Re: [users@httpd] Forward Proxy on behalf of the client instead of as a tunnel

2017-02-28 Thread Marat Khalili
> I spent some time looking at the P option for mod_rewrite but I got the > impression that it would only work in the case of the reverse proxy > situation.  I was not able to get it to work but I wanted to make sure you > thought there was potential for that to help with my forward proxy issue

Re: [users@httpd] Forward Proxy on behalf of the client instead of as a tunnel

2017-02-28 Thread Daniel Frank
Marat, Thank you again for your response. You are correct, I cannot enumerate all of the targets because we do not know about any of them and they could potentially be any IP or URI reachable by the system. I spent some time looking at the P option for mod_rewrite but I got the impression that i

Re: [users@httpd] Forward Proxy on behalf of the client instead of as a tunnel

2017-02-28 Thread Marat Khalili
Solution using reverse proxy does not require any control over proxied services, but you'll need to enumerate them all in your proxy configuration. Proxy will discriminate requests by hostname and port and forward them to specified services. This will give you additional control and security at

Re: [users@httpd] Forward Proxy on behalf of the client instead of as a tunnel

2017-02-28 Thread Daniel Frank
I see how my original question made it sound like a single service. I was trying to keep the scenario as simple as possible and probably over simplified it. The reality is that the endpoint we will be connecting to will be many appliances at many different IPs. Regarding using a reverse proxy, e

Re: [users@httpd] Forward Proxy on behalf of the client instead of as a tunnel

2017-02-28 Thread Daniel Frank
I see how my original question made it sound like a single service. I was trying to keep the scenario as simple as possible and probably over simplified it. The reality is that the endpoint we will be connecting to will be many appliances at many different IPs. Regarding using a reverse proxy, e

Re: [users@httpd] Forward Proxy on behalf of the client instead of as a tunnel

2017-02-27 Thread Marat Khalili
Why are you calling it _forward_ proxy if it's only going to connect to one service? Your problem can easily be solved with _reverse_ proxy. -- With Best Regards, Marat Khalili On 28/02/17 02:16, Daniel Frank wrote: All, I am trying to set Apache up as a forward proxy to help solve an issue

[users@httpd] Forward Proxy on behalf of the client instead of as a tunnel

2017-02-27 Thread Daniel Frank
All, I am trying to set Apache up as a forward proxy to help solve an issue that we have where an HTTP Client in our application does not support TLS 1.2 but an API that we need to consume only supports TLS 1.2. What I am attempting to do is use Apache to talk HTTPS/TLS 1.2 to the target API but