Forum

Hallo Hugo,

Szenario: Hiawatha should be frontend with ReverseProxy for the full content. Maybe caching.
Behind are some other webservers. In the test is one Hiawatha frontend and a second is backend for the content.
The first Hiawatha has Firetable with outgoing ip.

The config is:

VirtualHost {
   Hostname = frontend1.net
   WebsiteRoot = /var/www/hiawatha1
   ReverseProxy ^/.*  http://backend2.net/
}

VirtualHost {
   Hostname = frontend2.net
   WebsiteRoot = /var/www/hiawatha2
   ReverseProxy ^.*  http://backend2.net/
}

But I get only get 503.
Should ^/.* or ^.* not send all incl. index.[html|php] to the backend[1..2].net ?

Whats wrong in my thinking. Did I forget anything?

Thanks for your Help.

Hiawatha version: 9.2
Operating System: Debian Wheezy

Have you tested the backends? Can the 503 because of a non-available FastCGI PHP server? At the frontend, does backend[12].net resolve to the right IP address?

What happens when you use the ip of backend[12] instead of hostname?

Another thing to check. Does de backend webserver have hostnames set as a host / virtualhost?
Taken from the manpage:

When <hostname> is an IP address, the value of the Host HTTP header is unchanged. Otherwise, it is replaced with the value of <hostname>

Is it possible to check http://backend[12].net via the browser? If so does that work?

1. yes backends are available from web (http:...)
2. there was no PHP in hiawatha.conf active
3. dns-resolv ok, ping was 100% lost. I looks like being baned from FreeBSD pf.conf <brutforce>
--> changing ReverseProxy ^.* http://backend2.net/ to ReverseProxy ^.* http://www.google.de/ was successful in the test
@Martijn IP should work too, later it will an IP 10.0.0.0/8 on eth1 this constellation was only for test.
Problem solved.

Question. will hiawatha protect the backends with dos-detection and ip-ban, with sql-inject-detect and the full programm before it
sends the requests to the backend IPs? I think Hiawtha will, the question is only for being sure. Thanks to Hugo and Martijn.

Flushing <brutforce> in pf soleved problem to backend2 too.

The SQL injecfion and DoS protection also works for the reverse proxy.

Thats great. Thank you.