All Questions
Tagged with reverse-proxy ssl
243
questions
1
vote
1
answer
66
views
Forward traffic for one hostname without proxy Nginx Proxy Manager
I have several hosts service1.example.com, service2.example.com behind Nginx proxy manager, where the NPM handles ssl and lets encrypt acme. Now I installed a new host newhost.exmaple.com that ...
0
votes
1
answer
121
views
MIXED CONTENT/CSP issue from (VPS) nginx reverse proxy with termination SSL and (HOME) nginx wordpress
It's been few day as I try to figure out what I'm doing wrong.
DNS points to VPS
on VPS I have nginx reverse proxy with ssl termination that forward request to home server
on home server I have nginx ...
- 36
0
votes
1
answer
531
views
nginx does not forward traffic with TLS v1.1
Im using nginx 1.18.0 on an Ubuntu 22.04 server machine as a reverse proxy. Everything works fine except for one thing.
A client uses a desktop application, which sends https requests to a specific ...
- 1
0
votes
0
answers
161
views
NGINX fails to connect to Nextcloud instance
I have a server running proxmox with 3 VMs: NGINX, Bitwarden and Nextcloud. Bitwarden works fine which proves that NGINX is working ok, however when NGINX tries to connect to Nextcloud it will result ...
1
vote
2
answers
510
views
NixOS - Let's Encrypt certificate is not recognized by Traefik (works in Nginx)
I am trying to run a demo Node.js app on a subdomain using Traefik reverse proxy. I am generating the wildcard Let's Encrypt certificate with the security.acme option. When I import the certificate in ...
- 111
0
votes
0
answers
124
views
Using Traefik, how to expose inner HTTPS errors (like expired certs)?
I'm using Traefik as a reverse proxy to my homelab. I'd like to use HTTPS inside the lab using a custom CA. To do this, I've set up a ServersTransport that trusts my lab CA.
This worked well until a ...
- 101
0
votes
1
answer
238
views
What are the DNS names and IP addresses used for a reverse proxy?
I have the same scenario described in this question. I have a client connecting to an nginx reverse proxy with multiple backend services and need to set up certificates.
...
- 1,106
0
votes
0
answers
55
views
nginx reverse proxy gateway not behaving with ssl
port 80 on the web server destination serer 192.168.0.43 works in every way: gateway and inside the lan. Perfect.
I have the certbot certs on the gateway 192.168.0.60 generating perfectly
the domain ...
- 123
0
votes
1
answer
1k
views
nginx reverse proxy https to http
I have a Linux server, on which I created a public web app (as a test) accessible here: http://tropo.gps.caltech.edu:9384/jsserve
It works as intended. As you can see, it is served on port 9384 with ...
2
votes
1
answer
883
views
Nginx reverse proxy ssl: This page isn't redirecting properly
Okay, to start off with I'm new to all of this and still learning. I've got Nginx set up, and my standard reverse proxies work both inside of and outside my network. I've set up certbot and generated ...
- 51
1
vote
1
answer
647
views
Local Apache TLS Proxy error on Reverse Proxy for local services
I'm struggle now for a longer time with the following issue:
[gnutls:error] [pid 1878860] [remote 127.0.0.1:8282] ssl_engine_set: mod_proxy requested TLS proxy, but not enabled for piped.[CENSORED].de:...
- 33
0
votes
1
answer
86
views
Connection is not secure, only on mobile Certbot / LetsEncrypt
I have linked a service on my server through this reverse proxy
var httpProxy = require('http-proxy');
var fs = require('fs');
httpProxy.createServer({
...
- 1
0
votes
1
answer
799
views
Setting up SSL in Apache2 with backend docker app
I'm running Ubuntu server (18.04) on an Azure VM, with Apache2 (2.4.29). I have a backend app running in docker on the same host that is called by my site. This works easy enough without SSL. I added ...
- 1
0
votes
0
answers
162
views
apache2 reverse proxy, how to serve multiple domains with backend recognizing only 1 valid uri
I have an Apache reverse proxy set up and my backend service is configured on a specific static ServiceUri="site.com". I would like requests coming for multiple domains a.site.com/data, b....
- 131
0
votes
1
answer
110
views
Configure SSL for Apache Reverse Proxy
I want to redirect HTTPS connections to my domain towards a unique subdomain using Apache2 reverse proxy. I want all the connections that come to a.example.com to be redirected towards $random$.b....
- 131
0
votes
1
answer
2k
views
Squid Reverse Proxy with SSL
I'm trying to use squid as a reverse proxy in front of a single website, to decrypt the SSL on the proxy and then to encrypt the connection to the webserver (this is in order to use squid as an ICAP ...
- 11
1
vote
0
answers
1k
views
Error 503 Service Unavailable
We have a debian based reverse proxy server which is under testing for product scanning for a store and all of a sudden it didn't connect and started showing 503 service unavailable. The next day it ...
