The Pound program is a reverse proxy, load balancer and HTTPS front-end for Web server(s). Pound was developed to enable distributing the load among several Web-servers and to allow for a convenient SSL wrapper for those Web servers that do not offer it natively.

learn more… | top users | synonyms

0
votes
1answer
18 views

Allow HTTPS only for specific domains with pound

quick question here: I have trafic from several domains routed to a Pound Reverse Proxy. I have a valid certificate for one of these domain that I want accessible over HTTPS (this part I managed to ...
2
votes
2answers
1k views

POODLE Ciphers !SSLv3 = Protocol or cipher suite mismatch

According to: ANNOUNCE: Pound - reverse proxy and load balancer - v2.7d / Robert Segall , following enhancement was added: - added "Disable PROTO" directives (fix for Poodle vulnerability) My ...
0
votes
1answer
18 views

Hot-spare using Pound

I currently have a server deployment in which Pound is being used as a reverse proxy (HTTPS -> HTTP) in front of a single server instance. I'd like to add a second instance on a different host that ...
2
votes
1answer
262 views

Varnish + Pound on Apache 503 Errors

I'm getting a lot of seemingly random 503 Service Unavailable errors on my Varnish + Pound setup on Apache. I have no idea where to start or what the problem is. I've searched the web a ton and all ...
0
votes
2answers
265 views

D-I-Y VPS Hosting for multiple domains (3) on a single static IP [closed]

and thanks for your input. What I want to do: I want to host some applications Web and email, for example, for myself and two clients on one static IP Address, primarily to learn, and possibly to ...
0
votes
1answer
419 views

Pound URL Redirect with negative pattern wouldn't match

I'm using Pound(8) - HTTP/HTTPS reverse-proxy and load-balancer. # rpm -q Pound Pound-2.6-2.el6.x86_64 # I'd like to be able to redirect certain URL patterns, a user hitting URL ...
1
vote
1answer
455 views

Lightweight reverse http proxy with websocket support

does there exist a lightweight (when I tried apache it ate several hundred megs of memory) reverse http proxy which supports websockets? I was so far using pound which does not support websockets but ...
1
vote
1answer
91 views

lighttpd behind pound gets “connection timed out” error when using browser other than Chrome

Please help me diagnose a problem. I had a working website (WordPress) for the last 6 months working just fine. No updates or new installations have been made in the server. Today users complain ...
2
votes
0answers
86 views

Pound sticky sessions between HTTP and HTTPS

I have pound setup for http and https, and have sticky sessions based on cookie for both. However, sessions are not sticky when jumping from http to https. Is there anyway to do this in Pound? It's ...
0
votes
0answers
87 views

Pound: address already in use

Below is the config that I use in pound for load-balancing a set of Tomcat. To get started I just used one tomcat instance. The URLs that I want pound to forward is of the type ...
0
votes
1answer
457 views

Trying to setup transparent, load balancing, SSL reverse proxy. Is it possible?

I've done a few weeks worth of research on this topic for a project, and unfortunately I'm a simple code monkey, my knowledge of networking and SSL are limited. Pretty much every search I've done so ...
0
votes
0answers
344 views

How to add Pound & Varnish to my SPDY/https-only LEMP stack?

So I got quite excited about installing Varnish, having read lots of good things. But then I discovered it doesn't work with https. Fair enough. It seems combining it with Pound is the solution: ...
0
votes
1answer
83 views

pound ssl offloading and haproxy balance source

I have pound in front of haproxy for ssl termination. haproxy has a frontend that balance with source algorithm. The problem is that the ssl connections from pound are balanced to the one server ...
3
votes
1answer
257 views

Is there a way to convert IPv6-style IPv4 addresses in X-Forwarded-For headers to IPv4-style?

I run a system that has a Pound reverse proxy in front of a squid accelerator, in turn in front of Apache2 powering a few PHP-based webapps. The Pound daemon is configured to send X-Forwarded-For ...
0
votes
1answer
931 views

Zen Load Balancer HTTPS to HTTPS

I've been struggling with an issue that I am hoping someone can help with. Basically, I have setup a working Zen Load Balancer going from HTTPS to HTTP but I am struggling with getting it to work ...
0
votes
1answer
253 views

Lotus Domino 8.5.3FP2 behind pound Reverse proxy: Wrong redirect

I have a problem with the following setup: A pound reverse proxy faces the internet with port 443. The pound reverse proxy is configured to redirect to the internal server The (internal) domino ...
1
vote
2answers
729 views

Pound, HAproxy and HAproxy logging

I'm trying to figure out one thing about HAproxy logging. Basically, we have Pound running in front of HAproxy on the same host doing SSL termination and then passing the requests to HAproxy. What I'm ...
0
votes
1answer
1k views

How to find and fix issue with Pound and HAProxy

Pound sits in front of HAProxy (on the same box) to perform SSL off-load. Requests are passed to 127.0.0.1:80 where HAProxy then balances the requests across backend servers for a hosted ASP .NET web ...
0
votes
1answer
237 views

