I tried to submit this as an oxyliquit tutorial but goofed on the initial post -- now when I edit and submit the changes it's not saved correctly... <code syntax='plaintext'> # # Using Apache 2.0 and 2.2 as a reverse proxy # for a Nitro application. # # Note that Apache 2.2 offers a load balancing # proxy. Oxyliquit tutorial forthcoming... # # This scheme is based on Apache's NameVirtualHost # feature. The following line should appear # in your httpd.conf file: # # NameVirtualHost *:80 # # Next, add the following. # # You *could* put this directly in httpd.conf. # # But with large numbers of virtual hosts, # it makes sense to have an include directory # under your_apache_install/conf and add this # to httpd.conf: # # Include conf/vhosts/* # # or # # Include conf/vhosts/foo.com # Include conf/vhosts/bar.com # <VirtualHost *:80> ServerName myhost.com ServerAlias www.myhost.com ServerAlias myalias.net ServerAlias www.myalias.net RewriteEngine On ProxyRequests off ProxyPass / http://127.0.0.1:9001/ ProxyPassReverse / http://127.0.0.1:9001/ ProxyPreserveHost on # If your application exposes administrative URLs that # you want to protect, then you can redirect to an ssl # port on the server. RewriteRule ^/admin(.*) https://admin.myhost.com/admin$1 [L,R] RewriteRule ^/(.*) http://127.0.0.1:9001/$1 [L,P] </VirtualHost> # # If you want an SSL port for secure URLs for your app, # create an additional vhost # # Again, remember to add this somewhere before it: # # NameVirtualHost *:443 # <VirtualHost *:443> ServerName admin.myhost.com ServerAlias topsecret.myhost.com ProxyRequests off ProxyPass / http://127.0.0.1:9001/ ProxyPassReverse / http://127.0.0.1:9001/ ProxyPreserveHost on <Location /> AuthName "Restricted Access" AuthType Basic Require user YoursTruly AuthUserFile /top/secret/path/htpasswd </Location> <Location /foo> AuthName "Restricted Access" AuthType Basic Require group SiteEditors AuthUserFile /top/secret/path/htpasswd </Location> SSLEngine on SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL SSLCertificateFile /path-to-cert-files/ssl.crt/self_signed.cert SSLCertificateKeyFile /path-to-cert-files/ssl.key/self_signed.key SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars +StrictRequire </VirtualHost> </code>
on 2007-10-03 17:06