#1 2016-05-14 22:21:36

3rk
Trusted Member
Registered: 2016-05-14
Posts: 4

Reverse proxy for https (inception, NL)

Are there any plans for the NL location (inception) to support reverse proxy for https connections? (port 443) Normal http is working perfect, but i would prefer https.

Offline

#2 2016-05-15 09:41:48

vbgn
Trusted Member
Registered: 2014-08-09
Posts: 16
Website

Re: Reverse proxy for https (inception, NL)

It is not really possible to do https proxying, because it would require the https certificate for your site to be present on the physical machine.
It would be a lot of extra work for Anthony to request these certificates and keep them up-to-date.

However, you can get https if you set up a free cloudflare account, which will provide proxying of IPv4 to your IPv6 address and SSL.
There are set-up instructions at http://forum.lowendspirit.com/viewtopic.php?id=441. Although the screenshots are a bit outdated, you should still be able to figure all these things out.

Edit: http://forum.lowendspirit.com/viewtopic.php?id=2617 has an even more in-depth description

Last edited by vbgn (2016-05-15 09:43:13)

Offline

#3 2016-05-15 09:56:44

3rk
Trusted Member
Registered: 2016-05-14
Posts: 4

Re: Reverse proxy for https (inception, NL)

Thanks for your articles! I'll give it a try. Especially since I was going to add geoDNS later on anyway, so I might just include this solution now.

Anyway, it's not that hard to setup HAProxy to reverse proxy the traffic with SSL PassThrough, is it? I was more looking for a solution like that.. (see second part on: https://serversforhackers.com/using-ssl … th-haproxy for example)

Edit: typos.

Last edited by 3rk (2016-05-15 09:57:05)

Offline

#4 2016-05-15 10:04:26

Backtogeek
Low End Boss
From: ~/
Registered: 2013-02-13
Posts: 3,498
Website

Re: Reverse proxy for https (inception, NL)

Its not 'that' simple either sadly, its being worked on though.


http://LittleHappyCloud.net KVM VPS with 1TB Bandwidth for €3.00

Offline

#5 2016-05-15 10:42:46

3rk
Trusted Member
Registered: 2016-05-14
Posts: 4

Re: Reverse proxy for https (inception, NL)

Backtogeek wrote:

Its not 'that' simple either sadly, its being worked on though.

Good hearing that smile

Offline

#6 2017-04-18 17:28:55

clemente
Member
Registered: 2017-04-18
Posts: 1

Re: Reverse proxy for https (inception, NL)

For now, you could add this as a limitation in http://lowendspirit.com/help.html, where you speak about haproxy and its limitations, just mention HTTPS or SSL so that it's easier to find it through a search engine. Or link to here.

Offline

#7 2017-04-18 21:49:28

Backtogeek
Low End Boss
From: ~/
Registered: 2013-02-13
Posts: 3,498
Website

Re: Reverse proxy for https (inception, NL)

fair enough, I will add that.


http://LittleHappyCloud.net KVM VPS with 1TB Bandwidth for €3.00

Offline

#8 2017-05-05 02:22:19

PeterL
Trusted Member
Registered: 2014-06-03
Posts: 30

Re: Reverse proxy for https (inception, NL)

In theory you could support it using SNI, but not all browsers support it: https://www.haproxy.com/blog/enhanced-s … extension/

YMMV and personally I think it's more pain than it's worth.

If you need to host something on 443 and do full HTTPS sessions then buy a dedicated VPS with your own dedicated IP and run it on that.

Offline

Board footer