Re: Reg: Reverse Proxy in IBMi

Hi Raul,

For example

Reverse Proxy --> http://IPa:Porta/test
Resource Server --> http://IPb.Portb/test

I configured the reverse proxy to redirect all the request coming to
IPa:Porta to IPb:Portb, For making the IPa as https (SSL) we can configure
it in the Reverse Proxy HTTP Server level, but if the Resource Server IPb
is already ssl enabled how can we configure the ssl enabled url in the
config file?

I am trying to configure the below and it is not working
ProxyPass /test https://IPb:portb/test
ProxyPassReverse /test https://IPb:portb/test

Regards,
Suren

On Mon, Jan 10, 2022 at 4:40 PM Raul Alberto Jager Weiler <
raul.jager@xxxxxxxxx> wrote:

HTTPS should be configured in the server that does the forward.

On Mon, Jan 10, 2022 at 3:20 PM Suren K <suren7437@xxxxxxxxx> wrote:

Hi All,

Currently I am using Reverse proxy in IBMi which in turn redirects the
requests into two other servers(one IBMi IWS and another one Java Web
Service windows Server).

I created a new HTTP Server (reverse proxy server) in IBMi using HTTP

Admin

and added the below lines in the HTTP Server Configuration file
(httpd.conf)

LoadModule proxy_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_http_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_connect_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_ftp_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_balancer_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM

ProxyPass /test/customer http://IP:port/test/customer
ProxyPassReverse test/customer http://IP:port/test/customer

This is working fine, but when I try to configure the https url in the
proxy it is not working.

Could you please help me out with any web page or document which has

those

steps on how to configure ssl enabled url in the reverse proxy?

Example I am trying the below which is not working

SSLProxyEngine On
ProxyPass /test/customer https://IP:port/test/customer
ProxyPassReverse test/customer https://IP:port/test/customer

Any inputs will be very much appreciated.

Regards,
Suren
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.