Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

First of all, sorry for my sloppy title, but I can not figure out a better description.

My problem is the following. I like to deploy some services in a home network, which are accessible via http. Those services should not be accessed by the outer world, but through a "https gateway", meaning a server which is listening on a public ip, but only allowing client access the services via https. So that might be something like an http proxy tunneled by https? Anyway. How could I achieve this setup? I have two additional requiments. The gateway should be able to work with client certificates for authentication, and allow to extend the authorization part, for a custom method.

Thanks! If something is unclear, give me a comment and I will clarify it, but right now that the best I could formulate.

share|improve this question

closed as off topic by Shane Madden, Sam Oct 20 '11 at 17:42

Questions on Server Fault are expected to relate to professional server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

    
Belongs on superuser. –  Tim Brigham Oct 20 '11 at 17:26
    
sorry I will move the question, was not sure about that. –  joecks Oct 21 '11 at 9:04
add comment

1 Answer

up vote 0 down vote accepted

Have you looked at nginx?

You can run nginx as a reverse proxy / SSL Offloader where the clients talk HTTPS (and it can check client certificates) to the proxy and the proxy talks HTTP to the backend(s).

You can create your own modules for use with nginx as well so you could develop a custom authorization module if you want. Here is a list of some third-party modules.

Hope this helps.

share|improve this answer
    
Thanks that helped! the page is here: wiki.nginx.org/SSL-Offloader –  joecks Oct 21 '11 at 12:59
    
In the end I used nginx and also installed the request-module which allows to make a seperate request for the authentication, which than is asking a fastcgi script to validate if the user has the sufficiant credentials Thanks –  joecks Oct 25 '11 at 9:00
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.