Apache reverse proxy

[tsmalmbe]

I have a RAQ4 in the shelf. Wondering what to do with it. I'm not willing to spend all my spare time, so I'm looking at strongbolt. Now, how about using the server as a reverse proxy? Would that be possible with the current Apache on Strongbow? I need to host several webcams, and most of them are of the same make/model so a scheme of

mysite.com/cam1 -> 192.168.100.50/mjpeg.cgi
mysite.com/cam2 -> 192.168.100.51/mjpeg.cgi
mysite.com/cam3 -> 192.168.100.52/mjpeg.cgi
mysite.com/cam4 -> 192.168.100.53/mjpeg.cgi

is what I need. This should be achievable using Apache.

This is a surveillance solution, not pr0n. Just FYI.

I'll be running a velociraptor as my FW (RAQCOP), but that doesn't do reversing either.

[Titox]

Not the same case of you but today I put online my second RaQ4 with a new domain. The first RaQ4 does Reverse Proxy perfectly. First server and proxy is Strongbolt and the second one Strongbolt 2. Easy to setup, this must work.

Not sure but Raqcop/ipCop can load the Squid module, maybe it does reverse proxy.

Alberto

[karldonteljames]

hi titox, i have seen a couple of your posts and notice you also have a velociraptor, i have one of these running IPcop and have just purchased two raq4's i have installed strongbolt2 onto one of them, could you tell me how you managed to setup reverse proxy please? i have a dyndns account, but what i would like is for xx1.xxx.dyndns.org to go to one ip camera, xx2.xxx.dyndns.org to go to another, and so on for another 2. could you tell me how you managed this please? also, when i browse to xxx.dyndns.org it diverts to port 444, can this be changed?

Cheers.

Karl

[karldonteljames]

Thanks to TITOX,
I took at look at your blog,and after only a short time have managed to setup reverse proxy to three devices in my house.

I connected via terminal, and run the following command:

vi /etc/httpd/conf/httpd.conf

Then scrolled to the bottom of the file, not sure it makes much of a difference but the files arecreated logically, so i made sure that that i followed that logic.

You can make the reverese proxy listen on the same port and same ip, as long as you give a differnt server name for each.

I have an RAQCOP firewall which forwards all port 80 traffic to my raq4, which is on the orange segment, as are my remote devices, (Axis IP Cameras) this ten forwards the requests to the relevant devices and means i can connect to each of them on port 80 with only one public IP address using dyndns. i have a pro service (1.99 a month i think) which allows me to use wild cards. Make surethat wild cards are enabled in your firewall when you setup the dyndns.

Hope this saves someone alot of time, its taken me a bout week of searching to figure out reverse proxy. hopefully this will help someone.

Below is a copy of the three groups i added to the conf file.

<VirtualHost 192.168.12.1:80>
ServerAdmin name@mydomain.co.uk
ServerName 1.name.dyndns.org
ServerAlias 1.name.dyndns.org
ErrorLog logs/reverse_log

ProxyRequests On

<Proxy *>
Order deny,allow
Allow from all
</Proxy>

ProxyPass / http://192.168.12.2/
ProxyPassReverse / http://192.168.12.2/

</VirtualHost>

<VirtualHost 192.168.12.1:80>
ServerAdmin name@mydomain.co.uk
ServerName 2.name.dyndns.org
ServerAlias 2.name.woods.dyndns.org
ErrorLog logs/reverse_log

ProxyRequests On

<Proxy *>
Order deny,allow
Allow from all
</Proxy>

ProxyPass / http://192.168.12.3/
ProxyPassReverse / http://192.168.12.3/

</VirtualHost>

<VirtualHost 192.168.12.1:80>
ServerAdmin name@mydomain.co.uk
ServerName 3.name.dyndns.org
ServerAlias 3.name.dyndns.org
ErrorLog logs/reverse_log

ProxyRequests On

<Proxy *>
Order deny,allow
Allow from all
</Proxy>

ProxyPass / http://192.168.12.4
ProxyPassReverse / http://192.168.12.4

</VirtualHost>

[Titox]

Sorry to not reply before but I'm very busy at the moment and I don't have enough time to surf the web.

Nice to see you have the reverse proxy running in Strongbolt. My previous tests were not entirely satisfactory, so I started to work with Pound. I had it compiled in ipCop with a modified OpenSSL (to support threads) but I never tried it... and it was one year ago...

Alberto.