How to configure communication between pound reverse proxy and heartbeat web server?

Discussion in 'Installation/Configuration' started by uniread, Sep 29, 2008.

  1. uniread

    uniread New Member

    I have 3 ubuntu servers with IP adresses 42, 43, 44. On 42 there is pound reverse proxy. 43,44 are apache web servers in which i have installed heartbeat. but my query is how to configure communication between pound and these two hearbeat web servers. And if pound server will accept any user request and as it is load balancer,then to which web server(heartbeat) it will send user request? How heartbeat will react to this?

    I will appretiate help.

    Thanks in advance.

    uniread
     
  2. falko

    falko Super Moderator Howtoforge Staff

  3. uniread

    uniread New Member

    Thank you falko,,this tutorial is really helpful.:)
     
  4. techistore

    techistore New Member

    Guys,

    First I must say thank you for making reverse proxy so easy to configure and making techs life easy. I am running Pound 2.4.3 on RHEL5 server. I have three websites each running on separate webserver in internal network. I would like to reverse proxy them via one Pound server in DMZ. All three websites require secure connections for client and I like to install the certificates on the pound server for them. I have assigned three IPs on the pound server, one for each website. But these sites are not working. Below is my configuration.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    ListenHTTP
    Address 202.168.1.1
    Port 80
    Service
    Redirect "https://www.abc.com"
    End
    End

    ListenHTTPS
    Address 202.168.1.1
    Port 443
    Cert "/usr/local/openssl/local.server.pem"
    End
    Service
    BackEnd
    Address 172.17.1.1
    Port 80
    End

    End
    ListenHTTP
    Address 202.168.2.2
    Port 80
    Service
    Redirect "https://www.def.com"
    End
    End

    ListenHTTPS
    Address 202.168.2.2
    Port 443
    Cert "/usr/local/openssl/local1.server.pem"
    End
    Service
    BackEnd
    Address 172.17.2.2
    Port 80
    End


    End
    ListenHTTP
    Address 202.168.3.3
    Port 80
    Service
    Redirect "https://www.ghi.com"
    End
    End

    ListenHTTPS
    Address 202.168.3.3
    Port 443
    Cert "/usr/local/openssl/local2.server.pem"
    End
    Service
    BackEnd
    Address 172.17.3.3
    Port 80
    End

    End

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    I am redirecting HTTP requests to HTTPS as I would only like to serve clients on secure channel. This works fine if I run each website on a separate pound server but I like to have them on one reverse proxy server. I will really appreciate if you can provide me any help in this regard. If it is not possible with this configuration is there any way to achieve this on a single pound server.

    Thanks,
    Techi
     
  5. falko

    falko Super Moderator Howtoforge Staff

    I think the problem is that you can have just one SSL cert per IP address. And if your Pound is listening on just one IP address, it serves three SSL certs on that IP.
     
  6. techistore

    techistore New Member

    Pound is listening on all three IP addresses and each certificate is configured on a separate IP address under the ListenHTTP tag.
     

Share This Page