Hot answers tagged http
3
The source port is randomly selected by the OS from the range 1024-65535.
443 is the well known port for HTTP over SSL/TLS (but as with HTTP you can do that on any port; the client just needs to know and address it explicitly).
(I am not familiar with proxies.) There are several common ports for proxies, e.g. 3128 and 8080.
Netfilter changes the headers ...
3
What they're telling you is that if you choose to have the SSL end point on your end be in the load balancer (rather than a server that the load balancer routes to) then you should be aware that regardless of how safe the data was on the way to the load balancer than once it leaves the load balancer it is in the clear. In a private data center it is not ...
3
No, you don't want to do this.
Instead, pick your favorite web server (I prefer nginx), and use that to proxy requests from port 80 to wherever glassfish is listening.
The config bits for doing this are very simple, and you'll end up with a far more secure and more manageable system.
1
As you have commented out the listen directive nginx will fall back to it's default behaviour which is to listen on port 80 as it says in the comment after the ##.
To have nginx listen elsewhere you need to tell it to do that using a listen directive e.g.
listen 8080;
or
listen 192.168.2.3:8080;
1
The rackspace doc you mention is a little unclear, but I believe the intent is this:
You want sensitive information using SSL as much as possible. (all the way from the client to your database)
If you enable SSL termination at the load balancer tier, the security stops there. (sensitive data would be transmitted in plaintext between your loadbalancer tier ...
1
Please be more specific about what you're trying to do. The WAF is a feature that protects internal web servers. As such, you MUST set it up correctly in order to gain access to your internal server. This usually requires that you do the following:
(optional) Add a new IP address to your external NIC to accept connections for the internal web servers
Setup ...
Only top voted, non community-wiki answers of a minimum length are eligible
