A reverse proxy is a type of proxy server that fetches resources from a specific defined set of servers for a client. It is used in cases when there is an advantage to not exposing the web server with the content directly whether it be for security reasons or because of a lack of available public IP ...

learn more… | top users | synonyms

100
votes
12answers
95k views

How to set up Nginx as a caching reverse proxy?

I heard recently that Nginx has added caching to its reverse proxy feature. I looked around but couldn't find much info about it. I want to set up Nginx as a caching reverse proxy in front of ...
29
votes
3answers
44k views

Can IIS be configure to forward request to another web server?

I have several web site set up on one IIS 6 server distinguished by Host Header. However, I wish to have one of the sites served by a Linux / Apache server on my network. Do I need to use a reverse ...
25
votes
3answers
14k views

What is the difference between Load Balancer and Reverse Proxy?

I'm not clear about the difference between Load Balancer and Reverse Proxy. They both seems having same behavior: distributing incoming requests to backend servers.
18
votes
6answers
5k views

What is a Reverse Proxy?

I know what a proxy is, but I'm not sure what a reverse proxy is. It seems to me that it's probably akin to a load balancer. Is that correct?
13
votes
5answers
5k views

Nginx vs Apache as reverse proxy, which one to choose

this kind of question maybe has been asked here but I couldn't find any that really match my question. Heard that nginx performance is quite impressive, but Apache has more docs, ...
13
votes
2answers
4k views

Varnish versus other reverse proxies

I'm working with an organisation that has deployed Varnish as a caching reverse proxy for all of their web traffic. Their traffic make up is a lot of customer-generated dynamic websites, with the ...
12
votes
1answer
2k views

Why is setting Nginx as a reverse proxy a good idea?

I have a Django site running on Gunicorn with a reverse proxy through Nginx. Isn't Nginx just an extra unnecessary overhead? How does adding that on top of Gunicorn help?
8
votes
6answers
3k views

What is a typical method to scale out a software load balancer?

I often see web app architectures with a SLB / reverse-proxy in front of a bunch of app servers. What happens when the number of connections to the SLB requires too many resources for a single SLB to ...
7
votes
2answers
4k views

When nginx is configured as reverse proxy, can it rewrite the host header to the downstream server like Apache's ProxyPreserveHost?

I can't seem to find the equivalent of Apache's ProxyPreserveHost http://httpd.apache.org/docs/2.0/mod/mod%5Fproxy.html#proxypreservehost option in nginx. This is required to reverse proxy to virtual ...
7
votes
5answers
3k views

Which reverse-proxies support HTTP/1.1 ETag and If-None-Match headers?

I'm developing a caching system for an ecommerce platform that will use a reverse proxy for caching. I plan to handle invalidation by using proper HTTP/1.1 headers. That is, I will set an ETag on ...
7
votes
1answer
1k views

Solution for Reverse Proxying onto URLs that are not amenable to being relocated to a subdirectory

Short Story Gah! I wish the developers who did admin interfaces would expose a "webroot=/myAppAppearsHere" option, or make all links relative. Long Story I have an admin portal for a customer that ...
6
votes
3answers
6k views

nginx real_ip_header and X-Forwarded-For seems wrong

The wikipedia description of the HTTP header X-Forwarded-For is: X-Forwarded-For: client1, proxy1, proxy2, ... The nginx documentation for the directive real_ip_header reads, in part: This ...
6
votes
3answers
6k views

How to rewrite the domain part of Set-Cookie in a nginx reverse proxy?

I have a simple nginx reverse proxy: server { server_name external.domain.com; location / { proxy_pass http://backend.int/; } } The problem is that Set-Cookie response headers contain ...
6
votes
4answers
7k views

Controlling Nginx proxy target using a cookie?

