Re: Reg: Reverse Proxy in IBMi

I agree with Brad's setup.  My config for Petes Workshop is like this 
(my reverse proxy handles three SSL enabled sites, petesworkshop.com is 
just one of them):

<VirtualHost xx.xx.xx.140:443>
ServerName www.petesworkshop.com
ServerAlias petesworkshop.com *.petesworkshop.com
SSLEngine On
SSLAppName QIBM_HTTP_SERVER_PETES
DocumentRoot /www/petes/htdocs
SSLServerCert petesworkshop
SSLProtocolDisable SSLv3 TLSv1 TLSv1.1
ProxyTimeout 300
ProxyPreserveHost on
RequestHeader set X-Forwarded-Proto "https"
RequestHeader set X-Forwarded-Port "443"
ProxyPass / http://xx.xx.xx.140:5080/
ProxyPassReverse / http://xx.xx.xx.140:5080/
</VirtualHost>


Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
AWS Certified Cloud Practitioner
Microsoft Certified: Azure Fundamentals
Twitter - Sys_i_Geek  IBM_i_Geek

On 1/10/2022 12:19 PM, Suren K wrote:
> Hi All,
>
> Currently I am using Reverse proxy in IBMi which in turn redirects the
> requests into two other servers(one IBMi IWS and another one Java Web
> Service windows Server).
>
> I created a new HTTP Server (reverse proxy server) in IBMi using HTTP Admin
> and added the below lines in the HTTP Server Configuration file (httpd.conf)
>
> LoadModule proxy_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
> LoadModule proxy_http_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
> LoadModule proxy_connect_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
> LoadModule proxy_ftp_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
> LoadModule proxy_balancer_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
>
> ProxyPass /test/customer http://IP:port/test/customer
> ProxyPassReverse test/customer http://IP:port/test/customer
>
> This is working fine, but when I try to configure the https url in the
> proxy it is not working.
>
> Could you please help me out with any web page or document which has those
> steps on how to configure ssl enabled url in the reverse proxy?
>
> Example I am trying the below which is not working
>
> SSLProxyEngine On
> ProxyPass /test/customer https://IP:port/test/customer
> ProxyPassReverse test/customer https://IP:port/test/customer
>
> Any inputs will be very much appreciated.
>
> Regards,
> Suren
-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.