On 01.11.2012 10:48, Karl Hill wrote:
Hello, I'm having some issues setting up a reverse proxy in my
environment for some URL's running on the same Apache server. I'm
using squid 3.1.10. My configuration is below, but basically I have
two sites on one Apache server and that server is in an isolated
environment. The Apache sites are vhost1 and vhost2.example.com, but I
need to get to them via the outside.example.com domain. So
effectively:

client -> vhost1.outside.example.com -> squid -> vhost1.example.com ->
apache server

for both. The problem is that only the vhost1 is working. When I go to
vhost2.outside.example.com I go to vhost1.example.com.

Any help would be appreciated.

Virtual HTTPS hosts have not had much use in Squid and thus not much testing or feature development. The main problem as I understand it is that the certificate is a static cert for only one of the domains, possibly a wildcard cert can make it kind of useful for sub-domains. The 3.1 and older Squid also do not support the TLS SNS feature necessary for proxies to identify the virtual domain FQDN up front.

Squid-3.2 and later provide a certificate generation feature that it should be very useful for virtual hosting with HTTPS. Are you able to upgrade and test it out? There are a few wrinkles due to it being quite new and not much tested in reverse-proxy, but if it works for you it would be good to know that - or any issues you can find.

Amos

Reply via email to