Quote:
Originally Posted by rockdalinux
|
Thanks for your URL.
I'm interested on points 3 and 4;
Code:
3. an SSL wrapper: Pound will decrypt HTTPS requests from client browsers and pass them as plain HTTP to the back-end servers.
4. an HTTP/HTTPS sanitizer: Pound will verify requests for correctness and accept only well-formed ones.
The backside story leading to my discovery of "pound" on googling is as follows;
I'm doing a test on virturalization with following setup;
(This is a test NOT for production)
VMWare Server
Ubuntu 7.04 server amd64 (Host)
(Mail Server with SquirrelMail running)
Internal IP addr 192.168.0.10
Port forwarded 80, 443 (orginal setup on router)
CentOS 5 x56_64 (Guest)
(Web Server)
Internal IP addr 192.168.0.20
Port forwarded 8080 (orginal setup on router]
The Mail Server is running w/o problem. The Web Server can be visited with;
https://public_ip:8080
I expect to exclude ":8080", therefore re-setup the router as follows;
Ports forward to Ubuntu - 80 and 8080
Port forward to CentOS - 443
On CentOS;
======
Edit /etc/httpd/conf/httpd.conf
Add "Listen 443" and comment out;
Listen 80
Listen 8080
# service httpd start
Code:
Starting httpd: (98)Address already in use: make_sock: could not bind to address [::]:443
(98)Address already in use: make_sock: could not bind to address 0.0.0.0:443
no listening sockets available, shutting down
Unable to open logs
I fixed the problem as follow;
Edit /etc/httpd/conf.d/ssl.conf
comment out "Listen 443"
Code:
....
#
# When we also provide SSL we have to listen to the
# the HTTPS port in addition.
#
#Listen 443
...
# service httpd start
Code:
Starting httpd: [ OK ]
https://public_ip
displays Apache default page on CentOS
(Remark - haven't setup homepage yet)
http://public_ip
displays Apache default page on Ubuntu
(Remark - haven't setup homepage yet)
http://public_ip/mail
starts SquirrelMail on Ubuntu
Now my problem is ssl httpd needs listening to port 443. I can't forward all www ports, 80, 8080 and 443 to CentOS. Because SquirrelMail on Ubuntu needs web port to run. It is a web base package.
Do you think "pound" can help me out? Any suggestion? TIA.
Furthermore;
I'm at lost what will be the use or advantage to go virtualization? I can't run mail and web server on Host/Guest separately. What shall I make use of the Guest ? Only for testing? I think virtualization will only be suitable for running multiple public IPs.
B.R.
satimis