On Wed, Apr 08, 2009 at 11:40:53AM +0200, Ortwin Gl?ck wrote: > > > Brijesh Deo wrote: > > So in my browser I have to use the address: > > http://10.10.10.10:8888/index.html to get going through the reverse > > proxy. When the request comes into my proxy, the 'Host' header will have > > the value '10.10.10.10:8888' and this will not help me choose which of > > the two target servers I should send my request to. > > Brijesh, the Host header makes the most sense with domain names, not IP > addresses. It was invented, so that you can host hundreds of domains on a > single > IP and port. Maybe you need a split DNS horizon as well. Such that your > clients > would resolve the reverse proxy IP for all DNS names. > >
Alternatively, one could set up a traffic redirection rule on the TCP/IP level. Say, all IP packets to 10.10.10.51 and 10.10.10.52 should be sent to 10.10.10.10 instead. That's how all transparent proxies work, I suppose. Oleg > > Redirect to some page say /settings.html, then the Redirect location > > that gets created is "https://10.10.10.10:8888/settings.html"; which is > > not right > > The Webserver should create a redirect location that is for itself (not the > proxy). And it should use the Host header to create that URL. It's the reverse > proxy's job to rewrite these URLs if necessary: the ProxyPassReverse directive > of mod_proxy does exactly that. In the case of a split DNS horizon there is no > need for that. > > > > as I wouldn't have https running on the port 8888 on my > > reverse proxy system. Then I start getting the exception > > [javax.net.ssl.SSLException: Unrecognized SSL message, plaintext > > connection? ] > > Of course HTTPS and plain HTTP must run on separate TCP ports. Again if you > let > your reverse proxy rewrite URLs for you, all is fine. Don't try to let the > Webserver do this job. It doesn't have the knowledge to perform it correctly. > > Cheers, > > Ortwin > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
