NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
bbaraniec
May 17, 2011Luminary
SABnzbget+sickbeard+couchpotato reverse proxy https-http
Current setup:
HTTP disabled, HTTPS enabled on Pro. On router redirected port 443 to local IP of nas
Public share accessible via https://mydomain.com but without forwarding 80 I get timeout. When I try to redirect 80 external to 443 internal (ip of nas) - http://mydomain.com I'm getting error message where local IP of nas is being displayed. I don't want internal IP to be displayed.
Wish list:
1. SAB is running on https - I'm guessing 443 is already taken for webdav so I need to take something else? So reverse proxy https to https? So I can access it https://mydomain.com/sabznget
2. Sickbeard not supporting HTTPS for now but reverse proxy https://mydomain.com/sickbeard redirecting to http?
3. Couchpotato not supporting HTTPS for now but reverse proxy https://mydomain.com/couchpotato redirecting to http?
Is it possible? Can I reverse proxy from https to http? Can it be done on Pro?
HTTP disabled, HTTPS enabled on Pro. On router redirected port 443 to local IP of nas
Public share accessible via https://mydomain.com but without forwarding 80 I get timeout. When I try to redirect 80 external to 443 internal (ip of nas) - http://mydomain.com I'm getting error message where local IP of nas is being displayed. I don't want internal IP to be displayed.
Wish list:
1. SAB is running on https - I'm guessing 443 is already taken for webdav so I need to take something else? So reverse proxy https to https? So I can access it https://mydomain.com/sabznget
2. Sickbeard not supporting HTTPS for now but reverse proxy https://mydomain.com/sickbeard redirecting to http?
3. Couchpotato not supporting HTTPS for now but reverse proxy https://mydomain.com/couchpotato redirecting to http?
Is it possible? Can I reverse proxy from https to http? Can it be done on Pro?
20 Replies
Replies have been turned off for this discussion
- sphardy1ApprenticeI don't believe you can reverse proxy a HTTPS connection to a HTTP destination - from what I understand HTTPS encrypts the entire communication so the HTTP host wouldn't be able to access any of it.
- bbaraniecLuminaryApparently even in my company we have reverse proxy https -> http (inside lan) so it seems it doable.
Question remains if there are any limitations in Apache on ReadyNas. - sphardy1ApprenticeDamn! It does work... I'm sure I have tried that before as I had a specific requirement for this but had it fail
I just setup my NAS to proxy to a linux box running a simple apache install and it works fine. Also with the app I was trying to proxy before. What's weird is the setup was still in my .conf files - just commented out and now restored. So I've no idea what I did wrong before
Sorry for the bad info - bbaraniecLuminaryI will come back to this post once I get all the apps running on Nas. For now it's just theoretical discussion :)
One question remains. The problem with local ip being displayed while accessing for example http://mydomain.com/webshare instead redirecting to https://mydomain.com/webshare is on Apache site or router? Because on router I have forwarded external 80 to internal 443 (ip on nas). - sphardy1ApprenticeSorry I don't understand the question
I was referring to connecting to https://mydomain.com/something and redirecting that to an internal server at http://<internal_ip_address>. So making the internal server appear at the https address. This can be done via an Apache hack on your NAS - bbaraniecLuminarySorry it seems to easy in my head since I know configuration of my lan. I will try to explain it better this time.
I'm taking about two things:
1.HTTP to HTTPS redirect:
- lets say I have domain bartek.com (actually there is one but it's not mine)
- in Frontview I have disabled HTTP and enabled HTTPS on standard 443 port
- on router I have configured two rules:
- all traffic that comes on WAN 443 redirect to LAN NAS IP 443
- all traffic that comes on WAN 80 redirect to LAN NAS IP 443
- now I go to https://bartek.com and I land in webshare https://bartek.com/shares
- but if I type http://bartek.com instead being redirected to https://bartek.com and then to https://bartek.com/shares I get error message saying try "bla bla try https://my Nas local IP
- if I disable rule redirecting 80 to 443 if you try HTTP the communication will be refused that it
What I want to achieve is when you try HTTP you will always get redirected to HTTPS
2.ReverseProxy
- SABnzb is running on port 8080 HTTPS
- SickBeard is running on port 8081 HTTP no SSL support
- CouchPotato is running on port 5000 HTTP no SSL support
So instead of redirecting few ports and accessing http://bartek.com:8080 I want to access those services http://bartek.com/sabnzb or http://bartek.com/sickbeard
But on top of that I want to use HTTPS for all services and that's why I asked about reverse proxy from HTTPS -> HTTP. - sphardy1ApprenticeBoth requirements can be implemented via Apache settings
For HTTP to HTTPS, modify the configuration for the share to use mod_rewrite as follows:RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
To implement proxying:LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so
LoadModule proxy_connect_module /usr/lib/apache2/modules/mod_proxy_connect.so
LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so
ProxyPass /path http://<target_url>
ProxyPassReverse /path http://<target_url> - bbaraniecLuminaryCheers, like I said I will get back to it once I do more important stuff :)
- bbaraniecLuminaryI got reverse proxy to work. Well kinda. I started with Squeezebox
I can access page via https://mydomain.com/sc and log in but page is not loading
Getting error "Requested URL /home was not found". Any ideas? - sphardy1ApprenticeUnfortunately not all web apps work well with reverse proxying. There's some more info here that might help: http://wiki.slimdevices.com/index.php/C ... cumentRoot
Else - try setting up a subdomain and redirecting that to SBS as I know this works. eg if you setup the subdomain sbs.mydomain.com - your setup becomes:
<VirtualHost *:80>
ServerName sbs.mydomain.com
ProxyPass / http://localhost:9000/
ProxyPassReverse / http://localhost:9000/
SSLEngine Off
</VirtualHost>
Related Content
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!