0

I want to use a linux reverse proxy (CentOS) to serve multiple OWA sites, for multiple Exchange servers, on different domains, so I can use only one public IP address. Can I do it with apache? Or should I use Squid?

Thanks!

Cheers,

Helder

1
  • this should make connecting to those OWA sites interesting
    – Jim B
    May 18, 2010 at 21:24

2 Answers 2

1

You could use mod_proxy or SQUID easily. Really, options are endless. I use SQUID for this purpose but that's because it fits better within my current infrastructure.

6
  • Thanks! :) I'll give SQUID a try :) I've never used it before, but I've been reading a bit, and I have a testing environment, so hopefully it should be ok :) I presume you are "proxying" https, so you should have the certificates on the SQUID machine, right?
    – Helder
    May 18, 2010 at 16:35
  • Correct. I typically prefer the communication internally to be encrypted as well, so I use https on the backend also.
    – Warner
    May 18, 2010 at 19:05
  • Ok, after some struggle, and due to a "consensual" decision, we will use Apache for this :) I was able to configure it to reverse http (80) to a couple of different physical webservers, and now I feel confident to move on to SSL. Now, I plan to use a configuration similar to yours: https from the several Exchange boxes to the reverse proxy, and from there, obvious, to the outside. My first question is this: do I need to "reissue" any of the certificates (because of the server names)?
    – Helder
    May 20, 2010 at 15:09
  • CN mismatch is an area of potential issue. Check out: serverfault.com/questions/126072/…
    – Warner
    May 20, 2010 at 15:37
  • thanks, I'll look into it :) Another issue, will I be able to reverse-proxy multiple virtual hosts with SSL, using only one IP address? I've read somewhere that I might need dedicated IPs for this :S Thanks again for your help :)
    – Helder
    May 20, 2010 at 15:51
0

Mod_proxy absolutely works...Most of the proxy tags can be easily nested inside a VirtualHost directive, which makes it very easy to separate out your different domains.

If you've got a bunch of them though, I'd definitely recommend using Squid. Mod_proxy is nice, but its a proxy service bolted onto a webserver, and, as such, not as capable as a dedicated proxy like Squid.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .