Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: Really Struggling with ProxyPass ... |
|
| Author |
|
sdkjdsnjdfbgdfhjkw
Joined: 07 Mar 2015
Posts: 1
Location: London
|
 Posted: Sat 07 Mar '15 23:41 Post subject: Really Struggling with ProxyPass ... |
 |
|
Hi guys,
First post in this forum, I'm hoping that someone will be able to shed light on what is no doubt a really newbie question.
I have a couple of VMs sitting behind my router. All HTTP traffic is immediately port forwarded to my apache server (192.168.1.14). Apache then proxies (or is supposed to proxy) to some of the other servers, notably a JIRA/Confluence server, and a Zabbix server. I have SSL certs, so I imagine that SSL stops at the apache server, because after that, all traffic is within my LAN.
This is my /etc/http/conf.d/ssl.conf (comments removed)
| Code: |
LoadModule ssl_module modules/mod_ssl.so
Listen 443
SSLPassPhraseDialog builtin
SSLSessionCache shmcb:/var/cache/mod_ssl/scache(512000)
SSLSessionCacheTimeout 300
SSLMutex default
SSLRandomSeed startup file:/dev/urandom 256
SSLRandomSeed connect builtin
SSLCryptoDevice builtin
NameVirtualHost *:443
<VirtualHost *:443>
ServerName mydomain.com:443
ErrorLog logs/ssl_error_log
TransferLog logs/ssl_access_log
LogLevel warn
SSLEngine on
SSLProxyEngine on
ProxyRequests Off
ProxyPreserveHost On
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
SSLCertificateFile /etc/httpd/ssl_sha2/mydomain_sha2.crt
SSLCertificateKeyFile /etc/httpd/ssl_sha2/mydomain_sha2.key
SSLCACertificateFile /etc/httpd/ssl_sha2/intermediate.crt
<Proxy *>
Order allow,deny
Allow from all
</Proxy>
ProxyPass /jira http://192.168.1.11:8080/jira
ProxyPassReverse /jira http://192.168.1.11:8080/jira
ProxyPass /confluence http://192.168.1.11:8090/confluence
ProxyPassReverse /confluence http://192.168.1.11:8090/confluence
ProxyPass /zabbix http://192.168.1.16/zabbix
ProxyPassReverse /zabbix http://192.168.1.16/zabbix
<Location />
Order allow,deny
Allow from all
</Location>
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
</Files>
<Directory "/var/www/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost> |
Now what I don't get.. what I *really* don't get, is why the JIRA and Confluence Proxy lines work, but the Zabbix one doesn't. They all work from within my LAN, and the JIRA and Confluence one works from outside. But if I try the Zabbix one from (for example), my smartphone, I don't even hit the Zabbix server (nothing in the logs), and this on the 'main' apache server logs ..
| Code: | | error_log:[Sat Mar 07 14:46:30 2015] [error] [client XXX.XXX.XXX.XXX] File does not exist: /var/www/html/zabbix |
I'm now at the stage of wanting to punch my way through my screen. Please help...  |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7372
Location: Germany, Next to Hamburg
|
| Posted: Mon 16 Mar '15 12:41 Post subject: |
|
|
| I think you need to add DirectoryIndex a correct index file of the zabbix server? Just guessing. |
|
| Back to top |
|
|
|
|
|
|
