nixCraft

satimis · #1 (**permalink**) 02-04-2008, 08:47 PM

Hi folks,

What will be the use of "pound"?

Apsis Gmbh

I don't have a clear picture of its application on reading its website. Any example? TIA

B.R.
satimis

rockdalinux · #2 (**permalink**) 02-04-2008, 10:37 PM

Linux install and configure pound reverse proxy for Apache http / https web server

satimis · #3 (**permalink**) 02-05-2008, 11:02 AM

Quote:

Originally Posted by rockdalinux

Linux install and configure pound reverse proxy for Apache http / https web server

Thanks for your URL.

I'm interested on points 3 and 4;

Code:

3.   an SSL wrapper: Pound will decrypt HTTPS requests from client browsers and pass them as plain HTTP to the back-end servers.
4.   an HTTP/HTTPS sanitizer: Pound will verify requests for correctness and accept only well-formed ones.

The backside story leading to my discovery of "pound" on googling is as follows;

I'm doing a test on virturalization with following setup;
(This is a test NOT for production)

VMWare Server

Ubuntu 7.04 server amd64 (Host)
(Mail Server with SquirrelMail running)
Internal IP addr 192.168.0.10
Port forwarded 80, 443 (orginal setup on router)

CentOS 5 x56_64 (Guest)
(Web Server)
Internal IP addr 192.168.0.20
Port forwarded 8080 (orginal setup on router]

The Mail Server is running w/o problem. The Web Server can be visited with;

https://public_ip:8080

I expect to exclude ":8080", therefore re-setup the router as follows;

Ports forward to Ubuntu - 80 and 8080
Port forward to CentOS - 443

On CentOS;
======

Edit /etc/httpd/conf/httpd.conf
Add "Listen 443" and comment out;
Listen 80
Listen 8080

# service httpd start

Code:

Starting httpd: (98)Address already in use: make_sock: could not bind to address [::]:443
(98)Address already in use: make_sock: could not bind to address 0.0.0.0:443
no listening sockets available, shutting down
Unable to open logs

I fixed the problem as follow;

Edit /etc/httpd/conf.d/ssl.conf
comment out "Listen 443"

Code:

....
#
# When we also provide SSL we have to listen to the
# the HTTPS port in addition.
#
#Listen 443
...

# service httpd start

Code:

Starting httpd:                                            [  OK  ]

https://public_ip
displays Apache default page on CentOS
(Remark - haven't setup homepage yet)

http://public_ip
displays Apache default page on Ubuntu
(Remark - haven't setup homepage yet)

http://public_ip/mail
starts SquirrelMail on Ubuntu

Now my problem is ssl httpd needs listening to port 443. I can't forward all www ports, 80, 8080 and 443 to CentOS. Because SquirrelMail on Ubuntu needs web port to run. It is a web base package.

Do you think "pound" can help me out? Any suggestion? TIA.

Furthermore;

I'm at lost what will be the use or advantage to go virtualization? I can't run mail and web server on Host/Guest separately. What shall I make use of the Guest ? Only for testing? I think virtualization will only be suitable for running multiple public IPs.

B.R.
satimis