Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Apache reverse proxy with ssl: https<->proxy<->https
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
msalerno
Veteran
Veteran


Joined: 17 Dec 2002
Posts: 1338
Location: Sweating in South Florida

PostPosted: Tue Feb 14, 2006 2:02 pm    Post subject: Apache reverse proxy with ssl: https<->proxy<-> Reply with quote

I have been reading everything I can, and I have not found an answer yet.

here is a list of my requirements:

1. It needs to be a proxy, cannot use NAT (Don't ask)
2. All communications need to be through https

With that being said, what I am trying to do is have apache reverse proxy all https requests to an internal iis server (ugh).
I currently have it working with the proper certificates on the internal server and the proxy server, but I would prefer to just have the apache reverse proxy pass the https requests directly to the internal server. Is this possible?

Can the apache reverse proxy pass https requests without having to handle the ssl handshaking?

Currently:

Internet<>Proxy (with certs) <-> IIS (with certs)

Is it possible to:

Internet<>Proxy (no certs, just pass to internal server) <-> IIS (with certs)


Thanks for any assistance
Back to top
View user's profile Send private message
SnEptUne
l33t
l33t


Joined: 23 Aug 2004
Posts: 656

PostPosted: Tue Feb 14, 2006 10:34 pm    Post subject: Reply with quote

Apache's mod_proxy and mod_rewrite can do what you have discribed, but the SSL handshaking would be done on the proxy server instead of the IIS server.

Maybe you can try squid? http://www.linuxdevcenter.com/pub/a/linux/2001/10/25/transparent_proxy.html

However, I don't quite understand the suitation. Wouldn't a port forwarding from the proxy to IIS work just fine?
_________________
"There will be more joy in heaven over the tear-bathed face of a repentant sinner than over the white robes of a hundred just men." (LM, 114)
Back to top
View user's profile Send private message
msalerno
Veteran
Veteran


Joined: 17 Dec 2002
Posts: 1338
Location: Sweating in South Florida

PostPosted: Wed Feb 15, 2006 2:11 pm    Post subject: Reply with quote

Thanks for the reply.

Yes, port forwarding would work perfectly, but then it wouldn't be going through the proxy, so it wouldn't meet the requirements I was given.

I have a feeling that this is not possible.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum