Re: Reg: Reverse Proxy in IBMi

Hi Don,

Currently in our application we have two web services servers, one in IBMi
and another one in Java Windows. But most of the interfaces which are
interacting with our application, they don't want to hit multiple endpoints.

So to achieve this I am planning to build a Reverse proxy server which will
be shared to the interface, Interface will always come to reverse proxy and
based on the url we will redirect it to either IBMi or Windows.

Regards,
Suren

On Mon, Jan 10, 2022 at 4:58 PM Don Brown via WEB400 <
web400@xxxxxxxxxxxxxxxxxx> wrote:

Hi,

Why would I want a reverse proxy ?

Or based on the replies why are you using a reverse proxy ?

Just trying to learn or have a better understanding.

Then review our environment where we are not currently using a reverse
proxy


Thanks

Don






From: "Pete Helgren" <pete@xxxxxxxxxx>
To: web400@xxxxxxxxxxxxxxxxxx
Date: 11/01/2022 05:34 AM
Subject: Re: [WEB400] Reg: Reverse Proxy in IBMi
Sent by: "WEB400" <web400-bounces@xxxxxxxxxxxxxxxxxx>



I agree with Brad's setup. My config for Petes Workshop is like this
(my reverse proxy handles three SSL enabled sites, petesworkshop.com is
just one of them):

<VirtualHost xx.xx.xx.140:443>
ServerName www.petesworkshop.com
ServerAlias petesworkshop.com *.petesworkshop.com
SSLEngine On
SSLAppName QIBM_HTTP_SERVER_PETES
DocumentRoot /www/petes/htdocs
SSLServerCert petesworkshop
SSLProtocolDisable SSLv3 TLSv1 TLSv1.1
ProxyTimeout 300
ProxyPreserveHost on
RequestHeader set X-Forwarded-Proto "https"
RequestHeader set X-Forwarded-Port "443"
ProxyPass / http://xx.xx.xx.140:5080/
ProxyPassReverse / http://xx.xx.xx.140:5080/
</VirtualHost>


Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
AWS Certified Cloud Practitioner
Microsoft Certified: Azure Fundamentals
Twitter - Sys_i_Geek IBM_i_Geek

On 1/10/2022 12:19 PM, Suren K wrote:

Hi All,

Currently I am using Reverse proxy in IBMi which in turn redirects the
requests into two other servers(one IBMi IWS and another one Java Web
Service windows Server).

I created a new HTTP Server (reverse proxy server) in IBMi using HTTP

Admin

and added the below lines in the HTTP Server Configuration file

(httpd.conf)

LoadModule proxy_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_http_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_connect_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_ftp_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM
LoadModule proxy_balancer_module /QSYS.LIB/QHTTPSVR.LIB/QZSRCORE.SRVPGM

ProxyPass /test/customer http://IP:port/test/customer
ProxyPassReverse test/customer http://IP:port/test/customer

This is working fine, but when I try to configure the https url in the
proxy it is not working.

Could you please help me out with any web page or document which has

those

steps on how to configure ssl enabled url in the reverse proxy?

Example I am trying the below which is not working

SSLProxyEngine On
ProxyPass /test/customer https://IP:port/test/customer
ProxyPassReverse test/customer https://IP:port/test/customer

Any inputs will be very much appreciated.

Regards,
Suren

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.





--
This email has been scanned for computer viruses. Although MSD has taken
reasonable precautions to ensure no viruses are present in this email, MSD
cannot accept responsibility for any loss or damage arising from the use of
this email or attachments..
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.