0

I have a private network with many servers and web based services running on it. There is no application level authentication. I would like to expose many of the servers to the internet, but I want to proxy it behind nginx with nginx providing authentication. HttpAuthBasicModule is not sufficient, I would like to use scrypt for password digests, rate limit logins, and log the login attempts.

I am formidable with Python, but I am lost with C. Any advise?

2
  • 1
    Advice: Instead of getting stuck on the idea of using a certain tool, decide what you actually need to do, then find (or create, if necessary) the right tool to accomplish what you want. Jul 20, 2012 at 0:32
  • Good observation, I'll try implementing it with twisted. Jul 20, 2012 at 2:43

1 Answer 1

2

Probably, the http_auth_request module is suitable for your task. Repo. Docs.

For rate limiting login attempts you can easily utilize nginx limit req module. For custom log: nginx log module. All these modules would be suitable for you in combination with the location directive.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .