LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   HTTP to HTTPS (https://www.linuxquestions.org/questions/linux-software-2/http-to-https-42258/)

shegde 01-21-2003 04:07 AM

HTTP to HTTPS
 
I have a requirement to place a reverse proxy server and convert all internet traffic HTTP requests to HTTPS and forward it to the Web server in the DMZ. Is this possible to do using proxy servers available in the market? Who is the vendor and any issues in deploying such a configuration?

Thanks
Sadashiv

trickykid 01-21-2003 08:53 AM

I don't know about proxy servers that are out on the market but couldn't you build your own proxy server with say, eh, your favorite Linux distro to do this job ? Might be less hassle in try to find a prebuilt one that could do this for you.

Just a thought.

unSpawn 01-21-2003 12:25 PM

Only things come to mind right now are DeleGate and Apache's mod_ssl+mod_proxy. It think it's best you research issues yourself, I'm not familiar with your requirements.

aigartua 01-21-2003 06:09 PM

You can bind the https service at port 80. Now all the request wana be https, good look

Robert0380 01-21-2003 11:30 PM

aigartua, that sounds like a good idea, but doesnt ssl slow down the process, so doing that on pages taht might not need it would be wasteful, maybe not too noticeable but im not sure, a better solution would be to forward on the ages requred to https:// instead of all requests. but the proxy server part im not sure about either

unSpawn 01-22-2003 06:02 AM

I think he means conversion, like this:
Code:

CLIENT      |FW |    DMZ        |
[http] <--> [SSLizer] <--> [https]
            |  |                |
            |  |                |


aigartua 01-22-2003 04:03 PM

ok, you can make nat from you external ethernet port 80 to dmz ethernet ip_server_http:442

aigartua 01-22-2003 04:30 PM

sorry, the https port is 443

shegde 01-31-2003 04:29 AM

Finally, I arrived to this solution.

Internet -->DMZ1-->DMZ2-->DMZ3-->Intranet

Reverse proxy in DMZ1 will route the HTTP traffic to DMZ2 and HTTPS traffic to DMZ3. This way separated the public access pages from the secure information.

Thanks for all your suggestions.
Sadashiv


All times are GMT -5. The time now is 04:47 AM.