On Thu, Dec 9, 2010 at 11:38 PM, Will <[email protected]> wrote: > Jeff, can you point me to a more detailed explanation of reverse proxy and > its setup?
http://lmgtfy.com/?q=reverse+proxy On Fri, Dec 10, 2010 at 8:25 AM, timwhunt <[email protected]> wrote: > Regarding the reverse proxy idea: > > Will the user's IP address get passed through so your app / Google's > service sees it (and not the proxy server)? Google's service will see the proxy's address. However you can pass the originating IP as an additional header and process it as you like. > Will it work for SSL/https connections too? Will browsers bark that > names don't match certificates or some other problem? You can use SSL for this but it's a bit more complicated. The SSL connection will be established between the client and the proxy using your certificate, then a different connection is established between the proxy and GAE. Depending on your threat model you may wish to use SSL for the backend connection, which will use the google cert to appspot.com. It's worth noting that this is essentially what the SSL feature does at Google Apps for Business, except that Google runs the proxy, and the leg between the proxy and GAE is on Google's secure network. Without SNI, SSL requires a dedicated IP address. > Is that a good alternative to using a custom domain via Google > domains? It isn't an either/or issue. If you need to work around the fact that AppEngine uses a pool of shared IP addresses (SSL is an example; geocode ratelimits are another), use proxies - either outbound (traditional proxy) or inbound (reverse proxy). Pick a facility that is logically close to GAE (ping from rackspace cloud is 12ms) and users will never notice the difference. Jeff -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
