微信公众号搜"智元新知"关注
微信扫一扫可直接关注哦!

Apache 转发代理多个位置,多重认证作为基于位置指令的身份验证

如何解决Apache 转发代理多个位置,多重认证作为基于位置指令的身份验证

目标 os 创建具有多个目的地的转发代理,并具有基于位置指令的多个证书。我一直在阅读一些配置,我想知道配置是否正确

这是基本配置:

Listen 0.0.0.0:8080
SSLProxyMachineCertificateChainFile /etc/httpd/certs/client-CAcerts.pem
SSLProxyMachineCertificateFile /etc/httpd/certs/client-certkey.pem

<VirtualHost *:8080>
    ServerName someservername.example.com
    SSLProxyEngine On
    SSLProxyCheckPeerName on
    SSLProxyCheckPeerCN on
    SSLProtocol TLSv1.2
    SSLProxyCipherSuite ECDHE-RSA-AES256-GCM-SHA384:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:ECDHE-RSA-AES256-GCM-SHA384
    ErrorLog /var/log/httpd/server-8080_error.log
    CustomLog /var/log/httpd/server-8080_access.log combined
    ProxyRequests Off
    ProxyPreserveHost Off
    <Proxy *>
    Order deny,allow
    Allow from all
    </Proxy>

以及基于位置的配置指令

<Location /a-company.com/>
    <proxy https://a-company.com>
      ProxySet timeout=301 connectiontimeout=31
      SSLProxyMachineCertificateFile "/etc/apache/certs/a-company.pem"
    </proxy>      
  </Location>
  
  <Location /b-company.com/>
    <proxy https://a-company.com>
      ProxySet timeout=301 connectiontimeout=31
      SSLProxyMachineCertificateFile "/etc/apache/certs/b-company.pem"
    </proxy>      
  </Location>

或者位置配置应该是这样的:

  <Location /a-company.com/>
    <proxy https://a-company.com>
      ProxyPass https://a-company.com:443/ timeout=301 connectiontimeout=31
      ProxyPassReverse https://b-company.com:443/
      SSLProxyMachineCertificateFile "/etc/apache/certs/a-company.pem"
    </proxy>      
  </Location>

Any help is very much appreciated.
  
  
  <Location /b-company.com/>
    <proxy https://b-company.com>
      ProxyPass https://b-company.com:443/ timeout=301 connectiontimeout=31
      ProxyPassReverse https://b-company.com:443/
      SSLProxyMachineCertificateFile "/etc/apache/certs/b-company.pem"
    </proxy>      
  </Location>

版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。