],"tags":[110,996,999,410,967,997,334,1008,563,998,1000],"class_list":["post-18124","post","type-post","status-publish","format-standard","hentry","category-howto","tag-apt-blocker","tag-deep-packet-inspection","tag-gateway-av","tag-geolocation","tag-https-content-inspection","tag-intelligent-av","tag-intrusion-prevention","tag-nextcloud","tag-reverse-proxy","tag-sandboxing","tag-webserver"],"_links":{"self":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts\/18124"}],"collection":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/comments?post=18124"}],"version-history":[{"count":71,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts\/18124\/revisions"}],"predecessor-version":[{"id":19281,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts\/18124\/revisions\/19281"}],"wp:attachment":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/media?parent=18124"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/categories?post=18124"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/tags?post=18124"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}