I have an httpd server with mod_proxy that forward any request to an another server.
the flow is: client --> requesto proxy [url]forward to server [url]
I'm reading this error in my httpd log in LogLevel debug (after some request):
Code:
Code:
and this is my ssl.conf in /etc/httpd/conf.d
Code:
how I can find the root cause?
I set the default os to boot as windows 7 with a timeout of 1 second. I thought that this would be enough time to switch os ubuntu when i need to, but I am unable to. How can i reset the timeout to 3 seconds? I also cannot view the ubuntu partition within windows because of ubuntu's file system.
View 9 Replies View RelatedI have a proxy with SSL that forward any request to a backend platform. In this moment I have a problem if I'm trying to execute an activex on the backend platform. I'm reading that the mod_proxy blocks any activex request because it don't trust for the system. How I can do? I'm reading about mod_security.
Code:
I have figured out how to use virtualhost, proxypass and proxypassreverse. So far, so good.
The problem I'm experiencing is this:
I have a reverse proxy server running apache (123.123.123.123)
Behind this proxy server I have a http server running apache (124.124.124.124).
This http server has multiple sites (virtualhost), it's only reachable via the proxy server.
If i run a nslookup on www.somedomain.com I get 123.123.123.123 (Not really but you understand what I mean)
I put my proxy to have the IP 123.123.123.123, so far so good. The requests come in to the proxy server.
I want my http server to be named 124.124.124.124.
In the http server I wish to set up my virtualhosts like this:
How do I get my proxy to grab the data from the http server?
If I do like this I will only make another request to my proxy server.
If I do like this, only the first page in the httpd.conf in my http server will work.
Do I need to setup a different DNS server for the proxy server? I would hate that. Perhaps use hosts-file in proxy. Or maybe I can use sub-domains?
I seem to be having a problem with mod_proxy and https websites. A simple connection to port 80 works fine but all calls to 443 fail.
I had a look at my firewall but can't see anything that would block port 443, although I get no tcpdump traffic on that port on the deb01 client when I try and connect to it. I disabled the firewall but still no luck.
My configuration consists of 3 VMs (KVM) each running a different website.
I get the following error when connecting to ssl deb01
Code: An error occurred during a connection to deb03.example.com.
SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)
The following is what can be found on the host
Code:
I'm working on setting up a hosted OSS app on a VPS and have a question about doing some proxying. I have Centos 5.5/Apache 2.2 running on 2 VPS's, in different locations, accessible from the net. One of these hosts the app itself, the other will be used as a web portal where the end user will login to auth and then be able to access the app. Now, since I don't wan't access to the app server from the world at large, I want to firewall it and only allow access from the portal machine. So what I think I need to do is set up a reverse proxy with mod_proxy, and then if the end user auths forward them to a specific url on the app server.
So when they connect to [url] and log in I need them to be redirected to app.machine.com/theirdir
So the questions I have are:
1) Can this be done? If so, is mod_proxy the way to do it? Configuring Apache isnt a problem, but I havent worked with mod_proxy.
2) If this does work, will it also work with SSL?
3) I've seen a few small tutorials on the net, but not doing exactly what I want to. They all use the reverse proxy with a public IP connecting to a server with a private IP behind a firewall, while I have public IP's on both ends. From a network standpoint I know this shouldn't matter, but I'm not familiar with mod_proxy's particulars itself.
I'm running Fedora 10 with Apache 2.2.11 and I noticed something a little strange going on. This morning, logwatch alerted me to the following concerning apache:
Code:
Sure enough, the apache access log file shows the following:
Code:
mod_proxy is disabled in the apache config file anyway (default mod_proxy commented out):
Code:
When I tried to access my web server to check, it was down, and I got the following when checking its status:
Code:
So I checked the apache error logs and found the following:
Code:
There's nothing wrong with line 188 of the config file:
Code:
It seems fairly apparent that there has been an attempt to use my web server as a proxy to gain access to other servers, so I have a couple of questions:
1) I presume that the attack failed, since mod_proxy was disabled?
2) Why did my web server crash? (It has never done this before). It seems very suspicious that it tried to restart, but failed to load proxy_module modules/mod_proxy.so on the same night that someone had attempted to use mod_proxy. I have since successfully started apache without making any configuration changes.
3) Do I need to worry that any part of my system has been compromised?
I set up mod_proxy in order to get rid of :8080 now I cant access phpmyadmin through the browser. what is the quickest way to turn off mod_proxy and access phpmyadmin? I would like to optimize the tables and back up the sql file. I just need to turn it on for a bit, and then enable mod_proxy again.Right now, if I got to localhost/phpmyadmin, it redirects to the main application.
I have used a2enmod, and added
sudo a2enmod proxy
sudo a2enmod proxy_http
sudo a2enmod proxy_ajp
[Code]...
Just followed the link [URL] for installing apache with --enable-so only. How can I install mod_proxy into the same?
View 2 Replies View RelatedDom0 is having public IP. I read a lot of blog and tutorials about name based and IP based hostings and also about mod_proxy. But I am unable to do.
