A reverse proxy is a type of proxy server that fetches resources from a specific defined set of servers for a client. It is used in cases when there is an advantage to not exposing the web server with the content directly whether it be for security reasons or because of a lack of available public IP ...

learn more… | top users | synonyms

103
votes
12answers
103k views

How to set up Nginx as a caching reverse proxy?

I heard recently that Nginx has added caching to its reverse proxy feature. I looked around but couldn't find much info about it. I want to set up Nginx as a caching reverse proxy in front of ...
34
votes
3answers
53k views

Can IIS be configure to forward request to another web server?

I have several web site set up on one IIS 6 server distinguished by Host Header. However, I wish to have one of the sites served by a Linux / Apache server on my network. Do I need to use a reverse ...
32
votes
3answers
18k views

What is the difference between Load Balancer and Reverse Proxy?

I'm not clear about the difference between Load Balancer and Reverse Proxy. They both seems having same behavior: distributing incoming requests to backend servers.
18
votes
6answers
6k views

What is a Reverse Proxy?

I know what a proxy is, but I'm not sure what a reverse proxy is. It seems to me that it's probably akin to a load balancer. Is that correct?
14
votes
1answer
3k views

Why is setting Nginx as a reverse proxy a good idea?

I have a Django site running on Gunicorn with a reverse proxy through Nginx. Isn't Nginx just an extra unnecessary overhead? How does adding that on top of Gunicorn help?
13
votes
5answers
6k views

Nginx vs Apache as reverse proxy, which one to choose

this kind of question maybe has been asked here but I couldn't find any that really match my question. Heard that nginx performance is quite impressive, but Apache has more docs, ...
13
votes
2answers
4k views

Varnish versus other reverse proxies

I'm working with an organisation that has deployed Varnish as a caching reverse proxy for all of their web traffic. Their traffic make up is a lot of customer-generated dynamic websites, with the ...
10
votes
6answers
3k views

What is a typical method to scale out a software load balancer?

I often see web app architectures with a SLB / reverse-proxy in front of a bunch of app servers. What happens when the number of connections to the SLB requires too many resources for a single SLB to ...
10
votes
1answer
15k views

Nginx reverse proxy + URL rewrite

Nginx is running on port 80, and I'm using it to reverse proxy URLs with path /foo to port 3200 this way: location /foo { proxy_pass http://localhost:3200; ...
9
votes
3answers
9k views

nginx real_ip_header and X-Forwarded-For seems wrong

The wikipedia description of the HTTP header X-Forwarded-For is: X-Forwarded-For: client1, proxy1, proxy2, ... The nginx documentation for the directive real_ip_header reads, in part: This ...
9
votes
3answers
9k views

How to rewrite the domain part of Set-Cookie in a nginx reverse proxy?

I have a simple nginx reverse proxy: server { server_name external.domain.com; location / { proxy_pass http://backend.int/; } } The problem is that Set-Cookie response headers contain ...
7
votes
6answers
5k views

Is there a name based virtual host SSH reverse proxy?

I've grown quite fond of HTTP reverse proxies in our development environment and found the DNS based virtual host reverse proxy quite useful. Having only one port (and the standard one) open on the ...
7
votes
2answers
5k views

When nginx is configured as reverse proxy, can it rewrite the host header to the downstream server like Apache's ProxyPreserveHost?

I can't seem to find the equivalent of Apache's ProxyPreserveHost http://httpd.apache.org/docs/2.0/mod/mod%5Fproxy.html#proxypreservehost option in nginx. This is required to reverse proxy to virtual ...
7
votes
1answer
5k views

Apache httpd error “proxy: ap_get_scoreboard_lb” with ProxyPass

I set up apache to proxy for tomcat but I am getting the following error when I target the page. I sometimes get a blank page or a 503: [Error] [Mon Dec 03 04:58:16 2012] [error] proxy: ...
7
votes
5answers
3k views

Which reverse-proxies support HTTP/1.1 ETag and If-None-Match headers?

I'm developing a caching system for an ecommerce platform that will use a reverse proxy for caching. I plan to handle invalidation by using proper HTTP/1.1 headers. That is, I will set an ETag on ...
7
votes
1answer
1k views

Solution for Reverse Proxying onto URLs that are not amenable to being relocated to a subdirectory

Short Story Gah! I wish the developers who did admin interfaces would expose a "webroot=/myAppAppearsHere" option, or make all links relative. Long Story I have an admin portal for a customer that ...
6
votes
4answers
9k views

Controlling Nginx proxy target using a cookie?

