#reverse-proxy

I'm not a big Ops guy but lately I had to setup a reverse proxy so I want to share the pain as I had a few specific steps to implement and they where not straightforward.

Table of contents

Install Nginx

Configure Nginx

Sauce

Install Nginx

On your server type the following command:

apt-get update apt-get install nginx

After all is completed, nginx is installed in /etc/nginx/

You can run nginx like any unix demon process:

nginx start nginx stop nginx restart

Configure Nginx

Edit /etc/nginx/nginx.conf with a new server entry:

server { listen 80; #1 server_name private-domain; #2 location / { #3 proxy_pass http://127.0.0.1:30018; #4 sub_filter "http://public-domain.com" "https://public-domain.com"; #5 sub_filter_once off; #6 proxy_set_header Accept-Encoding ""; #7 } }

The incoming traffic from the apache server is already unencrypted and comes on port 80

Define the hostname on which nginx is running

Define a new rule (here we use the root as we want to apply it to all incoming traffic)

proxy_pass tells nginx to serve the given url as a reverse proxy (here our docker loq application running on localhost:30018)

The drupal server will receive incoming traffic on port 80 and thus serve assets with http scheme, but from the outside world we want https, the sub_filter rule converts all the data in the outgoing traffic to apply the change.

Indicates that we want to replace all the occurrences of the string replaced by sub_filter rule.

For sub_filter to work, you have to explicitly tell the proxy to send an empty Accept-Encoding header, so that all compression is disabled.1

Restart nginx to take your configuration into account:

nginx restart

Sauce

https://docs.nginx.com/nginx/admin-guide/installing-nginx/installing-nginx-open-source/

https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-http-basic-authentication/

Serveur dédié : retirer Varnish, devenu inutile avec HTTPS

J’ai vraiment aimé jouer avec Varnish.

Le problème, c’est qu’en passant l’intégralité du site en HTTPS, il m’est devenu inutile.

Varnish est incompatible avec HTTPS et ne le sera probablement jamais puisque les connexions chiffrées ne doivent, par définition, ne jamais être mises en cache.

Par conséquent, j’ai décidé de le retirer temporairement du serveur : cela me fera un service de moins à…

Fixed: Apache mod_substitute on HTTP requests to reverse-proxied host #it #development #dev

Apache mod_substitute on HTTP requests to reverse-proxied host

I have the following setup:

Printer #1 on LAN

Printer #2 on LAN

Internet facing Debian Apache 2.2 web server at server-external-ip that I want to use as an IPP gateway to the two printers

The two printers are reachable (from LAN and from the Apache server) at the following IPP URLs:

http://printer-1-local-ip/printer

http://printer-2-…

How-to: Solution for Reverse Proxying onto URLs that are not amenable to being relocated to a subdirectory #programming #computers #it

Solution for Reverse Proxying onto URLs that are not amenable to being relocated to a subdirectory

Short Story Gah! I wish the developers who did admin interfaces would expose a “webroot=/myAppAppearsHere” option, or make all links relative.

Long Story

I have an admin portal for a customer that is basically an apache mod_auth login and then a series of links on to back-end admin pages like so;

h…

How-to: Nginx infinite redirect loop #answer #development #dev

Nginx infinite redirect loop

Why is http://compassionpit.com/blog/ going through an infinite redirect loop? Here’s my nginx conf file. The site is run by a nodejs server on port 8000 and Apache serves up the blog (wordpress) and the forum (phpBB). The forum is resolving just fine, at http://www.compassionpit.com/forum/ …

server { listen 80; server_name www.compassionpit.org; rewrite ^/(.*) http…

How to: Tools for introspecting Varnish #solution #it #answer

Tools for introspecting Varnish

Has anyone developed, or does anyone know of, any third-party tools (or non-obvious uses of the stock tools) to help a poor systems administrator determine what’s going on with requests that are passing through Varnish? While varnishstat, varnishtop, and varnishhistgive me either very high-level (or low-level) overviews, I’m looking for something that tells me…

Answer: Why is setting Nginx as a reverse proxy a good idea? #solution #it #development

Why is setting Nginx as a reverse proxy a good idea?

I have a Django site running on Gunicorn with a reverse proxy through Nginx. Isn’t Nginx just an extra unnecessary overhead? How does adding that on top of Gunicorn help?

Answer [by blueben]: Why is setting Nginx as a reverse proxy a good idea?

I’m going to focus on slow client behavior, and how your configuration handles it, but don’t be…