Re: Reg: Reverse Proxy in IBMi

Requests come in for multiple domains on one external IP.

They are then received by the proxy, then split up to different servers
specific to that domain.

Yes, you could use many virutalhosts inside one server, but I like to split
them up.

On Mon, Jan 10, 2022 at 3:58 PM Don Brown via WEB400 <
[email protected]> wrote:

> Hi,
>
> Why would I want a reverse proxy ?
>
> Or based on the replies why are you using a reverse proxy ?
>
> Just trying to learn or have a better understanding.
>
> Then  review our environment where we are not currently using a reverse
> proxy
>
>
> Thanks
>
> Don
>
>
>
>
>
>
> From:   "Pete Helgren" <[email protected]>
> To:     [email protected]
> Date:   11/01/2022 05:34 AM
> Subject:        Re: [WEB400] Reg: Reverse Proxy in IBMi
> Sent by:        "WEB400" <[email protected]>
>
>
>
> I agree with Brad's setup.  My config for Petes Workshop is like this
> (my reverse proxy handles three SSL enabled sites, petesworkshop.com is
> just one of them):
>
> <VirtualHost xx.xx.xx.140:443>
> ServerName www.petesworkshop.com
> ServerAlias petesworkshop.com *.petesworkshop.com
> SSLEngine On
> SSLAppName QIBM_HTTP_SERVER_PETES
> DocumentRoot /www/petes/htdocs
> SSLServerCert petesworkshop
> SSLProtocolDisable SSLv3 TLSv1 TLSv1.1
> ProxyTimeout 300
> ProxyPreserveHost on
> RequestHeader set X-Forwarded-Proto "https"
> RequestHeader set X-Forwarded-Port "443"
> ProxyPass / http://xx.xx.xx.140:5080/
> ProxyPassReverse / http://xx.xx.xx.140:5080/
> </VirtualHost>
>
>
> Pete Helgren
> www.petesworkshop.com
> GIAC Secure Software Programmer-Java
> AWS Certified Cloud Practitioner
> Microsoft Certified: Azure Fundamentals
> Twitter - Sys_i_Geek  IBM_i_Geek
>
> On 1/10/2022 12:19 PM, Suren K wrote:
> > Hi All,
> >
> > Currently I am using Reverse proxy in IBMi which in turn redirects the
> > requests into two other servers(one IBMi IWS and another one Java Web
> > Service windows Server).
> >
> > I created a new HTTP Server (reverse proxy server) in IBMi using HTTP
> Admin
> > and added the below lines in the HTTP Server Configuration file
> (httpd.conf)
> >
> > LoadModule proxy_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
> > LoadModule proxy_http_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
> > LoadModule proxy_connect_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
> > LoadModule proxy_ftp_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
> > LoadModule proxy_balancer_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
> >
> > ProxyPass /test/customer http://IP:port/test/customer
> > ProxyPassReverse test/customer http://IP:port/test/customer
> >
> > This is working fine, but when I try to configure the https url in the
> > proxy it is not working.
> >
> > Could you please help me out with any web page or document which has
> those
> > steps on how to configure ssl enabled url in the reverse proxy?
> >
> > Example I am trying the below which is not working
> >
> > SSLProxyEngine On
> > ProxyPass /test/customer https://IP:port/test/customer
> > ProxyPassReverse test/customer https://IP:port/test/customer
> >
> > Any inputs will be very much appreciated.
> >
> > Regards,
> > Suren
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.
>
>
>
>
>
> --
> This email has been scanned for computer viruses. Although MSD has taken
> reasonable precautions to ensure no viruses are present in this email, MSD
> cannot accept responsibility for any loss or damage arising from the use of
> this email or attachments..
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.
>
>
-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.