?
Solved

Apache FQDN Reverse Proxy

Posted on 2014-12-18
8
Medium Priority
?
546 Views
Last Modified: 2014-12-27
Hi,

I am going to use Apache httpd for the first time to act as a FQDN Reverse Proxy. I have three web sites all pointing to the same IP and so I need Apache to act as a reverse proxy and forward requests based on the incoming FQDN to the appropriate server.

I am really new to all this and so I looking for a good tutorial or guide that explains how this is done in a Windows environment, preferably one which provides some explanation of what the settings are doing so that I can learn something from the process rather than just blindly following instructions

The server I am using is W2K8 R2 Standard
0
Comment
Question by:Michael Fowler
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
8 Comments
 
LVL 62

Expert Comment

by:gheist
ID: 40508611
FQDN part sneaks in apache documentation between NameVirtualHost and VirtualHost parameters
Reverse Proxy is handled by mod_proxy_* with ProxyPass and ProxyPassReverse parameters

e.g:
Listen 80
NameVirtualHost *:80
<VirtualHost *:80>
 ServerName FQDN.example
 # ServerAliases www.fwdn.local www.fqdn.example
 # CustomLog /var/log/httpd/FQDN_access.log
 # ErrorLog /vqar/log/httpd/FQDN_error.log
 # ProxyPreserveHost on
 <Location />
  ProxyPass http://backendip:8080 ttl=3600 retry=1 timeout=1800
  ProxyPassReverse http://backendip:8080
 </Location>
</VirtualHost>
0
 
LVL 23

Author Comment

by:Michael Fowler
ID: 40512117
OK time for some more detail I think

I have two sites (fake names)

https://example1.myco.com
https://example2.myco.com

both of these have public DNS entries pointing to the same IP say 12.1.1.1

I have a Windows 2008 R2 server on 12.1.1.1 with Apache 2.4 installed which is to be the reverse proxy.

Based on the incoming FQDN I want to redirect incoming calls to appropriate internal host server

Note: I need to use SSL and I do have a wildcard domain cert  *.myco.com and the associated key
0
 
LVL 62

Expert Comment

by:gheist
ID: 40512469
You just use 2 <VirtualHost *:80> sections with appropriate host names/host aliases/proxy backends.
You can have unlimited amount of them.
0
Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

 
LVL 23

Accepted Solution

by:
Michael Fowler earned 0 total points
ID: 40514353
In the end I found the solution using a number of different sources

I enabled the following modules

LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_html_module modules/mod_proxy_html.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule ssl_module modules/mod_ssl.so
LoadModule xml2enc_module modules/mod_xml2enc.so

In httpd.conf I entered

Listen 12.1.1.1:443
ServerName 12.1.1.1:443

<Proxy *>
	Order deny,allow
	Allow from all
</Proxy>

Open in new window


In my proxy-html.conf I entered
<VirtualHost 12.1.1.1:443>
	ProxyRequests Off
        SSLEngine on
	SSLCertificateFile      host.crt
	SSLCertificateKeyFile   host.key

	ServerName      		"example2.myco.com"
	ProxyPreserveHost 		On
	ProxyPass 				/ https://example2.myco.com/
	ProxyPassReverse 		/ https://example2.myco.com/
</VirtualHost>

<VirtualHost 12.1.1.1:443>
        ProxyRequests Off
        SSLEngine on
	SSLCertificateFile      host.crt
	SSLCertificateKeyFile   host.key

	ServerName      		"example1.myco.com"
	ProxyPreserveHost 		On
	ProxyPass 				/ https://example1.myco.com/
	ProxyPassReverse 		/ https://example1.myco.com/
</VirtualHost>

Open in new window

0
 
LVL 62

Expert Comment

by:gheist
ID: 40514488
There is one small problem - you NEVER even mentioned SSL
You just dropped some random page off the net which in part of functionality used is equivalent to solution provided.
And you do not use any directives from mod_proxy_html and mod_xml2enc, so with SSL optimal solution would be SSLProxyEngine.
0
 
LVL 23

Author Comment

by:Michael Fowler
ID: 40515591
@gheist

My original post did not list https but my second stated
Note: I need to use SSL and I do have a wildcard domain cert  *.myco.com and the associated key

Your solution provided no detail and no explanations which was specifically requested in the original post. I came to my answer after hours of reading many different sources and trying different configs, which still did not result in my getting a good understanding of the subject but did result in a working solution.
0
 
LVL 23

Author Closing Comment

by:Michael Fowler
ID: 40519478
I ended up finding the solution myself
0

Featured Post

New benefit for Premium Members - Upgrade now!

Ready to get started with anonymous questions today? It's easy! Learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are numerous questions about how to setup an IBM HTTP Server to be administered from WebSphere Application Server administrative console. I do hope this article will wrap things up and become a reference for this task. You need three things…
When it comes to security, close monitoring is a must. According to WhiteHat Security annual report, a substantial number of all web applications are vulnerable always. Monitis offers a new product - fully-featured Website security monitoring and pr…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Have you created a query with information for a calendar? ... and then, abra-cadabra, the calendar is done?! I am going to show you how to make that happen. Visualize your data!  ... really see it To use the code to create a calendar from a q…
Suggested Courses
Course of the Month8 days, 8 hours left to enroll

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question