I'm trying to convert a reverse proxy using an interesting Apache mod_rewrite setup to use Nginx instead (due to external concerns we are moving from Apache to Nginx, and most everything works fine ...
6
votes
1answer
9k views

Nginx reverse proxy + URL rewrite

Nginx is running on port 80, and I'm using it to reverse proxy URLs with path /foo to port 3200 this way: location /foo { proxy_pass http://localhost:3200; ...
6
votes
3answers
3k views

Mapping hudson to a subdomain through nginx proxying

I'm now trying to setup nginx as a reverse proxy for Hudson so it can be access on http://build.example.com directly. I've already installed Hudson on Tomcat and verified that I can access Hudson on ...
6
votes
2answers
866 views

Apache mod_substitute on HTTP requests to reverse-proxied host

I have the following setup: Printer #1 on LAN Printer #2 on LAN Internet facing Debian Apache 2.2 web server at server-external-ip that I want to use as an IPP gateway to the two printers The two ...
6
votes
4answers
4k views

Configure IIS 7 Reverse Proxy to connect to TeamCity Tomcat

We have an IIS 7 webserver configured and would like to create a reverse proxy for a TeamCity installation using Tomcat on the same machine. The IIS server site is https://somesite and I would like ...
6
votes
2answers
2k views

Nginx infinite redirect loop

Why is http://compassionpit.com/blog/ going through an infinite redirect loop? Here's my nginx conf file. The site is run by a nodejs server on port 8000 and Apache serves up the blog (wordpress) ...
6
votes
1answer
131 views

RFC 2616 with Apache 2.4

I'm using Apache 2.4.3 as a reverse proxy due to it's advertised compliance with RFC 2616. My app uses headers like this to enable caching at the proxy: Cache-Control: public, s-maxage=0 Expires: ... ...
5
votes
5answers
10k views

Will a reverse proxy in front of web server improve security?

Third-party security professional is recommending we run a reverse proxy in front of the web server (all hosted in the DMZ) as a best practice security measure. I know this is a typical recommended ...
5
votes
5answers
4k views

Is there a name based virtual host SSH reverse proxy?

I've grown quite fond of HTTP reverse proxies in our development environment and found the DNS based virtual host reverse proxy quite useful. Having only one port (and the standard one) open on the ...
5
votes
2answers
2k views

Does it make sense to reverse proxy Node.js through Apache?

Perfomancewise, does it make sense to redirect requests from an Apache VirtualHost to a Node.js instance? Does proxying counterbalance the awesome Node.js performance? FYI: I also need a couple of ...
5
votes
2answers
8k views

Varnish configuration to only cache for non-logged in users

I have a Ruby on Rails application fronted by varnish+nginx. As most of the sites content is static unless you are a logged in user, I want to cache the site heavily with varnish when a user is logged ...
5
votes
3answers
3k views

Tools for introspecting Varnish

Has anyone developed, or does anyone know of, any third-party tools (or non-obvious uses of the stock tools) to help a poor systems administrator determine what's going on with requests that are ...
5
votes
1answer
4k views

Apache httpd error “proxy: ap_get_scoreboard_lb” with ProxyPass

I set up apache to proxy for tomcat but I am getting the following error when I target the page. I sometimes get a blank page or a 503: [Error] [Mon Dec 03 04:58:16 2012] [error] proxy: ...
5
votes
2answers
5k views

Apache virtual hosts and reverse proxy

I have many virtual hosts whose domain names map to a single Apache server (let's call it server1). Under certain circumstances, all URLs for a certain virtual host should be served by a different ...
5
votes
2answers
2k views

I need a reverse proxy solution for SSH

Hi here is a situation I have a server in a corporate data center for a project. I have an SSH access to this machine at port 22.There are some virtual machines running on this server and then at the ...
5
votes
1answer
645 views

Is it possible to use one haproxy process to load-balance more than one protocol/port?

I've got haproxy to work for us. But right now there are two haproxy processes running. One for HTTP and the other for TCP (RTMP). I've tried to configure both proxies in one configuration file but ...
5
votes
9answers
2k views

Forwarding HTTP Request with Direct Server Return

I have servers spread across several data centers, each storing different files. I want users to be able to access the files on all servers through a single domain and have the individual servers ...
5
votes
2answers
210 views

IIS sets http header Expires to -1, how do I override this with mod_expires

I'm using an IIS website with a Apache HTTP reverse proxy (mod_proxy with ProxyRequests Off). I want to control the expires headers in apache (don't ask), but IIS is setting the header Expires: -1. ...
4
votes
4answers
3k views

What are the Differences between HAProxy and Ngnix in reverse proxy mode?

What are the differences between HAProxy and Nginx when it comes to their abilities as a reverse proxy?
4
votes
7answers
3k views

Why would I use Squid?

I have Googled, searched StackOverflow and here. Still I can not fully understand what or why someone would use Squid. All I can find out so far is that it is some sort of cache that can make it less ...
4
votes
3answers
4k views

How do I avoid “already used by another worker” warning in an Apache2 reverse proxy config?