- 19
1
vote
0
answers
803
views
TLS passthrough (non-terminating) HTTPS reverse proxy / load balancer for HTTP/3
I have a host system with one public IP address that runs multiple VMs. Each VM is hosting multiple websites and should remain in control of the TLS keys for their HTTPS connections. For this setup to ...
- 993
4
votes
0
answers
527
views
Drop connections with a mismatching client certificate CN in nginx TCP reverse proxy
I'm using nginx to add TLS functionality on top of an existing TCP server (Redis) by proxying it like so (please read on before saying "Redis has builtin TLS support"):
stream {
server {
...
0
votes
0
answers
2k
views
How to enable SSL and setup reverse proxy on IIS for a website that was using a custom port
we have a legacy website like http://hrsys.com:9199 which is a C++ web application.
We have upgraded the app server to Windows server 2019 and IIS 10. Stilly, we want to issue a business SSL ...
- 1
1
vote
2
answers
7k
views
How do I set up an nginx reverse proxy for Synology drive?
tl;dr
I tried setting up nginx to forward a TCP connection over 6690 to Synology Drive. But when using listen 6690 ssl; the Synology Drive Client cannot find the NAS, and when using listen 6690; (...
- 111
1
vote
2
answers
2k
views
Accessing server's web server on local network with its local IP address
I have a server with Apache as a proxy for requests to a Node web service. I am currently able to connect using a browser outside of my local network using my domain name: https://mydomain.ca. I ...
- 121
0
votes
1
answer
432
views
TLS certificate for SNIproxy, or a reverse proxy with virtual host with a TLS certificate
I currently use SNIProxy (it's the simplest I've seen so far to set up virtual hosts). However, I can only set SSL certificates separately per virtual host with each service's configuration (each one ...
- 101
1
vote
0
answers
3k
views
Squid: Connection reset by peer (TLS code: SQUID_ERR_SSL_HANDSHAKE)
Failed to establish a secure connection to *ip-address*
The system returned:
(104) Connection reset by peer (TLS code: SQUID_ERR_SSL_HANDSHAKE)
Handshake with SSL server failed: [No Error]
This ...
- 33
3
votes
1
answer
17k
views
Apache reverse proxy with self-signed certificate
I run a Unifi hardware appliance which comes with a self-signed certificate, issued on unifi.local. For my current setup, it's not an option to import a certificate on the appliance directly for ...
- 155
1
vote
2
answers
979
views
Use multiple dockerized Nginx behind a host Nginx
I have multiple and different dockerized applications, each one comes with its proper Nginx service which sends traffic to its containers based on some rules.
I need to put those applications on the ...
- 113
2
votes
0
answers
832
views
Use NGINX as a proxy to terminate SSL and forward request to target with HTTP
Assumptions
Client requests target websites using HTTPS
NGINX server is passed as HTTP proxy for said requests
Client and NGINX server can share an SSL certificate
Objective
Allow NGINX to decrypt ...
- 131
0
votes
1
answer
5k
views
Fully transparent reverse proxy
I'm trying to set up the following:
┌──────────────────┐ ┌────────────────────┐ ┌─────────┐
│ │ │ │ │ │
│ ...
- 111
1
vote
0
answers
245
views
4D app with https via IIS reverse proxy not working
I am trying to set up a simple reverse proxy for http and https for a 4D app running on a windows server 2012 R2.
I got http working but not https. When I open the public firewall and access the 4D ...
- 11
0
votes
2
answers
496
views
Nginx Revers Proxy Overwrite Certificate
I have a problem trying to overwrite a certificate using NGINX as a Reverse Proxy forwarding all request to an Apache Server with and old certificate (TLS 1.0)
This is the output for my .conf file:
...
0
votes
0
answers
309
views
Reverse Proxying 2 servers not working on nginx
NOTE: I fixed the reverse proxying thing by just restarting, seems like 127 days of uptime was too much for my windows desktop. I still need help with the ssl part so any help would be really ...
- 101
1
vote
0
answers
2k
views
Nginx reverse proxy same listen port to multiple unique location ports
I've been trying to find a solution whereby I am listening to port 443 externally and want to pass the results to two unique internal ports (80/90). I've researched a number of options but they all ...
- 11
1
vote
0
answers
625
views
How to proxy a subdomain to a port in apache
I want to proxy git.example.com to example.com:3000 for gitea. I also want to enable https on the subdomain.
Here is my configuration:
<VirtualHost *:443>
ServerAdmin [email protected]
...
- 11
1
vote
1
answer
671
views
Apache SSL Proxy Pass not working, but it does with VirtualBox NAT port forwarding
I configurated Apache proxy pass on port 80 and 443. Port 80 works but it seems that for 443 I do not get any response. From my public ip I got no response from server. This are the virtual host ...
