Tag Info

New answers tagged

0

You need some type of service discovery for nginx to be able to "find" the containers running on the nodes. You could write a record into etcd when container starts and remove on exit and have nginx check those. For moving services around, you could take a look at fleet for simple scheduling.


0

Nginx is good enough for cache responses from S3, it also supports cache invalidation on demand, for example: curl -I 'https://domain/s3/file.jpg' -H 'Cache-Purge: 1' In case of caching proxy Nginx doesn't do subsequent HTTP request to S3 if the response is on disk already (file name based on proxy directory + md5 of response). See the full config there: ...


0

Sure you can put webservers behind a load-balancer. You can also use GSS (or something like this) to resolve the wpad http address to the "working" one


0

you can proxy by using the rtmp module in the dmz and adding applications with the same name as another rtmp server application myVideos { live on; pull rtmp://<ip address>/myVideos; }


1

Yes, you could perfectly create a Compute Engine instance to act as the proxy. The only caution you should take is to use a static IP for that instance (instead of a temporary IP), so that if the instance gets rebooted, the IP wouldn't change from the one you authorized in your Cloud SQL instance.


1

You will need to add local host to the localnet definition. acl localnet src 127.0.0.1 # localhost acl localnet src ::1 # IPv6 localhost Using a firewall to force transparent proxy access on localhost will require some additional parameters to ignore traffic from squid.


0

If you are running the ssh session within the user account (using program such as putty.exe), when you try to login via rdp, it will disrupt that connection causing the rdp session to break. What you need to do is run the ssh tunnel as a service which won't be interrupted.


1

I ran into the same black screen + disconnect problem myself today, using putty as my client. I did find a solution eventually. I switched from putty to bitvise tunnelier, and setup a S2C connection with the following settings: listen if:0.0.0.0 listen port:13389 destination host:localhost dest port:3389 As chance would have it, I'm using bitvise ssh ...


1

Apparently, this is what you are looking for: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ssl_certificate Available since version 1.7.8. location / { ... proxy_pass the_other_nginx; proxy_ssl_certificate the_certificate.pem; ... }


0

Given the layout provided, no, the Cisco ASA/IPS can't detect any Internet-based attacks on the Fortigate because it can't see the traffic on that interface. That said, gowenfawr is right about the IPS seeing bi-directional traffic, though only on interfaces connected to the IPS. Depending on an number of factors, you could mirror the Fortigate <-> ...


0

After digging in further I decided to use back to back instances of pound. I also considered using stunnel or haproxy, but pound deals with the SSL stuff and has a basic capacity for manipulating http headers.


1

It is a usual case, you have a proxy with SSL termination, the connection between the client and the proxy is SSL encrypted. At the proxy, the traffic is being decrypted and forwarded to the real server(s) on the local/trusted network. All can be done with the internal Apache mods, i.e. mod_ssl.


0

Of course, just add two port lines like : http_port 3128 http_port 3130 transparent And of course, the transparent will not be authenticated, as it is not possible


0

Squid-in-the-middle decryption and encryption of straight CONNECT and transparently redirected SSL traffic, using configurable CA certificates. http://wiki.squid-cache.org/Features/SslPeekAndSplice


1

Order is important. Put the allow line before the deny. Also url_regex matches one the whole URL including http:// so you need to change your regexes. Remember to restart or reload squid after changes.


1

Nginx configured as a reverse proxy can do this easily : http { upstream remoteserver { # here you add your remote server's IPs or hostnames server 54.175.222.246; # for example here we use HTTPBin's address keepalive 10; # maintain a maximum of 10 open connections } server { listen 80; location / { proxy_set_header X-Forwarded-For ...


0

You might want to write a php script that would be launched from command-line and would demonize, open a curl handle and would reuse it for every subsequent request therefore using the keep-alive feature. This script should provide an API using messaging queues (check out beanstalkd / rabbitmq). As soon there's a new message in the queue, the script should ...


2

This website is using SSL Client certificates for authentication. The dialog box is asking you to specify which certificate you'd like to authenticate with.


0

Ok, that was now really hard work. ;-) I could found the solution here https://github.com/tmatilai/vagrant-proxyconf/issues/109. Modifying the Vagrant no proxy variable to: config.proxy.no_proxy = "localhost,127.0.0.1,/var/run/docker.sock solves the problem.


0

Solved it! Just used server { listen 80; server_name www.colscript.mx colscript.mx; location / { proxy_pass http://localhost:3000; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; proxy_set_header Host $host; ...


0

To solve this issue I've set the following env: #PROXY_URL=http://proxy_usr:proxy_pwd@localhost:3128 PROXY_URL=http://localhost:3128 export HTTP_PROXY=$PROXY_URL export http_proxy=$PROXY_URL export HTTPS_PROXY=$PROXY_URL export https_proxy=$PROXY_URL export FTP_PROXY=$PROXY_URL export ftp_proxy=$PROXY_URL export ...


1

Six year later I came to this question and almost let it down based on the accepted answer. As of today, it is not complicated, using policy routing. All the details are available on this same site, at http://serverfault.com/a/389004/70774. In my case, I had first to make sure that the vpn was not the default route. How you will achieve that depends on what ...


0

I agree with answers above, since Apple is using strong encryption, it's probably not easy to do what you said using 3rd party applications. BUT Apple has it's own solution for that, OS X Server, it has a function called Caching server: https://www.apple.com/osx/server/features/#caching-server Caching Server speeds up the download and delivery of ...


3

This is a classic case of trying to use technology to enforce a process or business practice and doing such things often leads to unintended results. I'd find some other "incentive" to "encourage" them to do these things before forcing it down their throats with technology.


1

You could use GPO to force the browsers to use a specific web proxy and then install a forward web proxy such as apache on a new server and put the functionality you need into the proxy itself. Clever users may be able to work out ways to bypass the proxy e.g. by using browsers that dont look at GPO settings but you could always block outbound HTTP and ...


0

The simple answer is just to edit your local hosts file, e.g. /etc/hosts on Linux or OS X, or C:\Windows\System32\drivers\etc\hosts on a typical Windows box. If you want something that's more production-level than a quick fix for development, then what you need is a reverse proxy like nginx or haproxy, and have it automatically configured by the ...


1

It depends on how the users are using the workstations in question--are they supposed to be saving files, or are these generic workstations? Is the problem that you don't want them listening to music, or that they're downloading viruses with their music? (I also don't know your budget.) Depending on this, I'd probably use multiple approaches. Proxy ...


3

The typical technical approach is to install a HTTP proxy server where you implement your download restrictions/policies. Then you can use a GPO to enforce that the proxy server gets used (assuming that your computers are all AD domain members) and as the next phase you block direct internet access at your gateway/firewall. Normally you precede the ...


0

Squid is a HTTP proxy (usually operated as a Forward Proxy). It does support FTP also. It does not support POP3 and SMTP. You should look at something like HAProxy if you want a Reverse Proxy for protocols other than HTTP.


0

I believe that first thing you should do is to stress your proxy to determine its maximum throughput and see if there are any issues like segfaults, memory leaks, how does it scale (if it does), etc. In order to put it under the load you'll need a load testing tool. The best free and open-source options as for now are: Grinder Gatling Tsung Apache ...



Top 50 recent answers are included