topic Re: Reverse Proxy with SSL in Alfresco Archive

Reverse Proxy with SSL

borki — Wed, 22 Feb 2006 10:40:03 GMT

HiWe tried to reverse-proxy Alfreso with Apache/SSL in order to support secure access.We did the following:1. Create a local socket in tomcat/conf/server.xml <Connector port="8081" address="127.0.0.1" maxHttpHeaderSize="8192" debug="5" maxThreads="150" minSpareThreads="25" maxSpa

Re: Reverse Proxy with SSL

macbar — Mon, 27 Feb 2006 17:45:29 GMT

There are better ways to reverse proxy using apache, like mod_proxy, or in the case of tomcat/jboss apps, mod_jk.

However, I have to say that both approaches have their problems right now:

using mod_jk (version 1.2.14), using the webdav interface from within Mac OS X's Finder ( and presumable other webdav clients) does not work.
(apache logs say: PROPFIND /alfresco/webdav HTTP/1.1: 404)

using mod_proxy, using the webdav interface does work, but not for renaming or moving files.

Pieter.

Re: Reverse Proxy with SSL

borki — Tue, 28 Feb 2006 08:16:44 GMT

In fact, using a RewriteRule with [P] flag is calling mod_proxy in the background. We see absolutely no indication, why this should not work since we are proxying every application we want to access from the Internet. This works for all kinds of apps (PHP stuff, Java/Tomcat stuff, CGIs, etc.).

WebDAV may be another problem, because it uses other HTTP methods which mod_jk/mod_proxy probably can not handle corectly (the normal web frontend only uses GET and POST, WebDAV also uses PROPFIND and maybe others..)

Any other ideas?

-Reto

Re: Reverse Proxy with SSL

tryke — Tue, 28 Feb 2006 20:03:25 GMT

Actually this is a bug in mod_proxy. Check http://issues.apache.org/bugzilla/show_bug.cgi?id=37145

Works fine for me.

t.

Re: Reverse Proxy with SSL

borki — Tue, 28 Feb 2006 21:05:16 GMT

You're right, thanks a lot…

Regards,
Reto

Re: Reverse Proxy with SSL

alarocca — Fri, 20 Jul 2007 05:07:03 GMT

I still have that issue (return-page parameter has not been supplied) using Apache 2.2.4, Alfresco 2.0 and mod_proxy (both ajp and http). Do you have any solution?

Best regards,
Alessandro