I added server matching ProxyPass and ProxyPassReverse entries, but I was getting "already used by another worker" [warn] messages upon start up. I have a proposed solution that's good enough for ...
4
votes
2answers
82 views

Why bother reverse proxying applications if you aren't using mod_security or TMG/UAG?

Common wisdom is that internal applications that live inside of the trusted network, such as Exchange, should be reverse proxies whenever they are exposed to the Internet. Microsoft recommends using ...
4
votes
4answers
4k views

How can I debug nginx further than the error log?

I'm currently receiving a fairly large HTTP flood right now, and it's causing my nginx reverse proxy to produce a 502 Bad Gateway. I have a frontend server running nginx as a proxy to my backend ...
4
votes
1answer
397 views

Azure VM with many IPs or SSL certificates

I am looking to move our hosting environment to Azure and by doing so have created a sandpit VM to figure things out. We host around 300-400 websites in IIS and about 2% of these sites have unique, ...
4
votes
1answer
2k views

ProxyPass entire domain to Tomcat, including root

I have configured my VirtualHost example.com to proxy all requests to a Tomcat server ProxyPass / http://localhost:8088/app ProxyPassReverse / http://localhost:8088/app This works fine for URLs ...
4
votes
2answers
3k views

Nginx Config: Front-End Reverse Proxy to Another Port

I have a small web server that serves requests on port 5010 rather than 80. I would like to use nginx as a front end proxy to receive requests on port 80 and then let those requests be handle by port ...
4
votes
1answer
51 views

Reverse proxy Outlook

We use a reverse proxy for our Outlook Web Access. Somebody once told me that a you better never use this reverse proxy from inside the company, because is would not be secure (in fact, you go ...
4
votes
3answers
510 views

What port should I use for my reverse proxy to Apache 2 from nginx?

I have nginx setup as the defacto port 80. I want to setup django+mod_wsgi on Apache2. I'm worried if I leave Apache2 as 80 it will cause a conflict. Is it better to avoid the headache and change ...
4
votes
2answers
1k views

Forward differing hostnames to different internal IPs through NAT router

I have one public IP address, one router and multiple servers behind the router. I would like to forward differing domains (All using HTTP) through the router to different servers. For example: ...
4
votes
1answer
679 views

Apache 2.2 disable reverse proxy on location

I'm running Apache 2.2 on FreeBSD. As of late I've been looking at Cherokee + uWSGI for some Django/Python. I want to keep Apache 2.2 at the front (port 80 replies) and proxy connections to my ...
4
votes
2answers
1k views

Exposing IMAP server to Internet: DMZ or Port Forwarding?

We currently have all our email stored on a Dovecot IMAP server in our internal network. Client machines on the network are able to connect and access their email. Now we want to allow certain users ...
4
votes
1answer
410 views

Nginx as reverse proxy for Google App Engine application

I want to use nginx as a reverse proxy for Google App Engine application to support naked domain as described here. If I use this scheme, will all the traffic go through the server that hosts nginx or ...
4
votes
2answers
2k views

how to use nginx as a caching reverse proxy to replace squid/varnish

the following is our current setup on the apps but we would like to add nginx as a reverse proxy cache much like squid or varnish is it possible to edit this config to enable that caching behavior or ...
4
votes
2answers
1k views

How can I use Glassfish under Linux as a reverse-proxy?

Question says it all. I would like to use SUN Glassfish 2.0x server as a reverse-proxy server, so that when someone hits this server, he/she is transparently redirected to an internal web site, which ...
4
votes
1answer
94 views

Preserve response headers in NGINX load balancer

I have set up NGINX as a load balancer for two Domino servers this way: http { upstream www.mydomain.com { server 1.1.1.1; server 2.2.2.2 backup; } server { listen ...
4
votes
3answers
294 views

How do I create a custom header from an existing SSL environment variable?

OK I have spent all day on this-- I'm using apache with mod_ssl I'm trying to take an existing environment header, "%{SSL_CLIENT_S_DN_CN}s" which looks like "Lastname Firstname Mi username" and set a ...
4
votes
1answer
775 views

Squid proxy not caching anything

squid.conf: http_access allow all # Squid normally listens to port 3128 http_port 3128 accel defaultsite=localhost no-vhost cache_peer localhost parent 80 0 no-query originserver name=myAccel ...