I'm trying to convert a reverse proxy using an interesting Apache mod_rewrite setup to use Nginx instead (due to external concerns we are moving from Apache to Nginx, and most everything works fine ...
6
votes
3answers
4k views

Mapping hudson to a subdomain through nginx proxying

I'm now trying to setup nginx as a reverse proxy for Hudson so it can be access on http://build.example.com directly. I've already installed Hudson on Tomcat and verified that I can access Hudson on ...
6
votes
4answers
5k views

Configure IIS 7 Reverse Proxy to connect to TeamCity Tomcat

We have an IIS 7 webserver configured and would like to create a reverse proxy for a TeamCity installation using Tomcat on the same machine. The IIS server site is https://somesite and I would like ...
6
votes
3answers
3k views

Tools for introspecting Varnish

Has anyone developed, or does anyone know of, any third-party tools (or non-obvious uses of the stock tools) to help a poor systems administrator determine what's going on with requests that are ...
6
votes
2answers
1k views

Apache mod_substitute on HTTP requests to reverse-proxied host

I have the following setup: Printer #1 on LAN Printer #2 on LAN Internet facing Debian Apache 2.2 web server at server-external-ip that I want to use as an IPP gateway to the two printers The two ...
6
votes
2answers
2k views

Nginx infinite redirect loop

Why is http://compassionpit.com/blog/ going through an infinite redirect loop? Here's my nginx conf file. The site is run by a nodejs server on port 8000 and Apache serves up the blog (wordpress) ...
6
votes
1answer
155 views

RFC 2616 with Apache 2.4

I'm using Apache 2.4.3 as a reverse proxy due to it's advertised compliance with RFC 2616. My app uses headers like this to enable caching at the proxy: Cache-Control: public, s-maxage=0 Expires: ... ...
5
votes
5answers
11k views

Will a reverse proxy in front of web server improve security?

Third-party security professional is recommending we run a reverse proxy in front of the web server (all hosted in the DMZ) as a best practice security measure. I know this is a typical recommended ...
5
votes
4answers
4k views

What are the Differences between HAProxy and Ngnix in reverse proxy mode?

What are the differences between HAProxy and Nginx when it comes to their abilities as a reverse proxy?
5
votes
1answer
4k views

Can nginx listen on port 80, but send upstream to backend using SSL on 443?

For PCI compliance, my application is forced to use a secure/encrypted connection between the reverse proxy server and backend app server, whereas the connection coming into the reverse proxy is on ...
5
votes
2answers
2k views

Does it make sense to reverse proxy Node.js through Apache?

Perfomancewise, does it make sense to redirect requests from an Apache VirtualHost to a Node.js instance? Does proxying counterbalance the awesome Node.js performance? FYI: I also need a couple of ...
5
votes
2answers
8k views

Varnish configuration to only cache for non-logged in users

I have a Ruby on Rails application fronted by varnish+nginx. As most of the sites content is static unless you are a logged in user, I want to cache the site heavily with varnish when a user is logged ...
5
votes
1answer
530 views

Azure VM with many IPs or SSL certificates

I am looking to move our hosting environment to Azure and by doing so have created a sandpit VM to figure things out. We host around 300-400 websites in IIS and about 2% of these sites have unique, ...
5
votes
2answers
5k views

Apache virtual hosts and reverse proxy

I have many virtual hosts whose domain names map to a single Apache server (let's call it server1). Under certain circumstances, all URLs for a certain virtual host should be served by a different ...
5
votes
4answers
2k views

Can nginx be an mail proxy for a backend server that does not accept cleartext logins?

Can Nginx be an mail proxy for a backend server that does not accept cleartext logins? Preferably I'd like to know what directive to include so that it will invoke STARTTLS/STLS, but communication ...
5
votes
1answer
4k views

Reverse proxy for a subdirectory in nginx

I want to set up a Reverse proxy on my VPS for my Heroku app (http://lovemaple.heroku.com) So if I visit mysite.com/blog I can get the content in http://lovemaple.heroku.com I followed the ...
5
votes
2answers
3k views

I need a reverse proxy solution for SSH

Hi here is a situation I have a server in a corporate data center for a project. I have an SSH access to this machine at port 22.There are some virtual machines running on this server and then at the ...
5
votes
1answer
754 views

Is it possible to use one haproxy process to load-balance more than one protocol/port?

