Create a tunneled application link

A tunneled application link allows you to select an existing application tunnel that will be used to forward the traffic to the target instance, as opposed to a direct link where you use the URL of the target instance. You can create a tunneled application link only from your cloud app.

Before you begin

Before you can create a tunneled app link, you need to complete these steps:

1. Install application tunnels

2. Configure required connections and ports

3. Create an app tunnel to your Data Center instance

Create a tunneled application link in your cloud app

To create a tunneled application link:

1. Open your cloud app's administration and navigate to application links. This is different from admin.atlassian.com, each app has its own administration.

   • Jira Cloud: Go to Settings () > Products > Application links (under ‘Integrations’).

   • Confluence Cloud: Go to Settings () > Application links.

2. Select Create link.

3. On the Create link screen, select Tunneled application link, and then choose the application tunnel that is connected to your Data Center instance. Next, select Continue.

4. On the Confirm URLs screen, check the URLs and confirm them. Application URL should show the URL of the tunnel, and Display URL the base URL of your Data Center instance.

5. On the Review link screen, you’ll see the details of the instances you’re connecting.

Next, you’ll configure the reciprocal link. The steps depend on whether you’re an admin on the Data Center instance.

You’re an admin on the Data Center instance

1. On the Review link screen, select the I am an administrator on both instances check box.

2. Select Continue. You’ll be redirected to the Data Center instance, where you can confirm the links.

3. After you confirm, you’ll be redirected back to the Cloud site.

4. The application links will be created on both instances with the status Connected.

You’re not an admin on the Data Center instance

1. On the Review link screen, clear the I am an administrator on both instances check box.

2. Select Continue. You’ll get a pop-up with a URL.

3. Copy the URL and give it to the admin of the Data Center instance.

4. Once the admin opens the URL, they’ll be moved to the Application links page on the Data Center instance. They need to confirm the links.

5. The reciprocal link will be created, but the application links on both instances will most likely display the Config error.

6. To fix this, edit the application link in your Cloud app. Set the local authentication to OAuth for both incoming and outgoing communication.

Verify the link has been created

You can verify that the application link was correctly created by viewing its details, both on the Cloud and Data Center side. Here you can see some examples:

Cloud

Only this link is using the tunnel, because it’s incoming to your network. The target URL is the URL of your tunnel.

Data Center

This a direct reciprocal link, not using the tunnel, because it’s outgoing from your network.