Featur request Reverse proxy

[WebFooL]

Hi,

First let me say thanks to all Untangle Staff for this greate product.

Last week i configured my Lab box with Apaches reverse proxy.
Just to solv my Adito problem.
I proxy http://untangleip/adito to my local Adito server.
The same way can be done with Exchange.
So http://utnangleip/exchange proxys to exchange frontend.
Exchange needs a bit more than one proxy to work.
read more here:http://www.wlug.org.nz/ApacheReverseProxy

If the greate dev team could create a simple gui for the Reverse proxy and maby have some standard templates i think it can be a winning concept.

Again thanks for the neet product.


Bugzilla link:http://bugzilla.untangle.com/show_bug.cgi?id=6590

[mrunkel]

I don't understand. Why is this better than a port forward?

[dmorris]

cause then you could forward based on hostname.

foo.com goes to 192.168.1.100
bar.com goes to 192.168.1.101

It requires you to temporarily endpoint and accept the request before creating the new connection. And they you replay the original request for the correct server.

[dwasserman]

Incidentally this was my request to the Mark Floisan today survey

[sky-knight]

Yeah, but apache2's reverse proxy... is hokey. I've got a separate VM where I'm doing this so I can run an Apache 2 server, and an IIS server on the same public address. It works, but it does some strange things from time to time.

Adding that feature to Untangle is really very simple, it's just an extra file in /etc/apache2/conf.d/sites-available, and a symlink in sites-enabled. So integrating Untangle with that feature is a matter of building a GUI for it, and enabling port 80 on the outside.

[WebFooL]

@dwasserman
What survey :P

I do like Sky-Knight now (Run it in a sepparate box)
But If UT could have some nice templates and ex for OWA etc then i think it would be a killer function.

[sky-knight]

WebFool have you navigated the minefield of having it proxy SSL enabled stuff? I have yet to do anything like that, I figured SSL is just best left to direct connections.

[WebFooL]

I have a Apache2 infront of 3 Diffrent Exchange servers and all of them have SSL.
It was a bitch the first time...

But it aint that hard.
And if they gui has "Upload Certificat" and "Upload Cert Key file" you have all you need.

[sky-knight]

And what if you have the unified file?

Are you using SSL from the proxy to the OWA box? If so is that link self-signed or do you have to buy two certs?

[WebFooL]

We have a own CA server/network and we are about to become a Global Root CA. (just waiting for Msofts approval)
But yes you need to be able to export the key and cert to separate files.