Title: proxy pass Post by: jtkells on Friday 21 November 2014, 02:21:08 am Im in the process of moving a site to a new site. The exiting site was part of an company infrastructure and we were operating in a defined IP range. I was using IPTABLES and Apache proxy pass to control and direct my internet access to our subnet. For this new site we will be using ENDIAN FW. Initially to get started and learn your product I have the community version installed on a PC and will hook this up to the ISP shortly. We are currently in the process of purchasing a mercury FW for our final configuration.
So the problem I am stuck with is how do I redirect http and https to several web servers (we have development and training WEB URL's) Currently I use Apache on our Linux FW to redirect. So I have something like ProxyPass /webapp1 internal URL address 1/webapp1 ProxyPassReverse /webapp1 internal URL address 1 /webapp1 and ProxyPass /webappWS internal URL address 2/webappWS ProxyPassReverse /webappWS internal URL address 2/webappWS Not sure how to implement this type of redirection in Endian. Any pointers/directions would be greatly appreciated Title: Re: proxy pass Post by: kieronrob on Saturday 22 November 2014, 05:32:31 pm Hi,
If the web servers are using different ports you can use the port forwarding on the firewall to allow access to the servers. Title: Re: proxy pass Post by: jtkells on Tuesday 25 November 2014, 01:15:20 am Thanks, thought about that but unfortunately they are not. Its all in the URL. At this point unless someone can think of an alternative way I think I will keep the old Linux server and just have Endian forward all URL's to it for redirection. one extra hop.
Cheers Title: Re: proxy pass Post by: kieronrob on Tuesday 25 November 2014, 02:35:32 am Hi,
EFW is lacking a reverse proxy for this sort of implementation unfortunately. Have a look at Apache Trafficserver http://trafficserver.apache.org/ for reverse proxy and url remapping with a bunch more features. Forward all http/s traffic to it and it can direct the urls. Title: Re: proxy pass Post by: Timmeh on Thursday 08 January 2015, 03:41:27 am You could run this within a VM or physical server?
https://github.com/dlundquist/sniproxy It will work exactly how you wish. |