RE: SSL Reverse Proxy

From: Rivera Alonso, David (drivera_at_iberdrola.es)
Date: 04/29/03

  • Next message: JM: "Re: DShield.org Recommended Block List"
    To: 'Andrea Cogliati' <AndreaC@gotech.it>, security-basics@securityfocus.com
    Date: Tue, 29 Apr 2003 09:18:01 +0200
    
    

    I think Zeus Web Server, acting as reverse proxy, does it:
    http://www.zeus.com/products/zws/

    regards from Spain,

    DAVID

    -----Original Message-----
    From: Andrea Cogliati [mailto:AndreaC@gotech.it]
    Sent: Monday, April 28, 2003 1:07 PM
    To: security-basics@securityfocus.com
    Subject: SSL Reverse Proxy

    Guys,

    We are looking for a reverse-proxy supporting both http and https,
    capable of terminating the client connections and redirecting the
    requests based on URL (something like MS ISA); caching would be nice to
    have but, definitely, not mandatory; must run on OpenBSD and/or Linux.

    We already know the security implications of this approach. We basically
    need to share the same SSL certificate and the same DNS name between two
    different servers. That is, https://mydomain.com/appA and
    https://mydomain.com/appB, where requests to the first URL will be
    handled by server A, and those to the latter by server B. Any hints?

    Thank you in advance for any advice.

    Andrea

    ---------------------------------------------------------------------------
    Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the
    world's premier event for IT and network security experts. The two-day
    Training features 6 hand-on courses on May 12-13 taught by professionals.
    The two-day Briefings on May 14-15 features 24 top speakers with no vendor
    sales pitches. Deadline for the best rates is April 25. Register today to
    ensure your place. http://www.securityfocus.com/BlackHat-security-basics
    ----------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    FastTrain has your solution for a great CISSP Boot Camp. The industry's most
    recognized corporate security certification track, provides a comprehensive
    prospectus based upon the core principle concepts of security. This ALL INCLUSIVE curriculum utilizes lectures, case studies and true hands-on utilization
    of pertinent security tools. For a limited time you can enter for a chance
    to win one of the latest technological innovations, the SEGWAY HT.
    Log onto http://www.securityfocus.com/FastTrain-security-basics
    ----------------------------------------------------------------------------


  • Next message: JM: "Re: DShield.org Recommended Block List"

    Relevant Pages

    • security-basics Digest of: get.123_145
      ... VPN to ASP a security risk? ... Re: Multiple IPSec tunnels? ... Subject: Security NT Server ... VPN to ASP a security risk? ...
      (Security-Basics)
    • << SBS News of the week - Sept 26 >>
      ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
      (microsoft.public.backoffice.smallbiz2000)
    • Re: << SBS News of the week - Sept 26 >>
      ... > And he points to the info you need to put the file on the server in the ... > at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... An attacker can exploit these flaws in tandem via specially ...
      (microsoft.public.backoffice.smallbiz2000)
    • << SBS News of the week - Sept 26 >>
      ... And he points to the info you need to put the file on the server in the ... at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... by the firewall at risk. ...
      (microsoft.public.windows.server.sbs)
    • Re: << SBS News of the week - Sept 26 >>
      ... > And he points to the info you need to put the file on the server in the ... > at the network perimeter. ... The Symantec Firewall/VPN and the Gateway Security ... An attacker can exploit these flaws in tandem via specially ...
      (microsoft.public.windows.server.sbs)

    Loading