You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Jason Long <ha...@yahoo.com.INVALID> on 2021/03/05 11:26:26 UTC
[users@httpd] Some questions about launch a reverse proxy.
Hello,
I want to launch a ModSecurity or an IDS\IPS as a reverse proxy and I have some questions. I'm a beginner and I'm thankful if anyone help me. My goal is:
The Internet --> WAF or IDS\IPS --> Web Server
My questions are:
1- On WAF server, I need Apache too?
2- Should I set the web server public IP address on the WAF server and it forward all requests to my web server with a local IP address? Or both servers need separate public IP address? Or WAF needs a public IP and Web server need a local IP?
Excuse me if my questions are odd.
Thank you.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Some questions about launch a reverse proxy.
Posted by William Dumangeng Jr <wb...@dilg.gov.ph>.
https://httpd.apache.org/docs/2.4/mod/mod_proxy.html
On Sat, Mar 6, 2021 at 9:44 PM William Dumangeng Jr <wb...@dilg.gov.ph>
wrote:
> Yes, Apache httpd can be a Reverse proxy too using *"ProxyPass" *directive
> in the config file.
>
> On Sat, Mar 6, 2021 at 9:35 PM Jason Long <ha...@yahoo.com.invalid>
> wrote:
>
>> Thanks.
>> Apache can't do it?
>>
>>
>>
>>
>>
>>
>> On Saturday, March 6, 2021, 05:02:44 PM GMT+3:30, William Dumangeng Jr <
>> wbdumangeng@dilg.gov.ph> wrote:
>>
>>
>>
>>
>>
>> Reverse proxy software like Nginx, ATS or Varnish. Install any of those
>> software and the WAF in the same host.
>>
>> On Sat, Mar 6, 2021 at 7:07 PM Jason Long <ha...@yahoo.com.invalid>
>> wrote:
>> > Hi William,
>> > Thank you.
>> > I need your second diagram:
>> >
>> > The Internet------->WAF and Reverse Prox(Public
>> IP)---------->Apache(Private IP)
>> >
>> > But, which program doing Reverse Proxy? Apache?
>> >
>> >
>> >
>> >
>> >
>> >
>> >
>> >
>> > On Saturday, March 6, 2021, 09:01:38 AM GMT+3:30, William Dumangeng Jr <
>> wbdumangeng@dilg.gov.ph> wrote:
>> >
>> >
>> >
>> >
>> >
>> > Hi;
>> >
>> > The WAF and web server can reside in a single host and the reverse
>> proxy in another host or you can also install WAF with the Reverse proxy
>> (Nginx).
>> >
>> > The Internet------->Reverse Prox(Public IP)---------->WAF and
>> Apache(Private IP)
>> > or
>> > The Internet------->WAF and Reverse Prox(Public
>> IP)---------->Apache(Private IP)
>> >
>> >
>> > On Fri, Mar 5, 2021 at 7:26 PM Jason Long <ha...@yahoo.com.invalid>
>> wrote:
>> >> Hello,
>> >> I want to launch a ModSecurity or an IDS\IPS as a reverse proxy and I
>> have some questions. I'm a beginner and I'm thankful if anyone help me. My
>> goal is:
>> >>
>> >> The Internet --> WAF or IDS\IPS --> Web Server
>> >>
>> >> My questions are:
>> >> 1- On WAF server, I need Apache too?
>> >> 2- Should I set the web server public IP address on the WAF server and
>> it forward all requests to my web server with a local IP address? Or both
>> servers need separate public IP address? Or WAF needs a public IP and Web
>> server need a local IP?
>> >>
>> >> Excuse me if my questions are odd.
>> >>
>> >> Thank you.
>> >>
>> >> ---------------------------------------------------------------------
>> >> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>> >> For additional commands, e-mail: users-help@httpd.apache.org
>> >>
>> >>
>> >
>> >
>> > --
>> >>
>> >> William B. Dumangeng Jr.
>> >>
>> >> ISTMS/NTMD
>> >>
>> >> Department of the Interior and Local Government
>> >>
>> >> DILG-NAPOLCOM Center
>> >>
>> >> EDSA cor. Quezon Avenue
>> >>
>> >> West Triangle Quezon City
>> >>
>> >> PH
>> >>
>> >> Tel. No. 876-3454; local 5506
>> >>
>> >>
>> >>
>> >>
>> >>
>> >>
>> >
>> >
>> > ---------------------------------------------------------------------
>> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>> > For additional commands, e-mail: users-help@httpd.apache.org
>> >
>> >
>>
>>
>> --
>> >
>> > William B. Dumangeng Jr.
>> >
>> > ISTMS/NTMD
>> >
>> > Department of the Interior and Local Government
>> >
>> > DILG-NAPOLCOM Center
>> >
>> > EDSA cor. Quezon Avenue
>> >
>> > West Triangle Quezon City
>> >
>> > PH
>> >
>> > Tel. No. 876-3454; local 5506
>> >
>> >
>> >
>> >
>> >
>> >
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
>
> --
>
> William B. Dumangeng Jr.
> ISTMS/NTMD
> Department of the Interior and Local Government
> DILG-NAPOLCOM Center
> EDSA cor. Quezon Avenue
> West Triangle Quezon City
> PH
> Tel. No. 876-3454; local 5506
>
>
--
William B. Dumangeng Jr.
ISTMS/NTMD
Department of the Interior and Local Government
DILG-NAPOLCOM Center
EDSA cor. Quezon Avenue
West Triangle Quezon City
PH
Tel. No. 876-3454; local 5506
Re: [users@httpd] Some questions about launch a reverse proxy.
Posted by Jason Long <ha...@yahoo.com.INVALID>.
Thank you.
If Apache can do it, then why ATS?
On Saturday, March 6, 2021, 05:21:04 PM GMT+3:30, William Dumangeng Jr <wb...@dilg.gov.ph> wrote:
Yes, Apache httpd can be a Reverse proxy too using "ProxyPass" directive in the config file.
On Sat, Mar 6, 2021 at 9:35 PM Jason Long <ha...@yahoo.com.invalid> wrote:
> Thanks.
> Apache can't do it?
>
>
>
>
>
>
> On Saturday, March 6, 2021, 05:02:44 PM GMT+3:30, William Dumangeng Jr <wb...@dilg.gov.ph> wrote:
>
>
>
>
>
> Reverse proxy software like Nginx, ATS or Varnish. Install any of those software and the WAF in the same host.
>
> On Sat, Mar 6, 2021 at 7:07 PM Jason Long <ha...@yahoo.com.invalid> wrote:
>> Hi William,
>> Thank you.
>> I need your second diagram:
>>
>> The Internet------->WAF and Reverse Prox(Public IP)---------->Apache(Private IP)
>>
>> But, which program doing Reverse Proxy? Apache?
>>
>>
>>
>>
>>
>>
>>
>>
>> On Saturday, March 6, 2021, 09:01:38 AM GMT+3:30, William Dumangeng Jr <wb...@dilg.gov.ph> wrote:
>>
>>
>>
>>
>>
>> Hi;
>>
>> The WAF and web server can reside in a single host and the reverse proxy in another host or you can also install WAF with the Reverse proxy (Nginx).
>>
>> The Internet------->Reverse Prox(Public IP)---------->WAF and Apache(Private IP)
>> or
>> The Internet------->WAF and Reverse Prox(Public IP)---------->Apache(Private IP)
>>
>>
>> On Fri, Mar 5, 2021 at 7:26 PM Jason Long <ha...@yahoo.com.invalid> wrote:
>>> Hello,
>>> I want to launch a ModSecurity or an IDS\IPS as a reverse proxy and I have some questions. I'm a beginner and I'm thankful if anyone help me. My goal is:
>>>
>>> The Internet --> WAF or IDS\IPS --> Web Server
>>>
>>> My questions are:
>>> 1- On WAF server, I need Apache too?
>>> 2- Should I set the web server public IP address on the WAF server and it forward all requests to my web server with a local IP address? Or both servers need separate public IP address? Or WAF needs a public IP and Web server need a local IP?
>>>
>>> Excuse me if my questions are odd.
>>>
>>> Thank you.
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>> For additional commands, e-mail: users-help@httpd.apache.org
>>>
>>>
>>
>>
>> --
>>>
>>> William B. Dumangeng Jr.
>>>
>>> ISTMS/NTMD
>>>
>>> Department of the Interior and Local Government
>>>
>>> DILG-NAPOLCOM Center
>>>
>>> EDSA cor. Quezon Avenue
>>>
>>> West Triangle Quezon City
>>>
>>> PH
>>>
>>> Tel. No. 876-3454; local 5506
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
>
>
> --
>>
>> William B. Dumangeng Jr.
>>
>> ISTMS/NTMD
>>
>> Department of the Interior and Local Government
>>
>> DILG-NAPOLCOM Center
>>
>> EDSA cor. Quezon Avenue
>>
>> West Triangle Quezon City
>>
>> PH
>>
>> Tel. No. 876-3454; local 5506
>>
>>
>>
>>
>>
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
--
>
> William B. Dumangeng Jr.
>
> ISTMS/NTMD
>
> Department of the Interior and Local Government
>
> DILG-NAPOLCOM Center
>
> EDSA cor. Quezon Avenue
>
> West Triangle Quezon City
>
> PH
>
> Tel. No. 876-3454; local 5506
>
>
>
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Some questions about launch a reverse proxy.
Posted by William Dumangeng Jr <wb...@dilg.gov.ph>.
Yes, Apache httpd can be a Reverse proxy too using *"ProxyPass" *directive
in the config file.
On Sat, Mar 6, 2021 at 9:35 PM Jason Long <ha...@yahoo.com.invalid>
wrote:
> Thanks.
> Apache can't do it?
>
>
>
>
>
>
> On Saturday, March 6, 2021, 05:02:44 PM GMT+3:30, William Dumangeng Jr <
> wbdumangeng@dilg.gov.ph> wrote:
>
>
>
>
>
> Reverse proxy software like Nginx, ATS or Varnish. Install any of those
> software and the WAF in the same host.
>
> On Sat, Mar 6, 2021 at 7:07 PM Jason Long <ha...@yahoo.com.invalid>
> wrote:
> > Hi William,
> > Thank you.
> > I need your second diagram:
> >
> > The Internet------->WAF and Reverse Prox(Public
> IP)---------->Apache(Private IP)
> >
> > But, which program doing Reverse Proxy? Apache?
> >
> >
> >
> >
> >
> >
> >
> >
> > On Saturday, March 6, 2021, 09:01:38 AM GMT+3:30, William Dumangeng Jr <
> wbdumangeng@dilg.gov.ph> wrote:
> >
> >
> >
> >
> >
> > Hi;
> >
> > The WAF and web server can reside in a single host and the reverse proxy
> in another host or you can also install WAF with the Reverse proxy (Nginx).
> >
> > The Internet------->Reverse Prox(Public IP)---------->WAF and
> Apache(Private IP)
> > or
> > The Internet------->WAF and Reverse Prox(Public
> IP)---------->Apache(Private IP)
> >
> >
> > On Fri, Mar 5, 2021 at 7:26 PM Jason Long <ha...@yahoo.com.invalid>
> wrote:
> >> Hello,
> >> I want to launch a ModSecurity or an IDS\IPS as a reverse proxy and I
> have some questions. I'm a beginner and I'm thankful if anyone help me. My
> goal is:
> >>
> >> The Internet --> WAF or IDS\IPS --> Web Server
> >>
> >> My questions are:
> >> 1- On WAF server, I need Apache too?
> >> 2- Should I set the web server public IP address on the WAF server and
> it forward all requests to my web server with a local IP address? Or both
> servers need separate public IP address? Or WAF needs a public IP and Web
> server need a local IP?
> >>
> >> Excuse me if my questions are odd.
> >>
> >> Thank you.
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> >> For additional commands, e-mail: users-help@httpd.apache.org
> >>
> >>
> >
> >
> > --
> >>
> >> William B. Dumangeng Jr.
> >>
> >> ISTMS/NTMD
> >>
> >> Department of the Interior and Local Government
> >>
> >> DILG-NAPOLCOM Center
> >>
> >> EDSA cor. Quezon Avenue
> >>
> >> West Triangle Quezon City
> >>
> >> PH
> >>
> >> Tel. No. 876-3454; local 5506
> >>
> >>
> >>
> >>
> >>
> >>
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> >
> >
>
>
> --
> >
> > William B. Dumangeng Jr.
> >
> > ISTMS/NTMD
> >
> > Department of the Interior and Local Government
> >
> > DILG-NAPOLCOM Center
> >
> > EDSA cor. Quezon Avenue
> >
> > West Triangle Quezon City
> >
> > PH
> >
> > Tel. No. 876-3454; local 5506
> >
> >
> >
> >
> >
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
--
William B. Dumangeng Jr.
ISTMS/NTMD
Department of the Interior and Local Government
DILG-NAPOLCOM Center
EDSA cor. Quezon Avenue
West Triangle Quezon City
PH
Tel. No. 876-3454; local 5506
Re: [users@httpd] Some questions about launch a reverse proxy.
Posted by Jason Long <ha...@yahoo.com.INVALID>.
Thanks.
Apache can't do it?
On Saturday, March 6, 2021, 05:02:44 PM GMT+3:30, William Dumangeng Jr <wb...@dilg.gov.ph> wrote:
Reverse proxy software like Nginx, ATS or Varnish. Install any of those software and the WAF in the same host.
On Sat, Mar 6, 2021 at 7:07 PM Jason Long <ha...@yahoo.com.invalid> wrote:
> Hi William,
> Thank you.
> I need your second diagram:
>
> The Internet------->WAF and Reverse Prox(Public IP)---------->Apache(Private IP)
>
> But, which program doing Reverse Proxy? Apache?
>
>
>
>
>
>
>
>
> On Saturday, March 6, 2021, 09:01:38 AM GMT+3:30, William Dumangeng Jr <wb...@dilg.gov.ph> wrote:
>
>
>
>
>
> Hi;
>
> The WAF and web server can reside in a single host and the reverse proxy in another host or you can also install WAF with the Reverse proxy (Nginx).
>
> The Internet------->Reverse Prox(Public IP)---------->WAF and Apache(Private IP)
> or
> The Internet------->WAF and Reverse Prox(Public IP)---------->Apache(Private IP)
>
>
> On Fri, Mar 5, 2021 at 7:26 PM Jason Long <ha...@yahoo.com.invalid> wrote:
>> Hello,
>> I want to launch a ModSecurity or an IDS\IPS as a reverse proxy and I have some questions. I'm a beginner and I'm thankful if anyone help me. My goal is:
>>
>> The Internet --> WAF or IDS\IPS --> Web Server
>>
>> My questions are:
>> 1- On WAF server, I need Apache too?
>> 2- Should I set the web server public IP address on the WAF server and it forward all requests to my web server with a local IP address? Or both servers need separate public IP address? Or WAF needs a public IP and Web server need a local IP?
>>
>> Excuse me if my questions are odd.
>>
>> Thank you.
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
>
>
> --
>>
>> William B. Dumangeng Jr.
>>
>> ISTMS/NTMD
>>
>> Department of the Interior and Local Government
>>
>> DILG-NAPOLCOM Center
>>
>> EDSA cor. Quezon Avenue
>>
>> West Triangle Quezon City
>>
>> PH
>>
>> Tel. No. 876-3454; local 5506
>>
>>
>>
>>
>>
>>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
--
>
> William B. Dumangeng Jr.
>
> ISTMS/NTMD
>
> Department of the Interior and Local Government
>
> DILG-NAPOLCOM Center
>
> EDSA cor. Quezon Avenue
>
> West Triangle Quezon City
>
> PH
>
> Tel. No. 876-3454; local 5506
>
>
>
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Some questions about launch a reverse proxy.
Posted by William Dumangeng Jr <wb...@dilg.gov.ph>.
Reverse proxy software like Nginx, ATS or Varnish. Install any of those
software and the WAF in the same host.
On Sat, Mar 6, 2021 at 7:07 PM Jason Long <ha...@yahoo.com.invalid>
wrote:
> Hi William,
> Thank you.
> I need your second diagram:
>
> The Internet------->WAF and Reverse Prox(Public
> IP)---------->Apache(Private IP)
>
> But, which program doing Reverse Proxy? Apache?
>
>
>
>
>
>
>
>
> On Saturday, March 6, 2021, 09:01:38 AM GMT+3:30, William Dumangeng Jr <
> wbdumangeng@dilg.gov.ph> wrote:
>
>
>
>
>
> Hi;
>
> The WAF and web server can reside in a single host and the reverse proxy
> in another host or you can also install WAF with the Reverse proxy (Nginx).
>
> The Internet------->Reverse Prox(Public IP)---------->WAF and
> Apache(Private IP)
> or
> The Internet------->WAF and Reverse Prox(Public
> IP)---------->Apache(Private IP)
>
>
> On Fri, Mar 5, 2021 at 7:26 PM Jason Long <ha...@yahoo.com.invalid>
> wrote:
> > Hello,
> > I want to launch a ModSecurity or an IDS\IPS as a reverse proxy and I
> have some questions. I'm a beginner and I'm thankful if anyone help me. My
> goal is:
> >
> > The Internet --> WAF or IDS\IPS --> Web Server
> >
> > My questions are:
> > 1- On WAF server, I need Apache too?
> > 2- Should I set the web server public IP address on the WAF server and
> it forward all requests to my web server with a local IP address? Or both
> servers need separate public IP address? Or WAF needs a public IP and Web
> server need a local IP?
> >
> > Excuse me if my questions are odd.
> >
> > Thank you.
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> >
> >
>
>
> --
> >
> > William B. Dumangeng Jr.
> >
> > ISTMS/NTMD
> >
> > Department of the Interior and Local Government
> >
> > DILG-NAPOLCOM Center
> >
> > EDSA cor. Quezon Avenue
> >
> > West Triangle Quezon City
> >
> > PH
> >
> > Tel. No. 876-3454; local 5506
> >
> >
> >
> >
> >
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
--
William B. Dumangeng Jr.
ISTMS/NTMD
Department of the Interior and Local Government
DILG-NAPOLCOM Center
EDSA cor. Quezon Avenue
West Triangle Quezon City
PH
Tel. No. 876-3454; local 5506
Re: [users@httpd] Some questions about launch a reverse proxy.
Posted by Jason Long <ha...@yahoo.com.INVALID>.
Hi William,
Thank you.
I need your second diagram:
The Internet------->WAF and Reverse Prox(Public IP)---------->Apache(Private IP)
But, which program doing Reverse Proxy? Apache?
On Saturday, March 6, 2021, 09:01:38 AM GMT+3:30, William Dumangeng Jr <wb...@dilg.gov.ph> wrote:
Hi;
The WAF and web server can reside in a single host and the reverse proxy in another host or you can also install WAF with the Reverse proxy (Nginx).
The Internet------->Reverse Prox(Public IP)---------->WAF and Apache(Private IP)
or
The Internet------->WAF and Reverse Prox(Public IP)---------->Apache(Private IP)
On Fri, Mar 5, 2021 at 7:26 PM Jason Long <ha...@yahoo.com.invalid> wrote:
> Hello,
> I want to launch a ModSecurity or an IDS\IPS as a reverse proxy and I have some questions. I'm a beginner and I'm thankful if anyone help me. My goal is:
>
> The Internet --> WAF or IDS\IPS --> Web Server
>
> My questions are:
> 1- On WAF server, I need Apache too?
> 2- Should I set the web server public IP address on the WAF server and it forward all requests to my web server with a local IP address? Or both servers need separate public IP address? Or WAF needs a public IP and Web server need a local IP?
>
> Excuse me if my questions are odd.
>
> Thank you.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
--
>
> William B. Dumangeng Jr.
>
> ISTMS/NTMD
>
> Department of the Interior and Local Government
>
> DILG-NAPOLCOM Center
>
> EDSA cor. Quezon Avenue
>
> West Triangle Quezon City
>
> PH
>
> Tel. No. 876-3454; local 5506
>
>
>
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Some questions about launch a reverse proxy.
Posted by William Dumangeng Jr <wb...@dilg.gov.ph>.
Hi;
The WAF and web server can reside in a single host and the reverse proxy in
another host or you can also install WAF with the Reverse proxy (Nginx).
The Internet------->Reverse Prox(Public IP)---------->WAF and
Apache(Private IP)
or
The Internet------->WAF and Reverse Prox(Public
IP)---------->Apache(Private IP)
On Fri, Mar 5, 2021 at 7:26 PM Jason Long <ha...@yahoo.com.invalid>
wrote:
> Hello,
> I want to launch a ModSecurity or an IDS\IPS as a reverse proxy and I have
> some questions. I'm a beginner and I'm thankful if anyone help me. My goal
> is:
>
> The Internet --> WAF or IDS\IPS --> Web Server
>
> My questions are:
> 1- On WAF server, I need Apache too?
> 2- Should I set the web server public IP address on the WAF server and it
> forward all requests to my web server with a local IP address? Or both
> servers need separate public IP address? Or WAF needs a public IP and Web
> server need a local IP?
>
> Excuse me if my questions are odd.
>
> Thank you.
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
--
William B. Dumangeng Jr.
ISTMS/NTMD
Department of the Interior and Local Government
DILG-NAPOLCOM Center
EDSA cor. Quezon Avenue
West Triangle Quezon City
PH
Tel. No. 876-3454; local 5506