Re: IBM i HTTP server (reverse proxy)

Brad,

If I understand correctly, the sample configuration that you referenced
above doesn't implement a reverse proxy. Rather it implements a rewrite
rule that redirects the browser to a different server. You could remove the
ProxyPreserveHost and all of the LoadModule directives from your
configuration, and your rewrite rule in your <VirtualHost> block would
still run fine.

In order to implement SSL, you could add a couple lines to your
<VirtualHost> block:

SSLEngine On
SSLAppName QIBM_HTTP_SERVER_WILDCARD (whatever name may have been
configured in DCM)

SSL also requires the following LoadModule:

LoadModule ibm_ssl_module /QSYS.LIB/QHTTPSVR.LIB/QZSRVSSL.SRVPGM



On Wed, Jun 20, 2018 at 1:50 PM, Bradley Stone <bvstone@xxxxxxxxx> wrote:

Here's how I do it to route specific host names to an internal IP:

https://www.fieldexit.com/forum/display?threadid=14

For SSL it doesn't work, though. I haven't figured that one out yet.. once
I get time I hope to though.

On Wed, Jun 20, 2018 at 10:35 AM Nathan Andelin <nandelin@xxxxxxxxx>
wrote:

Would anyone be willing to post an HTTP server configuration for a

reverse

proxy running on IBM i 7.3?

The one I migrated from 7.1 doesn't work at 7.3. I whittled it down to

the

following (attempting to simplify):

LoadModule proxy_connect_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_ftp_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_http_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
Listen *:80 http
ProxyPassReverse / http://65.103.249.57:9000/
ProxyPass / http://65.103.249.57:9000/

When I do logging in both the reverse proxy instance, which is listening

on

port 80, and the normal instance which is listening on port 9000, the
requested URL's often don't match. Some of the URL's requested are munged
into unexpected paths, which don't exist, as logged by the instance that

is

running on port 9000.

I figure I'm missing some "fix_it" directive.
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.