HTTP to HTTPS

shegde · 01-21-2003, 04:07 AM

I have a requirement to place a reverse proxy server and convert all internet traffic HTTP requests to HTTPS and forward it to the Web server in the DMZ. Is this possible to do using proxy servers available in the market? Who is the vendor and any issues in deploying such a configuration?

Thanks
Sadashiv

trickykid · 01-21-2003, 08:53 AM

I don't know about proxy servers that are out on the market but couldn't you build your own proxy server with say, eh, your favorite Linux distro to do this job ? Might be less hassle in try to find a prebuilt one that could do this for you.

Just a thought.

unSpawn · 01-21-2003, 12:25 PM

Only things come to mind right now are DeleGate and Apache's mod_ssl+mod_proxy. It think it's best you research issues yourself, I'm not familiar with your requirements.

aigartua · 01-21-2003, 06:09 PM

You can bind the https service at port 80. Now all the request wana be https, good look

Robert0380 · 01-21-2003, 11:30 PM

aigartua, that sounds like a good idea, but doesnt ssl slow down the process, so doing that on pages taht might not need it would be wasteful, maybe not too noticeable but im not sure, a better solution would be to forward on the ages requred to https:// instead of all requests. but the proxy server part im not sure about either

unSpawn · 01-22-2003, 06:02 AM

I think he means conversion, like this:

Code:

CLIENT      |FW |     DMZ        |
[http] <--> [SSLizer] <--> [https]
            |   |                |
            |   |                |

aigartua · 01-22-2003, 04:03 PM

ok, you can make nat from you external ethernet port 80 to dmz ethernet ip_server_http:442

aigartua · 01-22-2003, 04:30 PM

sorry, the https port is 443

shegde · 01-31-2003, 04:29 AM

Finally, I arrived to this solution.

Internet -->DMZ1-->DMZ2-->DMZ3-->Intranet

Reverse proxy in DMZ1 will route the HTTP traffic to DMZ2 and HTTPS traffic to DMZ3. This way separated the public access pages from the secure information.

Thanks for all your suggestions.
Sadashiv