Apache configurations for Reverse Proxy

apache-2.2file-transferPROXYreverse-proxy

I am about to setup a reverse proxy server to filter and log page requests before relaying the actual content from the origin server. (new to this)

Before this, I had the origin server public facing, and I had php5 configured to accept 20 Mb file uploads for my php web-app.

Now that I am sticking the proxy server in between, are there any special configurations that I should consider to make sure things such as file-transfer are still relayed properly between the client and the origin server?

Thanks!

Best Answer

This depends very much on the reverse proxy you are using, as they tend to have different default max request body lengths.

e.g.

Apache - defaults to unlimited, it can be set using LimitRequestBody http://httpd.apache.org/docs/2.2/mod/core.html#limitrequestbody

Nginx - defaults to 1MB, it can be changed using client_max_body_size http://wiki.nginx.org/HttpCoreModule#client_max_body_size

Squid - defaults to unlimited, it can be set using request_body_max_size http://www.squid-cache.org/Doc/config/request_body_max_size/

There may also be request body read timeouts, such as Nginx's client_body_timeout which is set to 60 seconds, which may affect people on slower/bad connections.

Related Solutions

Configure apache to reverse proxy for specific name

I seem to have gotten it working using this configuration: http://pastie.org/1426986

I'm not certain that it is the best practice, but it appears to be working. Full config included below in case Pastie goes down:

ServerRoot "C:/Program Files/Apache Software Foundation/Apache2.2"
Listen 80

LoadModule actions_module modules/mod_actions.so
LoadModule alias_module modules/mod_alias.so
LoadModule asis_module modules/mod_asis.so
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule authn_default_module modules/mod_authn_default.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authz_default_module modules/mod_authz_default.so
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule cgi_module modules/mod_cgi.so
LoadModule dir_module modules/mod_dir.so
LoadModule env_module modules/mod_env.so
LoadModule headers_module modules/mod_headers.so
LoadModule include_module modules/mod_include.so
LoadModule isapi_module modules/mod_isapi.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule mime_module modules/mod_mime.so
LoadModule negotiation_module modules/mod_negotiation.so
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
LoadModule proxy_http_module modules/mod_proxy_http.so

LoadFile   modules/mod_proxy_html/zlib.dll
LoadFile   modules/mod_proxy_html/iconv.dll
LoadFile   modules/mod_proxy_html/libxml2.dll
LoadModule proxy_html_module modules/mod_proxy_html/mod_proxy_html.so
LoadModule xml2enc_module modules/mod_proxy_html/mod_xml2enc.so

LoadModule setenvif_module modules/mod_setenvif.so

<IfModule !mpm_netware_module>
<IfModule !mpm_winnt_module>
User daemon
Group daemon
</IfModule>
</IfModule>

ProxyHTMLLinks  a       href
ProxyHTMLLinks  area        href
ProxyHTMLLinks  link        href
ProxyHTMLLinks  img     src longdesc usemap
ProxyHTMLLinks  object      classid codebase data usemap
ProxyHTMLLinks  q       cite
ProxyHTMLLinks  blockquote  cite
ProxyHTMLLinks  ins     cite
ProxyHTMLLinks  del     cite
ProxyHTMLLinks  form        action
ProxyHTMLLinks  input       src usemap
ProxyHTMLLinks  head        profile
ProxyHTMLLinks  base        href
ProxyHTMLLinks  script      src for

xml2EncDefault UTF-8

ServerAdmin mewho@mydomain.com
ServerName hqmktgwb01.mydomain.com:80

<Proxy balancer://dashstats/>
    BalancerMember http://127.0.0.1:3000
    BalancerMember http://127.0.0.1:3001
    BalancerMember http://127.0.0.1:3002
    BalancerMember http://127.0.0.1:3003
    ProxySet lbmethod=bybusyness
</Proxy>

ProxyRequests Off

<Directory c:/www/nvdlstats/public>
    Order allow,deny
    Allow from all
</Directory>

###########################################################################################

NameVirtualHost *:80
<VirtualHost *:80>
    ServerName hqmktgwb01.nvidia.com
    ServerAlias hqmktgwb01
    DocumentRoot "E:/htdocs"


    ProxyPass /dashstats/css !
    ProxyPass /dashstats/js !
    ProxyPass /dashstats/images !

