Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Im trying to set up a subversion edge server that is accessible from outside my network, I have one public IP and so the main webserver proxies to other internal server, i got the non https port (3343) to proxy to the internal server but i cant get the https port (4434) to proxy to the internal server http port (3343), I set apache to listen for https on port 4434 and I can telnet to that port on the main webserver but when it tries to proxy to the internal server it times out

heres what my apache virtualhost is for that proxy

VirtualHost *:4434


    SSLEngine On
    SSLOptions +StrictRequire
    SSLCertificateFile /etc/ssl/certs/server.crt
    SSLCertificateKeyFile /etc/ssl/private/server.key
    ProxyRequests Off
            <Proxy *>
                    Order deny,allow
                    Allow from all
    ProxyPass / http://ipofinternalserver:3343/


share|improve this question
Can you clarify "times out"? Does your browser display a timeout message, or do you get an error response for a proxy timeout from Apache? – Shane Madden Feb 1 '12 at 23:37
it says this web page is not available because ipofinternalserver took too long to respond – Diego Gutierrez Feb 1 '12 at 23:51
Sounds like you got redirected, then? Did the URL in your address bar change to be the internal server's address? – Shane Madden Feb 2 '12 at 0:03
Yes and even the correct port and URL but that error message comes up on the screen – Diego Gutierrez Feb 2 '12 at 0:23
Well, let me clarify; if the address bar has changed to the internal IP, then that's wrong. The client browser should talk only to the proxy, and never to the server behind it; if a redirect has sent you away from the proxy then that's a bad thing. Try adding a ProxyPassReverse / http://ipofinternalserver:3343/ right with your existing ProxyPass? – Shane Madden Feb 2 '12 at 1:15

you can try iptables redirect iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to -port 4443

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.