View · Index

Using Pound as a reverse Proxy

Requirements: You have OpenSSL installed and created a certificate.

Assumptions:

  • You have OpenACS 5.2 installed (branch oacs-5-2) under /www/service0
  • Your Server has the IP-Address 1.2.3.4
  • Pound is running on Port 443 under user "root" and group "users"
  • AOLserver on 127.0.0.1, Port 10000
  • Your certificate is under "/www/service0/certs/certificate.pem"

For an alternative of pound, see Nginx with a sample configuration from Malte.

In order to use Pound for Load-Balancing and SSL encryption follow the below steps. Call "man pound" for a detailed description of the used parameters.

  1. Install Pound

    cd /opt/src
    wget http://www.apsis.ch/pound/Pound-2.1.6.tgz
    tar xzpf Pound-2.1.6.tgz
    cd Pound-2.1.6
    ./configure
    make
    make install

  2. Configure Pound

    emacs /usr/local/etc/pound.cfg/usr/local/etc/pound.cfg

    User            "root"
    Group           "users"
    LogLevel        0
    Alive           10

    ListenHTTPS
                Address 1.2.3.4
                Port 443
                Cert "/www/service0/certs/certificate.pem"
                xHTTP 2
                HeadRemove "X-SSL-Request"
                HeadRemove "X-Forwarded-For"
                AddHeader  "X-SSL-Request: 1"

                Service
                    URL ".*"
                    BackEnd
                            Address 127.0.0.1
                            Port 10000
                    End
                End
    End

  3. Configure AOLserver

    emacs /www/service0/etc/config.tcl

    set httpport              10000
    set address               127.0.0.1

  4. Start Pound+AOLserver

 

 

previous October 2024
Sun Mon Tue Wed Thu Fri Sat
29 30 1 (1) 2 3 4 5
6 7 8 9 10 11 12
13 14 15 16 17 18 19
20 21 22 23 24 25 26
27 28 29 30 31 1 2

Popular tags

17 , 5.10 , 5.10.0 , 5.10.1 , 5.9.0 , 5.9.1 , ad_form , ADP , ajax , aolserver , asynchronous , bgdelivery , bootstrap , bugtracker , CentOS , COMET , compatibility , CSP , CSRF , cvs , debian , docker , docker-compose , emacs , engineering-standards , exec , fedora , FreeBSD , guidelines , host-node-map
No registered users in community xowiki
in last 30 minutes
Contributors

OpenACS.org