Re: 100% Transparent Reverse Proxy
Hi Ryan
We use varnish for proxying one of our larger websites and we had a
similar problem with IP addressing when we first installed it. To get
the correct IP address, you need to add the following varnish
configuration:
sub vcl_recv {
remove req.http.X-Forwarded-For;
}
It looks a bit non-sensical but it worked for us!
All the best,
Justin
On Sun, 2009-07-26 at 12:10 +0800, Ryan Chan wrote:
>
> Hello,
>
> I have serveral web sites running on Apache/PHP, I want to install a
> Transparent Reverse Proxy (e.g. squid, varnish) to cache the static
> stuff. (By looking at expire or LM resposne header)
>
> However, one of my requirements is that neither client (browser) or
> server (Apache/PHP) is aware of existences of that proxy.
>
> E.g.
>
> Client will not see header such as via, age etc.
> Server will not see header such as X-Forwarded-For
>
> I want to ask: Is it possible to do the above stuffs using varnish?
>
> Thanks.
>
>
> ___
> varnish-misc mailing list
> varnish-misc@projects.linpro.no
> http://projects.linpro.no/mailman/listinfo/varnish-misc
--
Redwire Design Limited
54 Maltings Place
169 Tower Bridge Road
London SE1 3LJ
www.redwiredesign.com
[ 020 7403 1444 ] - voice
[ 020 7378 8711 ] - fax
___
varnish-misc mailing list
varnish-misc@projects.linpro.no
http://projects.linpro.no/mailman/listinfo/varnish-misc
Re: 100% Transparent Reverse Proxy
Ryan Chan wrote: > Hi, > > On Sun, Jul 26, 2009 at 12:46 PM, Michael S. Fischer > mailto:mich...@dynamine.net>> wrote: > > What's the purpose of these requirements? Just curious. > > --Michael > > > To the client side, it is a security requirement. > To the server side, sometimes PHP need to get remote IP, obviously proxy > ip is meaningless to the program. (But I don't want to change the > program tp handle X-Forwarded-For) Then use an apache module like rpaf (http://stderr.net/apache/rpaf/) which will remove the need to modify you PHP application. -- Christian Laursen ___ varnish-misc mailing list varnish-misc@projects.linpro.no http://projects.linpro.no/mailman/listinfo/varnish-misc
Re: 100% Transparent Reverse Proxy
Hi, On Sun, Jul 26, 2009 at 12:46 PM, Michael S. Fischer wrote: > What's the purpose of these requirements? Just curious. > > --Michael > > To the client side, it is a security requirement. To the server side, sometimes PHP need to get remote IP, obviously proxy ip is meaningless to the program. (But I don't want to change the program tp handle X-Forwarded-For) ___ varnish-misc mailing list varnish-misc@projects.linpro.no http://projects.linpro.no/mailman/listinfo/varnish-misc
Re: 100% Transparent Reverse Proxy
What's the purpose of these requirements? Just curious. --Michael On Jul 25, 2009, at 9:10 PM, Ryan Chan wrote: > > Hello, > > I have serveral web sites running on Apache/PHP, I want to install a > Transparent Reverse Proxy (e.g. squid, varnish) to cache the static > stuff. (By looking at expire or LM resposne header) > > However, one of my requirements is that neither client (browser) or > server (Apache/PHP) is aware of existences of that proxy. > > E.g. > > Client will not see header such as via, age etc. > Server will not see header such as X-Forwarded-For > > I want to ask: Is it possible to do the above stuffs using varnish? > > Thanks. > > ___ > varnish-misc mailing list > varnish-misc@projects.linpro.no > http://projects.linpro.no/mailman/listinfo/varnish-misc ___ varnish-misc mailing list varnish-misc@projects.linpro.no http://projects.linpro.no/mailman/listinfo/varnish-misc
100% Transparent Reverse Proxy
Hello, I have serveral web sites running on Apache/PHP, I want to install a Transparent Reverse Proxy (e.g. squid, varnish) to cache the static stuff. (By looking at expire or LM resposne header) However, one of my requirements is that neither client (browser) or server (Apache/PHP) is aware of existences of that proxy. E.g. Client will not see header such as via, age etc. Server will not see header such as X-Forwarded-For I want to ask: Is it possible to do the above stuffs using varnish? Thanks. ___ varnish-misc mailing list varnish-misc@projects.linpro.no http://projects.linpro.no/mailman/listinfo/varnish-misc