I've got haproxy to work for us. But right now there are two haproxy processes running. One for HTTP and the other for TCP (RTMP). I've tried to configure both proxies in one configuration file but ...
5
votes
9answers
3k views

Forwarding HTTP Request with Direct Server Return

I have servers spread across several data centers, each storing different files. I want users to be able to access the files on all servers through a single domain and have the individual servers ...
5
votes
2answers
265 views

IIS sets http header Expires to -1, how do I override this with mod_expires

I'm using an IIS website with a Apache HTTP reverse proxy (mod_proxy with ProxyRequests Off). I want to control the expires headers in apache (don't ask), but IIS is setting the header Expires: -1. ...
5
votes
0answers
723 views

nginx redirects back to remote_addr IP

I am trying to setup nginx 1.0.12 as a proxy for apache 2.2.15, but faced a strange problem. And I cannot solve it for third day in a row. I have test site c-craft.info and have installed roundcube in ...
4
votes
5answers
3k views

How do I smoothly migrate a web server's DNS from one IP address to another?

I currently have a domain name registered for a Linux/Apache server that I am going to replace with another on a new IP address. Migrating the data will be relatively quick and a 5 minute disruption ...
4
votes
7answers
4k views

Why would I use Squid?

I have Googled, searched StackOverflow and here. Still I can not fully understand what or why someone would use Squid. All I can find out so far is that it is some sort of cache that can make it less ...
4
votes
3answers
5k views

How do I avoid “already used by another worker” warning in an Apache2 reverse proxy config?

I added server matching ProxyPass and ProxyPassReverse entries, but I was getting "already used by another worker" [warn] messages upon start up. I have a proposed solution that's good enough for ...
4
votes
1answer
4k views

An upstream response is buffered to a temporary file

I have a rather large and slow (complex data, complex frontend) web application build in RoR and served by Puma with nginx as reverse proxy. Looking at the nginx error log I see quite a few entries ...
4
votes
2answers
3k views

How to handle relative urls correctly with a reverse proxy

I have a reverse proxy setup as follows in Apache: Server A with address www.example.com/folder is the reverse proxy server. It maps to: Server B with address test.madeupurl.com This kind of ...
4
votes
6answers
488 views

3million users per month on a very active cart that needs SSL. What cost effective Load balancing options for SSL acceleration are there? [closed]

A lot of the expensive 12-25k solutions seem limited to 4k SSL connections simultaneously. Loadbalancer.org has a reasonably priced solution for many HTTP requests, but is limited to 2k SSL ...
4
votes
4answers
7k views

How can I debug nginx further than the error log?

I'm currently receiving a fairly large HTTP flood right now, and it's causing my nginx reverse proxy to produce a 502 Bad Gateway. I have a frontend server running nginx as a proxy to my backend ...
4
votes
2answers
139 views

Why bother reverse proxying applications if you aren't using mod_security or TMG/UAG?

Common wisdom is that internal applications that live inside of the trusted network, such as Exchange, should be reverse proxies whenever they are exposed to the Internet. Microsoft recommends using ...
4
votes
1answer
2k views

ProxyPass entire domain to Tomcat, including root

I have configured my VirtualHost example.com to proxy all requests to a Tomcat server ProxyPass / http://localhost:8088/app ProxyPassReverse / http://localhost:8088/app This works fine for URLs ...
4
votes
2answers
4k views

Nginx Config: Front-End Reverse Proxy to Another Port

I have a small web server that serves requests on port 5010 rather than 80. I would like to use nginx as a front end proxy to receive requests on port 80 and then let those requests be handle by port ...
4
votes
1answer
51 views

Reverse proxy Outlook

We use a reverse proxy for our Outlook Web Access. Somebody once told me that a you better never use this reverse proxy from inside the company, because is would not be secure (in fact, you go ...
4
votes
3answers
529 views

What port should I use for my reverse proxy to Apache 2 from nginx?

I have nginx setup as the defacto port 80. I want to setup django+mod_wsgi on Apache2. I'm worried if I leave Apache2 as 80 it will cause a conflict. Is it better to avoid the headache and change ...
4
votes
4answers
4k views

SSH Tunnel for Remote Desktop via Intermediary Server Part II

I asked previously how to configure 2 SSH tunnels using an intermediary server in order to run Remote Desktop through them and I managed to make it work. Now, I'm trying to do the same, using the same ...