Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I want to use a linux reverse proxy (CentOS) to serve multiple OWA sites, for multiple Exchange servers, on different domains, so I can use only one public IP address. Can I do it with apache? Or should I use Squid?

Thanks!

Cheers,

Helder

share|improve this question
    
this should make connecting to those OWA sites interesting –  Jim B May 18 '10 at 21:24

2 Answers 2

up vote 1 down vote accepted

You could use mod_proxy or SQUID easily. Really, options are endless. I use SQUID for this purpose but that's because it fits better within my current infrastructure.

share|improve this answer
    
Thanks! :) I'll give SQUID a try :) I've never used it before, but I've been reading a bit, and I have a testing environment, so hopefully it should be ok :) I presume you are "proxying" https, so you should have the certificates on the SQUID machine, right? –  Helder May 18 '10 at 16:35
    
Correct. I typically prefer the communication internally to be encrypted as well, so I use https on the backend also. –  Warner May 18 '10 at 19:05
    
Ok, after some struggle, and due to a "consensual" decision, we will use Apache for this :) I was able to configure it to reverse http (80) to a couple of different physical webservers, and now I feel confident to move on to SSL. Now, I plan to use a configuration similar to yours: https from the several Exchange boxes to the reverse proxy, and from there, obvious, to the outside. My first question is this: do I need to "reissue" any of the certificates (because of the server names)? –  Helder May 20 '10 at 15:09
    
CN mismatch is an area of potential issue. Check out: serverfault.com/questions/126072/… –  Warner May 20 '10 at 15:37
    
thanks, I'll look into it :) Another issue, will I be able to reverse-proxy multiple virtual hosts with SSL, using only one IP address? I've read somewhere that I might need dedicated IPs for this :S Thanks again for your help :) –  Helder May 20 '10 at 15:51

Mod_proxy absolutely works...Most of the proxy tags can be easily nested inside a VirtualHost directive, which makes it very easy to separate out your different domains.

If you've got a bunch of them though, I'd definitely recommend using Squid. Mod_proxy is nice, but its a proxy service bolted onto a webserver, and, as such, not as capable as a dedicated proxy like Squid.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.