J.Gao at sydney
Apr 9, 2012, 5:38 PM
Post #1 of 2
(238 views)
Permalink
|
|
Scope of ProxyPreserveHost (was: Re: [users@httpd] SNI with apache 2.4.1 reverse proxy)
|
|
Hi All
Would it be possible to expand the scope of ProxyPreserveHost to "Location"?
Regards,
Jie
* Igor Gali?? <i.galic [at] brainsware> wrote:
> Date: Mon, 9 Apr 2012 08:56:12 +0000
> From: Igor Gali?? <i.galic [at] brainsware>
> To: dev [at] httpd
> CC: Michael Weiser <michael [at] dinsnail>
> Subject: Re: [users [at] http] SNI with apache 2.4.1 reverse proxy
> X-Mailer: Zimbra 7.0.0_GA_3077 (ZimbraWebClient - FF3.0
> (Linux)/7.0.0_GA_3077)
>
>
>
> ----- Original Message -----
> > On 07.04.2012 00:34, Daniel Ruggeri wrote:
> > > I wanted to bring this up here - seems like a few things are going
> > > on
> > > that are confusing to me. I'll try to look into it when time
> > > becomes
> > > available, but I thought someone might have an opinion off the bat.
> > >
> > > -------- Original Message --------
> > > Subject: [users [at] http] SNI with apache 2.4.1 reverse proxy
> > > Date: Fri, 6 Apr 2012 14:11:50 +0200
> > > From: Michael Weiser <michael [at] dinsnail>
> > > Reply-To: users [at] httpd
> > > To: users [at] httpd
> >
> > [...]
> >
> > > [Fri Apr 06 11:23:55 2012] [error] Hostname www.example.com
> > > provided
> > > via SNI and hostname subdomain.example.com provided via HTTP are
> > > different
> >
> > Seems like mod_ssl is not getting the "proper" host name in the
> > "proxy-request-hostname" note... from a quick glance at the "working
> > HTTPS reverse proxy configuration of httpd 2.2", he is obviously
> > trying
> > to forward the whole domain to port 12443 on the same machine (note
> > the "*.example.com" ServerAlias):
> >
> > > <VirtualHost *:443>
> > > DocumentRoot /var/www/www.example.com
> > >
> > > ServerName www.example.com
> > > ServerAlias example.com *.example.com
> > [...]
> > > ProxyPass / https://www.example.com:12443/
> > > ProxyPassReverse / https://www.example.com:12443/
> >
> > Then it looks like mod_proxy_http determines the value for
> > "proxy-request-hostname" from the remote URL in ProxyPass, but is
> > passing on the Host header from the original request.
>
> That would imply ProxyPreserveHost on -- which is off by default
> I also don't see it in Micha's paste.
>
> > Kaspar
>
> i
>
> --
> Igor Gali??
>
> Tel: +43 (0) 664 886 22 883
> Mail: i.galic [at] brainsware
> URL: http://brainsware.org/
> GPG: 6880 4155 74BD FD7C B515 2EA5 4B1D 9E08 A097 C9AE
>
|
