Setting up a Secure Reverse Proxy

Before setting up secure reverse proxying, you should be familiar with digital certificates, Certificate Authorities, and authentication.

Setting up a secure reverse proxy is almost the same as setting up an insecure reverse proxy. The only difference is that you need to specify HTTPS as the protocol for the files to be encrypted.

The following instructions explain how to set up your secure reverse proxy according to the configuration scenario you choose. To demonstrate how to set up mappings, the instructions suppose that you have a web server called http.site.com and that you want to set up a secure reverse proxy server called proxy.site.com. When following the steps, substitute the name of your web server and proxy for the example names used in the directions.

Secure Client to Proxy

To set up secure client to proxy

Steps

1. Access the Server Manager, and click the URLs tab.

2. Click the Create Mapping link.

   The Create Mapping page displays.

3. In the page that appears, set up regular and reverse mappings in the following manner:

   Regular mapping:

   Source prefix: https://proxy.mysite.com

   Source destination: http://http.mysite.com/

   Reverse mapping:

   Source prefix: http://http.mysite.com/

   Source destination: https://proxy.mysite.com/

4. Save and apply your changes.

   To see the mappings you just created, click the link called View/Edit Mappings.

   ---

   Note –

   This configuration will only work if your proxy server is running in secure mode. In other words, encryption must be enabled and the proxy must be restarted from the command line. To restart the proxy from the command line, go to the proxy directory and type ./start.

   ---

Secure Proxy to Content Server

To set up secure proxy to content server

Steps

1. Access the Server Manager, and click the URLs tab.

2. Click the Create Mapping link.

   The Create Mapping page displays.

3. In the page that appears, set up regular and reverse mappings in the following manner:

   Regular mapping:

   Source prefix: http://proxy.mysite.com

   Source destination: https://http.mysite.com/

   Reverse mapping:

   Source prefix: https://http.mysite.com/

   Source destination: http://proxy.mysite.com/

4. Save and Apply your changes.

   To see the mappings you just created, click the link called View/Edit Mappings.

   ---

   Note –

   This configuration will only work if your content server is running in secure mode.

   ---

Secure Client to Proxy and Secure Proxy to Content Server

To set up secure client to proxy and secure proxy to content server

Steps

1. Access the Server Manager, and click the URLs tab.

2. Click the Create Mapping link.

   The Create Mapping page displays.

3. In the page that appears, set up regular and reverse mappings in the following manner:

   Regular mapping:

   Source prefix: https://proxy.mysite.com

   Source destination: https://http.mysite.com/

   Reverse mapping:

   Source prefix: https://http.mysite.com/

   Source destination: https://proxy.mysite.com/

4. Save and Apply your changes.

   To see the mappings you just created, click the link called View/Edit Mappings.

   ---

   Note –

   This configuration will only work if your proxy server and content server are running in secure mode. In other words, for the proxy, encryption must be enabled and the proxy must be restarted from the command line. To restart the proxy from the command line, go to the proxy directory and type ./restart.

   ---