http://lmgtfy.com is great, I had not seen that before. Will come in handy.
On Fri, Dec 10, 2010 at 16:12, Jeff Schnitzer <[email protected]> wrote: > On Thu, Dec 9, 2010 at 11:38 PM, Will <[email protected]> wrote: >> Jeff, can you point me to a more detailed explanation of reverse proxy and >> its setup? > > http://lmgtfy.com/?q=reverse+proxy > > On Fri, Dec 10, 2010 at 8:25 AM, timwhunt <[email protected]> wrote: >> Regarding the reverse proxy idea: >> >> Will the user's IP address get passed through so your app / Google's >> service sees it (and not the proxy server)? > > Google's service will see the proxy's address. However you can pass > the originating IP as an additional header and process it as you like. > >> Will it work for SSL/https connections too? Will browsers bark that >> names don't match certificates or some other problem? > > You can use SSL for this but it's a bit more complicated. The SSL > connection will be established between the client and the proxy using > your certificate, then a different connection is established between > the proxy and GAE. Depending on your threat model you may wish to use > SSL for the backend connection, which will use the google cert to > appspot.com. > > It's worth noting that this is essentially what the SSL feature does > at Google Apps for Business, except that Google runs the proxy, and > the leg between the proxy and GAE is on Google's secure network. > Without SNI, SSL requires a dedicated IP address. > >> Is that a good alternative to using a custom domain via Google >> domains? > > It isn't an either/or issue. If you need to work around the fact that > AppEngine uses a pool of shared IP addresses (SSL is an example; > geocode ratelimits are another), use proxies - either outbound > (traditional proxy) or inbound (reverse proxy). Pick a facility that > is logically close to GAE (ping from rackspace cloud is 12ms) and > users will never notice the difference. > > Jeff > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/google-appengine?hl=en. > > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
