Hot answers tagged

4 votes

NginX: Serve application under sub path

Generally running the app under an URI prefix when the app itself does not expect it is a tricky thing, and the only reliable solution would be to fix/setup the app making it generate all the assets/...
  • 2,606
3 votes

Can I acess a web server located in another subnet?

Yes, you just need a router. Routing traffic between subnets is literally what routers are for.
  • 2,622
1 vote

port forwarding using proxy ip

Depending on what you need to actually port forward, you could make a dynamic reverse port forward with ssh. If you only need to proxy port 22 : ssh -R 22:0.0.0.0:2222 user@remote_server You can then ...
1 vote
Accepted

port forwarding using proxy ip

To reach out a machine behind NAT/firewall/whatever you don't need anything except for that machine being able to make an outbound connection to the public network and ssh access to an instance in the ...
  • 2,019
1 vote
Accepted

Email proxy architecture

Server side incoming mail anti-spam filtering [milter] Standard recommendation for incoming mail anti-spam filtering requires in SMTP sessions filtering. Messages "classified as spam" are ...
  • 6,033
1 vote

nginx proxy to apache in local enviroment avoid error 504

It's worth checking the error logs for both Nginx and PHP-FPM to see if any specific errors are being logged that may help to identify the issue. The issue may be with your Nginx configuration. You ...
  • 106
1 vote
Accepted

How to configure a system wide proxy for php file_get_contents on CentOS?

file_get_contents requires manual context setup, either as shown, or by calling stream_context_set_default with proxy settings. However, many PHP applications use libcurl, which makes use of common ...
1 vote
Accepted

How many client PCs can access interent via a proxy which has only one public IPv4 address?

It is hard to have a complete answer for this question because it is not quite correct, or else not enough information given. We can estimate how many connections could be translated. How this ...
1 vote

How many client PCs can access interent via a proxy which has only one public IPv4 address?

If you are doing Port Address Translation it'll depend on how many (TCP/UDP) ports you have and how many each machine will use at one time and how long those ports are in use. Realistically 10s to ...
  • 4,235
1 vote

Failing to proxy arbitrary URLs with NGINX

nginx matches only the path part of URL in location directive. Therefore location ~ /proxy/\?url=(.*)$ { does not match anything, since you are trying to match the query string. You need to work with ...
1 vote

My server is attacking other servers

Attack is relative, can they quantify what the "attack" is? Sending errant packets does not constitute an attack. The packet count and payload size is consistent. Since you own the server ...
  • 415
1 vote
Accepted

What is the iptables equivalent to what socat does?

Something like the following: iptables -t nat -A PREROUTING -p tcp --dport 8080 -j DNAT --to-destination some-random-host-in-another-network.com:80 iptables -t nat -A POSTROUTING -d some-random-host-...
1 vote
Accepted

Pods on a k8s node are unaccessible, kube-proxy or CNI failed

I solved this problem following these procedure: Worker4 Make sure kubelet is listening on default port: # lsof -i:10250 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME kubelet 819 root 26u ...
1 vote
Accepted

mitmproxy as a chain proxy, without SSL decryption

As it turned out, you can append --allow-hosts 127\.0\.0\.1:443 for example, which will instruct mitm to only decrypt traffic to the specified addressed, thus ignoring decryption for other hosts
  • 313
1 vote
Accepted

How can I run TLS on Apache2 Proxy behind port forwarding

Did the server behind the proxy have to get an SSL certificate too? If the server behind the proxy should be accessed by Apache using HTTPS (i.e. with a https:// URL, then it needs a certificate. But ...
1 vote

Squid config for minimal setup to connect to bitbucket

Have you checked the logs to see if there is anything relevant: /var/log/squid/ Bitbucket is based on java and it's a pain in the ass to get a reverse proxy running for it, even nginx or apache in my ...
  • 458
1 vote

Please help, trying to set dynamic reverse nginx proxy but it fails

You need to send valid Host HTTP header with your request. You'll need to split the rest of your URI in two parts and use the first one to set it using proxy_set_header directive. Check this answer to ...
  • 2,606
1 vote

Docker can't pull images behind proxy server

Environment="HTTP_PROXY=http://10.330.100.100:3128/" Environment="HTTPS_PROXY=https://10.330.100.100:3128/" ^ ^^^^ Here you configure ...
  • 1,177
1 vote

haproxy SSL/TLS Passthrough Proxy not working?

Since you pass the connection through to Gmail, the client also gets the Gmail certificate, which obviously is only valid for the Gmail host. The certificate must contain the hostname you are ...
1 vote

Charles works as proxy but doesn't record http requests

In my case this was because I had a VPN opened. Once I closed the VPN, CharlesProxy started to record my requests.
1 vote
Accepted

Caching Chromebooks updates: on premise caching from non proxy-configured client?

Thanks to Jordan Dalley, who tweaked an Nginx LanCache configuration, "on premises caching or micro-CDN solution for Microsoft, Google and Adobe products" we are now using a tiny CentOS ...
  • 253
1 vote

Authenticating SMTP Proxy

Is anyone aware of  a solution which … proxies SMTP requests (including AUTH requests) – ideally with the ability to map which requests go to which backend Since Nginx 1.19.4, the Nginx mail module ...
  • 666
1 vote

HAProxy Does Not Recover After Failed Check

I had the same issue and my services are hosted in kubernetes. It turns out it's a k8s dns issue. I fixed it by adding resolvers mydns parse-resolv-conf hold valid 10s backend your_backend ... ...
  • 111
1 vote

Why does sub_filter seem to not work when used in conjunction with proxy_pass?

make sure precompression is not activated:, otherwise it will not work because sub_filter is executed on the zipped data server { gzip_static off; }

Only top scored, non community-wiki answers of a minimum length are eligible