nixCraft

Johnny Utah · #1 (**permalink**) 12-08-2007, 11:30 AM

I'm trying to setup a reverse proxy in my DMZ that will create an SSL connection to internet users. The proxy will then connect clients to backend Apache and Tomcat servers unencrypted in my local network.

I hoping to set something up on Debian like Pound. Apache seems like a pain in the butt to configure for this, and Squid seems like overkill.

So far I have had little success getting it setup the exact way I want it.

Does anyone know of a good How To?

Thanks!

monk · #2 (**permalink**) 12-08-2007, 09:05 PM

Configuring pound is one of the easiest thing. Let us say your run pound on 190.1.5.6 public ip. All you have to do is

1) stop Apache on 190.1.5.6 port 80/443
2) configure pound to run on 190.1.5.6 port 80/443
3) configure pound to redirect traffic to internal hosts
4) my guess DMZ firewall is blocking something soemwhere

Try following tutorial
Tuple Shop: Deploying Rails with Pound in Front of Mongrel, Lighttpd, and Apache

Johnny Utah · #3 (**permalink**) 12-08-2007, 09:38 PM

Thanks for the reply.

It's not a firewall issue, because I've been testing out the configuration in the same subnet (and neither machine is running IPTable

.

The How To looks great, but I don't think it mentions anything about https. Would I configure https thru pound, or on the Tomcat server? I'm thinking the latter.

Thanks.

rockdalinux · #4 (**permalink**) 12-09-2007, 09:38 PM

Here is /etc/pound.conf configuration from my *working* server for standard 443 and 80 port. All request comes to 203.xx.yy.zzz:80

Code:

IE/FF => 203.xx.yy.zzz:80  => pound => redirect to => 192.168.1.6:80 => Apache

Code:

ListenHTTPS
        Address 203.xx.yy.zzz
        Port 443
        Cert "/usr/local/etc/ssl/in.vsnl.test-server/server.pem"
        Service
                BackEnd
                        Address 192.168.1.5
                        Port 443
                End
        End
End

ListenHTTP
            Address 203.xx.yy.zzz
            Port    80
            Service
                BackEnd
                    Address 192.168.1.6
                    Port    80
                End
            End
End

Also note that HTTPS does not allow virtual hosting

Johnny Utah · #5 (**permalink**) 12-11-2007, 04:14 AM

When I hit the pound server, all I get is the Tomcat page. Here's my configuration in pound.cfg:

ListenHTTP
Address 10.10.10.79
port 80

## allow Put and Delete also (by default only GET,POST, and HEAD?)
xHTTP 0

Service
BackEnd
Address 10.10.10.89
port 8080
END
END
END

monk · #6 (**permalink**) 12-11-2007, 12:38 PM

If you get tomcat page, it is working fine. Do you have tomcat server configured properly via server.xml / web.xml file Do you see any specify error log in /var/log/messages (syslog) file?

Johnny Utah · #7 (**permalink**) 12-11-2007, 08:54 PM

Quote:

Originally Posted by monk

If you get tomcat page, it is working fine. Do you have tomcat server configured properly via server.xml / web.xml file Do you see any specify error log in /var/log/messages (syslog) file?

Tomcat is running fine on the backend server. You need to specify:

Code:

http://pengo:8080/jtrac

in order to use the application though. Is there any way to get Pound to redirect to the URL above? Or do I need to configure Tomcat's server.xml / web.xml so that the application is accessible by hitting just

Code:

http://pengo

?

I enabled the highest level of logging, but I didn't see any error messages.

monk · #8 (**permalink**) 12-11-2007, 09:58 PM

Quote:

Originally Posted by Johnny Utah

Tomcat is running fine on the backend server. You need to specify:

Code:

http://pengo:8080/jtrac

in order to use the application though. Is there any way to get Pound to redirect to the URL above? Or do I need to configure Tomcat's server.xml / web.xml so that the application is accessible by hitting just

Code:

http://pengo

?

I enabled the highest level of logging, but I didn't see any error messages.

Pound cannot connect to dynamic urls it only recognizes root; In short run app from root aka reconfigure tomcat.

Code:

http://pengo

Johnny Utah · #9 (**permalink**) 12-13-2007, 04:20 AM

Good deal. Thanks for your help.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Tomcat shell script cron job to restart server	kasimani	Shell scripting	4	05-03-2008 07:46 PM
Nagios on tomcat?	Vince-0	Linux software	0	04-22-2008 01:30 PM
Progate account across several servers	piggy	Shell scripting	0	03-06-2008 08:03 AM
Viewing the Jakarta-Tomcat pages on Client machines	shilpigoel1	Networking, Firewalls and Security	7	08-21-2007 10:53 PM
Restrict number of simultaneous proxy connections in SQUID proxy	pkvmreddy	Getting started tutorials	1	06-15-2007 03:52 PM

nixCraft

Reverse Proxy to Backend Tomcat Servers

Reverse Proxy to Backend Tomcat Servers

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads