Protocol proxy?

["Monks, Peter" <pe...@vignette.com>]

G'day everyone,
 
I was just wondering whether anyone knows of, or has implemented a
"protocol proxy" for Subversion?

What I'm envisaging is an equivalent of the SVN Apache plugin that
instead of operating on a local repository, would proxy all requests
on to a repository that is located elsewhere and is served by either
the svn://, http:// or https:// protocols.

The use case is that we have an existing Subversion repository housed
on a server inside the firewall that we wish to make accessible
outside the firewall.  However for a variety of reasons we are unable
to expose the server directly - instead I was hoping to configure some
kind of proxy outside the firewall that would forward all requests
to the internal server.

In this specific instance the internal server is accessible via the
svn:// protocol and we'd like to configure the external proxy to use
https://, but I'm thinking that other combinations would also be
useful.

Is such a thing possible?  If so, does anyone know where I might find
such a beast?

Thanks!
Peter
 
----------------------------------------------------------------------
Peter Monks                             http://www.sydneyclimbing.com/
pmonks@sydneyclimbing.com      http://www.geocities.com/yosemite/4455/
---------------------------------------------------------------------- 


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org

Re: Protocol proxy?

[Dominic Anello <da...@danky.com>]

On 2005-01-05 16:43:58 -0600, Monks, Peter wrote:
----8<---- 
> Is such a thing possible?  If so, does anyone know where I might find
> such a beast?

I don't know of anything for the svn:// protocol, but Apache's ProxyPass
directive should work for https and http.

You would put the something like the following in the proxy server's
httpd.conf file:

LoadModule proxy_module      modules/mod_proxy.so
LoadModule proxy_http_module modules/mod_proxy_http.so
#...
ProxyRequests off
ProxyPass        /repos http://internal-server/repos
ProxyPassReverse /repos http://internal-server/repos

I just tested this by proxying our in-house repo through my 
workstation's instance of apache and it looks like it works for ls, co,
and log. The upside of this method is that you wouldn't even need to
have SVN installed on the proxy machine.  There's also no reason why
your internal machine can't serve the same repo with both protocols,
even if the proxy is the only client that uses the http:// protocol.

-Dominic