    ProxyPass        /dashstats/ balancer://dashstats/
    ProxyPassReverse /dashstats/ balancer://dashstats/
    <Location /dashstats/>
        ProxyPassReverse /
        ProxyHTMLEnable On
        ProxyHTMLURLMap balancer://dashstats/ /dashstats/
        ProxyHTMLURLMap / /dashstats/
    </Location>


    RedirectMatch ^/dashstats$ /dashstats/

    <Directory />
        Options FollowSymLinks
        AllowOverride None
        Order deny,allow
        Deny from all
    </Directory>

    <Directory "E:/htdocs">
        Options Indexes FollowSymLinks
        AllowOverride None
        Order allow,deny
        Allow from all
    </Directory>

    <IfModule alias_module>
        Alias /dashstats/css c:/www/nvdlstats/public/css
        Alias /dashstats/js c:/www/nvdlstats/public/js
        Alias /dashstats/images c:/www/nvdlstats/public/images

        ScriptAlias /cgi-bin/ "C:/Program Files/Apache Software Foundation/Apache2.2/cgi-bin/"
    </IfModule>

    <IfModule dir_module>
        DirectoryIndex index.html
    </IfModule>

</VirtualHost>

###########################################################################################
###########################################################################################
###########################################################################################

<VirtualHost *:80>
    ServerName dashstats.nvidia.com
    ServerAlias dashstats
    DocumentRoot "C:/www/nvdlstats/public"

    ProxyPass /css !
    ProxyPass /js !
    ProxyPass /images !

    ProxyPass        / balancer://dashstats/
    ProxyPassReverse / balancer://dashstats/
</VirtualHost>

###########################################################################################

<Directory "C:/Program Files/Apache Software Foundation/Apache2.2/cgi-bin">
    AllowOverride None
    Options None
    Order allow,deny
    Allow from all
</Directory>

<FilesMatch "^\.ht">
    Order allow,deny
    Deny from all
    Satisfy All
</FilesMatch>

ErrorLog "logs/error.log"
LogLevel warn

<IfModule log_config_module>
    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %b" common

    <IfModule logio_module>
        LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" %I %O" combinedio
    </IfModule>
    CustomLog "logs/access.log" common
</IfModule>

DefaultType text/plain

<IfModule mime_module>
    TypesConfig conf/mime.types
    AddType application/x-compress .Z
    AddType application/x-gzip .gz .tgz
</IfModule>

LoadModule php5_module "c:/php/php5apache2_2.dll"
AddType application/x-httpd-php .php

PHPIniDir "C:/php"

<IfModule ssl_module>
    SSLRandomSeed startup builtin
    SSLRandomSeed connect builtin
</IfModule>

<IfModule headers_module>
    Header set X-UA-Compatible: IE=8
</IfModule>

NGINX Reverse Proxy – URL Rewrite

Any redirect to localhost doesn't make sense from a remote system (e.g. client's Web browser). So the rewrite flags permanent (301) or redirect (302) are not usable in your case.

Please try following setup using a transparent rewrite rule:

location  /foo {
  rewrite /foo/(.*) /$1  break;
  proxy_pass         http://localhost:3200;
  proxy_redirect     off;
  proxy_set_header   Host $host;
}

Use curl -i to test your rewrites. A very subtle change to the rule can cause nginx to perform a redirect.

Best Answer

Related Solutions

Configure apache to reverse proxy for specific name

NGINX Reverse Proxy – URL Rewrite

Related Topic