Shibboleth + IIS and Pound Reverse Proxy

Having a bit of a problem getting Shibboleth (SSO) working with ADFS and Pound. The main problem seems to be that: The website address will be https://website.domain.com Pound will then terminate ...
0
votes
1answer
189 views

how to pass domain name to backend with pound

I am using pound as a way to decode SSL for the backend, but the bulk of the work is done on varnish (including virtualhost stuff). As a result, I need pound to just forward all other traffic to ...
2
votes
2answers
2k views

Pound Proxy with multiple SSL Certificates

After reading on the Pound website that SSL does not support virtual host names, this in fact seems quite strait forward and obvious to me now. I have a pound load-balancer I wish to terminate SSL ...
1
vote
0answers
197 views

Pound Ubuntu 12.04.1 - Private IP in apache logs. Should be Client's external IP. Help?

Have installed apsis Pound on Ubuntu Desktop 12.04.1. I am forwarding HTTP requests to an XServe (Snow Leopard Server) Apache instance, my problem is that I am getting local private IP addresses in ...
3
votes
0answers
1k views

OpenSSL SHA256 testing

I'm having an issue testing a hardened SSL configuration for pound. One of the requirements is for the inclusion of AES[128|256]-SHA256 ciphers, along with strict ordering of preference. I've ...
3
votes
1answer
567 views

How to forcast the spec of a Linux load balancer?

I would like to build a Linux load balancer with SSL off load with sticky sessions. I would like to do this with either Pound or Pound and HAProxy. I haven't done this before, and I have been wanting ...
1
vote
2answers
558 views

Tomcat/JIRA redirects to HTTP when accessed by HTTPS through a Pound proxy

I'm trying to get a JIRA install to work behind a Pound proxy that is doing SSL termination/"acceleration". Unfortunately it seems that JIRA (Coyote) is redirecting to HTTPS when accessed: ...
1
vote
1answer
442 views

Ubuntu 12.04 - Pound Reverse Proxy and Adobe Flex/Flash Auth

First time posting, I have a completely fresh install of ubuntu 12.04 Client as a reverse proxy gateway to our internal network. Our setup is we have one external ip but three domains we would like ...
0
votes
1answer
221 views

what reverse proxy server will direct traffic to healthy servers whose health is based on a result string

what reverse proxy server will direct traffic to healthy servers whose health is based on a result string?? ideally i'd like something like dnsmadeeasy or ultradns - lol - but for reverse proxy i ...
1
vote
2answers
5k views

Increasing `iptables` verbosity and determine logging location on a CentOS based server?

Having an odd problem here with regards to pound reverse proxy no longer directing traffic properly on a CentOS based distro (ClearOS 6.2.x). I believe that it's an iptables issue or something else ...
3
votes
4answers
2k views

Pound + HAProxy or Stunnel + HAProxy

I'm looking at introducing a loadbalancer to my existing site infrastructure to help with traffic growth and provide a level of failure protection. The site I am running uses SSL certificates for the ...
-1
votes
1answer
923 views

Tomcat 6 behind Pound reverse proxy

I'm trying to run Tomcat as standalone web server behind Pound. Pound is already used to terminate SSL connections for some other machines and so I'd thought it would also do it for the Tomcat server ...
1
vote
0answers
116 views

pound not proxying request

I configured pound like this: ListenHTTP Address 192.168.21.10 Port 1632 Service BackEnd Address 192.168.22.220 ...
0
votes
1answer
224 views

Equivalent for HAProxy's option forwardfor/close in Pound

I'm switching from HAProxy to Pound and I need to know if there is an equivalent of option forwardfor option httpclose in Pound. BTW, I'm already using the HeadRemove "X-Forwarded-For" in ...
2
votes
5answers
372 views

HTTPS load balancing based on some component of the URL

We have an existing application that we wish to split across multiple servers (for example: 1000 users total, 100 users split across 10 servers). Ideally, we'd like to be able relay the HTTPS ...
2
votes
2answers
2k views

Pound as alternative to mod_proxy

I want to switch from a apache ReverseProxy to pound. My problem is: There are rules in my proxy.conf like: ProxyPass /lalelu http://internale/NOT_Lalelu Now in pound I couldn´t figure out how to ...
2
votes
1answer
169 views

How do I expand from one server to multiple?

I work for a small business that has one web server. It's served us fine in the past but as we're getting bigger we need another server. How would I set up two servers to work together? I've read a ...
2
votes
1answer
960 views

How to force SSLv3 in pound HTTP Proxy

we are handling SSL with a pound 2.3 HTTP(S) proxy. Is there any way to force a client's Browser to use SSLv3? I couldn't find anything in the pound documentation ... Thanks for your insight! ...
0
votes
1answer
482 views

Wordpress 3 multi-site install

Trying to figure out if this is possible... My company has a cms product that was written in Java and we decided to use Wordpress to run blogs for our clients. Obviously, Wordpress does not run on ...
1
vote
5answers
3k views

pound: multiple domains

I've been using pound to run mydomain.dk. Now I've bought some other domains and SSL certificates that are mydomain.no, mydomain.se and mydomain.eu. My old config looked roughly like this: ...