EFW Support

Support => Installation Support => Topic started by: jtkells on Friday 21 November 2014, 02:21:08 am



Title: proxy pass
Post by: jtkells on Friday 21 November 2014, 02:21:08 am
Im in the process of moving a site to a new site.  The exiting site was part of an company infrastructure and we were operating in a defined IP range. I was using IPTABLES and Apache proxy pass to control and direct my internet access to our subnet.  For this new site we will be using ENDIAN FW.  Initially to get started and learn your product I have the community version installed on a PC and will hook this up to the ISP shortly.  We are currently in the process of purchasing a mercury FW for our final configuration.
So the problem I am stuck with is how do I redirect http and https to several web servers (we have development and training WEB URL's)
Currently I use Apache on our Linux FW to redirect.  So I have something like

ProxyPass /webapp1 internal URL address 1/webapp1
ProxyPassReverse /webapp1 internal URL address 1 /webapp1
and
ProxyPass /webappWS internal URL address 2/webappWS
ProxyPassReverse /webappWS internal URL address 2/webappWS


Not sure how to implement this type of redirection in Endian.  Any pointers/directions would be greatly appreciated


Title: Re: proxy pass
Post by: kieronrob on Saturday 22 November 2014, 05:32:31 pm
Hi,

If the web servers are using different ports you can use the port forwarding on the firewall to allow access to the servers.


Title: Re: proxy pass
Post by: jtkells on Tuesday 25 November 2014, 01:15:20 am
Thanks, thought about that but unfortunately they are not.  Its all in the URL.  At this point unless someone can think of an alternative way  I think I will keep the old Linux server and just have Endian forward all URL's to it for redirection.  one extra hop.

Cheers


Title: Re: proxy pass
Post by: kieronrob on Tuesday 25 November 2014, 02:35:32 am
Hi,

EFW is lacking a reverse proxy for this sort of implementation unfortunately.

Have a look at Apache Trafficserver http://trafficserver.apache.org/ for reverse proxy and url remapping with a bunch more features.

Forward all http/s traffic to it and it can direct the urls.


Title: Re: proxy pass
Post by: Timmeh on Thursday 08 January 2015, 03:41:27 am
You could run this within a VM or physical server?

https://github.com/dlundquist/sniproxy


It will work exactly how you wish.