View previous topic :: View next topic |
Author |
Message |
msalerno Veteran
![Veteran Veteran](/images/ranks/rank_rect_5_vet.gif)
![](images/avatars/174712528041c87d66e1b63.gif)
Joined: 17 Dec 2002 Posts: 1338 Location: Sweating in South Florida
|
Posted: Tue Feb 14, 2006 2:02 pm Post subject: Apache reverse proxy with ssl: https<->proxy<-> |
|
|
I have been reading everything I can, and I have not found an answer yet.
here is a list of my requirements:
1. It needs to be a proxy, cannot use NAT (Don't ask)
2. All communications need to be through https
With that being said, what I am trying to do is have apache reverse proxy all https requests to an internal iis server (ugh).
I currently have it working with the proper certificates on the internal server and the proxy server, but I would prefer to just have the apache reverse proxy pass the https requests directly to the internal server. Is this possible?
Can the apache reverse proxy pass https requests without having to handle the ssl handshaking?
Currently:
Internet<>Proxy (with certs) <-> IIS (with certs)
Is it possible to:
Internet<>Proxy (no certs, just pass to internal server) <-> IIS (with certs)
Thanks for any assistance |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
SnEptUne l33t
![l33t l33t](/images/ranks/rank_rect_4.gif)
![](images/avatars/203403817361e6f82a75ff9.gif)
Joined: 23 Aug 2004 Posts: 656
|
Posted: Tue Feb 14, 2006 10:34 pm Post subject: |
|
|
Apache's mod_proxy and mod_rewrite can do what you have discribed, but the SSL handshaking would be done on the proxy server instead of the IIS server.
Maybe you can try squid? http://www.linuxdevcenter.com/pub/a/linux/2001/10/25/transparent_proxy.html
However, I don't quite understand the suitation. Wouldn't a port forwarding from the proxy to IIS work just fine? _________________ "There will be more joy in heaven over the tear-bathed face of a repentant sinner than over the white robes of a hundred just men." (LM, 114) |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
msalerno Veteran
![Veteran Veteran](/images/ranks/rank_rect_5_vet.gif)
![](images/avatars/174712528041c87d66e1b63.gif)
Joined: 17 Dec 2002 Posts: 1338 Location: Sweating in South Florida
|
Posted: Wed Feb 15, 2006 2:11 pm Post subject: |
|
|
Thanks for the reply.
Yes, port forwarding would work perfectly, but then it wouldn't be going through the proxy, so it wouldn't meet the requirements I was given.
I have a feeling that this is not possible. |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
|