5

I know two ways to solve your issue: Simple way You can use the additional port ranges in the DNAT rule on the VPS hosts without SNAT rule. And based on these port numbers the VPS-5 routes back the replies through right host. Short example: Plan the additional port numbers on the VPS-5 to which the other hosts will forward packets from clients. Let's ...


2

I ended up using nginx with the stream SSL preread module. The configuration is dead simple: stream { server { resolver 127.0.0.1; listen 443; ssl_preread on; proxy_pass $ssl_preread_server_name:443; } } No http { } block would even be needed, but nginx segfaulted for me if I omitted it, so I have an empty http { } ...


1

It's not a requirement, but it's a nice way of lessening the impact of (CAS) downtime if you're running an Exchange cluster. If you're not, a reverse proxy may still give you an additional layer of defense, if configured to do so. However, if that's not part of the plan I'd say it's just another moving part that needs understanding and maintenance, so you're ...


1

You use the port_in_redirect directive. port_in_redirect off;


1

The best option would be to configure your application server to generate the correct URLs to be used with the proxy. However, if you can't do that, you can use another Apache module, mod_proxy_html. This module provides the directive ProxyHTMLURLMap, which you can use to rewrite the response. ProxyPass / https://localserver/ ProxyPassReverse / https://...


1

The solution is to use an additional named block to have a custom header for all the requests pass through it. The code in the original question didn't work because add_header is effective only on the last matched location block. If a request passes through multiple location blocks, it doesn't pick up add_header directive on the passed location blocks. Nginx ...


1

You can set variables in HAProxy with http-request set-var to the SNI value and reference it with var. https://www.haproxy.com/documentation/hapee/1-9r1/onepage/#7.3.2-var


1

In my opinion the NGINX mail proxy server guide lacks of one very important information that was necessary for me to get something similar working: Using a PHP Script on an Apache Server as the IMAP Auth Backend I spent some weeks to find a working solution as mocking the auth service was not working properly for me. After disabling all SSL features and ...


Only top voted, non community-wiki answers of a minimum length are eligible