Here is what I am trying to do. I have a webserver on public IP.Which is running Xen on it. There are 4 Guest Operating systems installed on top of Dom0 which are Dom1,Dom2,Dom3,Dom4 These are application servers which are going to serve the requests that come from the main server.Which is Dom0.
All I see is "It works" on all 4 of the hosts. On my LAN on any machine on same subnet if I do [url] of Domu1 message comes
Code:
in browser from LAN gives me a message
Code: It works.
What do I need to do on Dom0 so that requests are forwarded to the appropriate DomUs apache2 is running on all of them including Dom0.Some one suggested me to go for ReverseProxy in Apache2.
i'm using apache2 prefork as proxy (mod_proxy) and i'm facing some performance problems such freezes , for instance the entire server blocks and becomes totally unresponsive after several requests.
at first i thought that the system is running out of memory so i tweaked the mpm config and reduced the number of allowed processes that can start concurrently , however the problem still persists..would mpm worker serve better than prefork ?
I'm using CentOS 5 and just found out that there are people using my Apache Web Server as proxy (version 2.2.3 the OS's default).
I've checked out that my mod_proxy is already disabled but the unauthorized incoming request is still very large.
So I tried to compile an Apache from raw (2.2.17) just enabling mod_rewrite and then found out that the 'proxy' request is still there.
Tried httpd -l and here are the modules inside the Apache :
Code:
# /opt/apachew/bin/httpd -l
Compiled in modules:
core.c
mod_authn_file.c
[Code]....
There should be no mod_proxy but why should it still accepting proxy request? I checked the access_log file and still found [URL] and so on.
My question is : - How to block all the proxy request and only accepting the normal web server request? I also have tried to enable proxy in the previous Apache and then setting up "ProxyRequest Off" and Proxy * only from localhost but the request is still there.
I tried by myself using the webserver as proxy in browser and all the URLs I opened including the false URL will be redirected to my index.php and this should show me that 'you-can't-use-this-as-proxy-anymore' right?
Insane people still believe they could use my server and they keep trying and trying.
I couldn't block the IP addresses because some of them are using the mobile data (GPRS/UMTS) and that is our market for the website.
I have a server acting as a proxy to a couple of IP cameras on my local network. The IP cameras require HTTP-Authentication (Basic) but I want the outward facing Apache server to automatically log in without prompting the user for a login.
My current configuration is:
Code:
That works as a proxy but still asks for a HTTP Auth login. Can I get Apache to pass the login details to the IP cameras so users can just hit up the proxy and view the camera without having to log in?
I am trying to create solution with Reverse Proxy, mod_proxy and mod_proxy_connect. I haven't really used this before so I am just curious if I am doing it right. I have attached what I am trying to do plus a copy of the config:Here is my current requirement
We are going to have 3 servers, right now our top level domain is[URL] We have an E-Commerce Server in Production Right now that already has an SSL Cert on it so right now the production server for E-Commerce is [URL] However, as we are growing, we don't want to use subdomains, so instead, we want to use the reverse proxying feature on apache. We are running mostly windows servers and IIS for the E-Commerce, CMS and the Wordpress Server. Assume the following -
Apache Proxy Server 10.100.10.60
E-Commerce Server 10.100.10.3 (www.ooolalashop.com)
Content Management Server 10.100.10.3 (cms.ooolalashop.com)
Word Press Blog Server 10.100.10.3 (blog.ooolalashop.com)
1) We need the following mapped
[URL] - maps to ecommerce server - since ssl cert is going to stay on the server, on the proxy we just create a static host that points to the e-commerce server
[URL]
All of these should be pretty easy to reverse proxy
2) We need to be able to proxy the SSL connection or have it pass through to the server on the back end with the domain [URL] right now we are getting some errors Here is the error I get with SSL [Sun Aug 22 01:51:30 2010] [warn] proxy: No protocol handler was valid for the URL /. If you are using a DSO version of mod_proxy, make sure the proxy submodules are included in the configuration using LoadModule.
Here is a copy of the config
<VirtualHost *:80>
ServerAdmin support@cometcomputing.com
ServerNamewww.ooolalashop.com
DocumentRoot/var/www/ooo
[code]....
I have a php app set up in the default virtualhost, and want to add a Grails app. The grails app runs on [URL] and I want to configure apache2 to proxy that folder to Jetty using mod_proxy.
Module is enabled
Code:
$ sudo a2enmod proxy
Module proxy already enabled
[code]....
Quote:
[Sun Mar 21 00:14:56 2010] [warn] proxy: No protocol handler was valid for the URL /mailscan. If you are using a DSO version of mod_proxy, make sure the proxy submodules are included in the configuration using LoadModule. My apache2.conf contains no LoadModule lines, and a2enmod says it's already enabled. Does Ubuntu Desktop (Karmic) use the DSO versions of modules, or did I miss something else? I'm aware I should also use mod_proxy_html to make sure only the "portless" version of the address is outputted, but I can fix that later!
