Re: Reg: Reverse Proxy in IBMi

[Don Brown <DBrown@xxxxxxxxxx>]

Hi,

Why would I want a reverse proxy ?

Or based on the replies why are you using a reverse proxy ?

Just trying to learn or have a better understanding.

Then  review our environment where we are not currently using a reverse 
proxy


Thanks

Don






From:   "Pete Helgren" <pete@xxxxxxxxxx>
To:     web400@xxxxxxxxxxxxxxxxxx
Date:   11/01/2022 05:34 AM
Subject:        Re: [WEB400] Reg: Reverse Proxy in IBMi
Sent by:        "WEB400" <web400-bounces@xxxxxxxxxxxxxxxxxx>



I agree with Brad's setup.  My config for Petes Workshop is like this 
(my reverse proxy handles three SSL enabled sites, petesworkshop.com is 
just one of them):

<VirtualHost xx.xx.xx.140:443>
ServerName www.petesworkshop.com
ServerAlias petesworkshop.com *.petesworkshop.com
SSLEngine On
SSLAppName QIBM_HTTP_SERVER_PETES
DocumentRoot /www/petes/htdocs
SSLServerCert petesworkshop
SSLProtocolDisable SSLv3 TLSv1 TLSv1.1
ProxyTimeout 300
ProxyPreserveHost on
RequestHeader set X-Forwarded-Proto "https"
RequestHeader set X-Forwarded-Port "443"
ProxyPass / http://xx.xx.xx.140:5080/
ProxyPassReverse / http://xx.xx.xx.140:5080/
</VirtualHost>


Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
AWS Certified Cloud Practitioner
Microsoft Certified: Azure Fundamentals
Twitter - Sys_i_Geek  IBM_i_Geek

On 1/10/2022 12:19 PM, Suren K wrote:
> Hi All,
>
> Currently I am using Reverse proxy in IBMi which in turn redirects the
> requests into two other servers(one IBMi IWS and another one Java Web
> Service windows Server).
>
> I created a new HTTP Server (reverse proxy server) in IBMi using HTTP 
Admin
> and added the below lines in the HTTP Server Configuration file 
(httpd.conf)
> LoadModule proxy_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
> LoadModule proxy_http_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
> LoadModule proxy_connect_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
> LoadModule proxy_ftp_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
> LoadModule proxy_balancer_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
>
> ProxyPass /test/customer http://IP:port/test/customer
> ProxyPassReverse test/customer http://IP:port/test/customer
>
> This is working fine, but when I try to configure the https url in the
> proxy it is not working.
>
> Could you please help me out with any web page or document which has 
those
> steps on how to configure ssl enabled url in the reverse proxy?
>
> Example I am trying the below which is not working
>
> SSLProxyEngine On
> ProxyPass /test/customer https://IP:port/test/customer
> ProxyPassReverse test/customer https://IP:port/test/customer
>
> Any inputs will be very much appreciated.
>
> Regards,
> Suren