Using Pound as a reverse Proxy

Requirements: You have OpenSSL installed and created a certificate.

Assumptions:

• You have OpenACS 5.2 installed (branch oacs-5-2) under /www/service0
• Your Server has the IP-Address 1.2.3.4
• Pound is running on Port 443 under user "root" and group "users"
• AOLserver on 127.0.0.1, Port 10000
• Your certificate is under "/www/service0/certs/certificate.pem"

For an alternative of pound, see Nginx with a sample configuration from Malte.

In order to use Pound for Load-Balancing and SSL encryption follow the below steps. Call "man pound" for a detailed description of the used parameters.

1. Install Pound

   cd /opt/src
   wget http://www.apsis.ch/pound/Pound-2.1.6.tgz
   tar xzpf Pound-2.1.6.tgz
   cd Pound-2.1.6
   ./configure
   make
   make install

2. Configure Pound

   emacs /usr/local/etc/pound.cfg/usr/local/etc/pound.cfg

   User            "root"
   Group           "users"
   LogLevel        0
   Alive           10

   ListenHTTPS
               Address 1.2.3.4
               Port 443
               Cert "/www/service0/certs/certificate.pem"
               xHTTP 2
               HeadRemove "X-SSL-Request"
               HeadRemove "X-Forwarded-For"
               AddHeader  "X-SSL-Request: 1"

               Service
                   URL ".*"
                   BackEnd
                           Address 127.0.0.1
                           Port 10000
                   End
               End
   End

3. Configure AOLserver

   emacs /www/service0/etc/config.tcl

   set httpport              10000
   set address               127.0.0.1

4. Start Pound+AOLserver