I have just been told that httpd was not running on my Centos virtual server. It seems that my hosting company rebooted my server 2 days ago and that httpd restart failed due to:
Starting httpd: httpd:
Syntax error on line 213 of /etc/httpd/conf/httpd.conf:
Syntax error on line 2 of /etc/httpd/conf.d/proxy_ajp.conf:
Cannot load /etc/httpd/modules/mod_proxy_ajp.so into server: /etc/httpd/modules/mod_proxy_ajp.so: undefined symbol: proxy_module
I had worked around and forgotten about this some time ago. The problem arose because the most recent httpd update installed proxy_ajp.conf into /etc/httpd/conf.d which was then loaded on restart The trouble is I do not use mod_proxy (I think just to try and get a lean and mean web server) and proxy_ajp.conf does not check if mod_proxy is loaded before it tries to LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
Hence httpd fails to restart. RedHats's bug tracker lists this as an old issue (which was never resolved) [URL] My workaround was to rename proxy_ajp.conf to proxy_ajp.conf.orig so that httpd would start up correctly. However any updates simply reinstall proxy_ajp.conf and so IMO the problem needs to be resolved at source. how to ensure that httpd updates do not bite me in the future? Do I really have to run mod_proxy whether or not I need it?
I have a web application that runs through thousands of IP addresses and checks if they're online. Basically, if a server uses more than 250ms to respond, it's considered offline in our case. It would be an enormous timesaver if we could get the ping command to give up after about 300 ms, instead of what seems to be the minimum value of the -W parameter, 1 second.
View 2 Replies View RelatedIm trying to run a headless box but grub has no time out so it sits until I plug in a keyboard and hit enter. I have tried to put a timer on using 'startup-manager' but this seems to be ignored.
When it boots I get GNU GRUB version 1.99~rc1-13ubuntu13 and a list of operating systems. Unless I hit enter it will wait forever.
"How can I reduce TCP timeout " for delay which is normally in minutes. I want to reduce it in miliseconds or 1-2 seconds.
View 3 Replies View Relatedsend pings test for hours to my router 10.0.1.1 and the ping test is perfect, never fail. 8024 send packages, 8024 packages received.
Now but when make the same ping tests for hours to my linux CPU, i saw that sometimes the ping test say timeout Whan can i do? Can i edit the timeout value for in my linux cpu? what you think? This is making me crazy because me linux cpu is loosing packages..
Code:
[root@TornadoR3 ~]# ifconfig
eth1 Link encap:Ethernet HWaddr 00:08:02:F9:AB:FF[code].....
I'm trying to get granular with TCP, one of the answers I can't seem to find is. When a client server connection is lost without closing, how many duplicate ack's are sent until the session is closed. I've kind of figured out the the sender will continue to retransmit a segment for about 9 mins if not Ack'd. going from 1.5,3,6,12,24,48 and the continuing with 64 seconds up to around 9 minutes before is resets the session. but whats happening at the other end.?
View 1 Replies View RelatedI have a named server that has forwarders setup. Quite often the dns server where I forward would not respond right away and the query would fail. It would then also cache the empty result for 3 hours and I would need to restart the service or clear the cache. how would I be able to specify a value for forwarders timeout, just like on Windows DNS.
BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_5.3
I was trying to rsync datas from one server to a remote server. There is a firewall between the two servers and the 22 port is open for the servers.
Attached the error that I got.
I am geting a bit confused regarding the autologin of a user , and in need of help desperately. Could anybody please help me with the below queries :
How can we set autologin for any normal user in RHEL5 ? Also, How can we then logout such a user later, as we can't logout such user normally ? How to set timeout for such autologin users ?
I am on CENTOS 5.4 64 Bit Servers.
I have created a script which runs some commands on remote servers.
I am stucked when a server is not responding timely.
I want to set a timeout say after 10 seconds, if I am unable to login (for whatever reason) I should be dropped back at the shell.
I tried using LoginGraceTime but it is not working for me as below:
Code:
LoginGraceTime 10s
or
LoginGraceTime 10
connect a PC to the router which ip address is 10.0.0.2 and its arp table:
~ # arp -n
Address HWtype HWaddress Flags Mask Iface
10.0.0.2 ether 00:21:27:AC:3B:19 C * eth0.1
[code]...
When an application invokes getnameinfo, it seems that it takes a while.
Internally, os sends a request to dns server and waits for a response, but the response is timeout after 5 seconds.
1. why does the response take so long?
2. is the timeout value configurable? if yes, what will it impact if the value is changed and where to change this value?
3. is there other way to find out domain name by ip address?
I have centos 5.3 server and the problem is the ssh timeout time set to 10 minutes of inactivity. I want to set the timeout to 1 hour, how can I set the timeout time?
View 1 Replies View RelatedThe normal distros now ship with an executable called "timeout". Will CentOS be including this new "timeout" command in an upcoming release?
I read that CentOS did not include it (yet) because of a name conflict with another package.
I am running debian 8 stable version (which I starting to think not that "Stable") and when i surf web pages its ok except the fact that I am too often get connection timeouts then i need to press "enter" in the ur box to try again and then its maybe work if not I am going to press another "enter" on the url box until i have connection to the site its important to say its not a isp or hardware problem. I run the web with no problems in that other operating system which I am not getting back to.....
View 14 Replies View Related