- 11
0
votes
1
answer
172
views
How to deliver certificate randomly to browser, according to the backend IP/server picked by HAProxy?
I am a beginner in HAProxy and I was trying to achieve this. I have 4 VMs, one having HAProxy server and Apache httpd server in other 3 VMs. I have test.html on all three servers. When user hit https:/...
- 111
1
vote
1
answer
469
views
Why browser is always showing certificate of only one server even if multiple certificates are configured in HAProxy?
I am a beginner in HAProxy. I have four VMs, with HAProxy in one and Apache httpd in other three. What I am trying to achieve is, when user connect to HAProxy IP using https, the connection should be ...
- 111
0
votes
0
answers
462
views
nginx: Rerouting/proxy OCSP request to adifferent backend
I'd like to filter/reroute OCSP traffic from regular HTTP traffic to a different back-end. Reviewing Network Analyses of OCSP protocol, if the OCSP request is via POST, I can filter on Content-Type: ...
- 21
0
votes
1
answer
1k
views
Nginx fails to proxy to Node
I have a running Node app that is live and works fine on http and https.
I setup Nginx and it is also running fine, tested with an sshtunnel, and it is getting a correct response from static files (...
- 31
1
vote
0
answers
440
views
How would you connect an Apache Reverse Proxy to a remote server via HTTPS?
I have an Apache Reverse Proxy set up that I'm trying to route to a remote IIS web site via https and its IP address. The website in question is a .Net5.0 website that uses Microsoft's Azure ...
- 11
2
votes
2
answers
20k
views
Nginx connect() failed (111: Connection refused) while connecting to upstream, client: 192.168.128.1, server: hello-1.local
I am trying to setup ssl on my django + docker + nginx environment. However I encountered this error:
*19 connect() failed (111: Connection refused) while connecting to upstream, client: 192.168.128....
- 23
-1
votes
1
answer
63
views
Behind the scene of a https web request at server side in Cloud
I have read few posts about behind the scene of processing a web request which is a popular interview question too for SREs/DevOps.
There are a lot of good explanation pages about the general flow of ...
- 119
0
votes
1
answer
2k
views
Setup in nginx will lead to security warning in Google Chrome
Since 2 days, our users get the following warning when trying to login on our service:
English version:
The information you're about to submit is not secure
Because this site is using a connection ...
- 101
0
votes
0
answers
449
views
Nginx proxy_pass works for sub-paths but not for root path
I have Nginx running on Ubuntu20 with a proxy_pass from https://example.com to 0.0.0.0:8000 which is a docker container. When I hit https://example.com/literally/any/path/at/all the proxy works as ...
1
vote
1
answer
3k
views
Apache reverse proxy preserving ssl
Contaxt
I currently have an Apache installation with multiple sites via VirtualHosts.
My goal is to slowly migrate towards a dockerized setup where one nginx reverse-proxy distributes the requests to ...
- 83
3
votes
1
answer
4k
views
Is there a way to get pre-configured OpenVPN-AS connect client (server-locked profiles) work behind a reverse proxy?
The issue
We host several services on 1 public IP:
OpenVPN Access Server (vpn.ourdomain.com)
OpenVPN community edition (old-vpn.ourdomain.com)
Nginx web server(s) (subdomain.ourdomain....
- 325
1
vote
1
answer
13k
views
How do I properly configure SSL on the backend between nginx and an app?
I am trying to configure re-encryption on a backend, so that traffic between nginx and the upstream app is encrypted separately from traffic between the user and nginx. For the purpose of a test ...
- 313
1
vote
0
answers
1k
views
HAProxy : SSL/TLS termination + ports forwarding
I'm writing here, because I use HAProxy as reverse-proxy with SSL/TLS termination, and I don't know how to configure it to forward HTTPS requests on specific port to the same on my HTTP backend's ...
- 65
2
votes
1
answer
5k
views
HAPROXY : reverse proxy with TLS termination
I'm a newbie with HAProxy, and I want to use it to redirects HTTPS incoming requests to my HTTP backends servers.
I know, how it is possible to do it with Nginx, like this :
#SSL for all
server {
...
- 65
1
vote
1
answer
2k
views
Redirects from https reverse proxy to prestashop backend (apache <-> apache)
The issue is with ERR_TOO_MANY_REDIRECTS from my Apache reverse proxy for secured connection to prestashop frontend on backend host (admin panel is reachable trough ssl correctly).
I suspect the issue ...
- 11
1
vote
1
answer
2k
views
Keeping SSL connection active between reverse proxy and backend server
I have a back-end server (Apache) that is too far from most of our users, so our idea is to implement a closer reverse proxy that will act as a cache.
At first glance it worked as a charm. The cached ...
