Tag Info

Hot answers tagged

2

A silent proxy may be indistinguishable from NAT. But some may add headers, that allow to identify that request comes through proxy.


2

Nginx is very good at that. For instance: server { listen 80; server_name www.example.com location / { proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header Host $host; proxy_pass http://127.0.0.1:81; proxy_read_timeout 4m; } location ~ /\.ht { ...


1

By default, non-transparent proxy inserts "Via:" field to HTTP request header. Of course, this is configurable option that can be disabled, for example: http://www.squid-cache.org/Doc/config/via/ Transparent proxy tries to be invisible, so cannot be detected: "A 'transparent proxy' is a proxy that does not modify the request or response beyond what ...


1

Normally the proxy server does the resolving (at least for plain HTTP, although I'm not 100% sure about HTTPS) so you simply point your proxy to a customized DNS server. In Squid with the configuration directive dns_nameservers. The clients need to be explicitly configured to use the proxy. DNSmasq is relatively light weight DNS server that can use a ...


1

If you just need to force nginx to refresh cache, you could use proxy_cache_bypass. It will make nginx to fetch new data from backend and put them in cache.


1

To get the HTTP requests to redirect instead of proxying, you should do two things: Move your proxying config (SSLProxyEngine through ProxyPassReverse into the SSL virtual host in /etc/httpd/conf.d/ssl.conf, so that it'll only apply there Create an HTTP virtual host which will redirect - probably in a new .conf file in /etc/httpd/conf.d: <VirtualHost ...


1

You could set up a redirect on that subdomain to the correct address, for eg. if you use PHP you cold go: <?php header('Location: http://<youraddress>:<port>'); ?> but then that would actually change the address in the address bar, so if its a cosmetic thing for the URL its not the best option.


1

sshuttle works like an VPN but over SSH. Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling. https://github.com/apenwarr/sshuttle


1

Here's the full list you need:- via off forwarded_for off follow_x_forwarded_for deny all request_header_access X-Forwarded-For deny all header_access X_Forwarded_For deny all


1

Depending on your needs, you may want to decide between an http cache (like Squid), or actually storing binaries in a local repository server. Artifactory is an excellent repository server that can store binaries, or can be a cache for packages (like nuget, npm, gem, and so on). Depending on how you solve this problem also depends on the design of your ...


1

The auth_http does two main things: It authenticates users (including various options to effectively delay users on failed authentication). And it determines which backend to use (and which username and password to use in backend authentication, if at all). While in some cases authentication can be handled directly by a backend, it's not something always ...


1

Set up a zimbra mail server on any VPS provider you like. Configuration it's really easy. Filter connections to any other mail systems in your firewall.


1

No, these are not the same--you will need to use a trailing slash with a regex to match both, i.e. location ~ /product/? See this related answer for a more detailed response on how to match the entire URL.


1

These locations are different. First one will match /production for example, that might be not what you expected. So I prefer to use locations with trailing slash. Also, note that: If a location is defined by a prefix string that ends with the slash character, and requests are processed by one of proxy_pass, fastcgi_pass, uwsgi_pass, scgi_pass, or ...



Only top voted, non community-wiki answers of a minimum length are eligible