Re: SSL Reverse Proxy

["Vic Parat (NSS)" <vic.parat () nssecurity com>]

F5 networks covers this nicely with their various products (BigIp,3DNS)
depending on the type of redirection you want to do.  www.f5.com.  Can be
pricey.


----- Original Message -----
From: "Andrea Cogliati" <AndreaC () gotech it>
To: <security-basics () securityfocus com>
Sent: Monday, April 28, 2003 4:06 AM
Subject: SSL Reverse Proxy


Guys,

We are looking for a reverse-proxy supporting both http and https,
capable of terminating the client connections and redirecting the
requests based on URL  (something like MS ISA); caching would be nice to
have but, definitely, not mandatory; must run on OpenBSD and/or Linux.

We already know the security implications of this approach. We basically
need to share the same SSL certificate and the same DNS name between two
different servers. That is, https://mydomain.com/appA and
https://mydomain.com/appB, where requests to the first URL will be
handled by server A, and those to the latter by server B. Any hints?

Thank you in advance for any advice.

Andrea

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the
world's premier event for IT and network security experts.  The two-day
Training features 6 hand-on courses on May 12-13 taught by professionals.
The two-day Briefings on May 14-15 features 24 top speakers with no vendor
sales pitches.  Deadline for the best rates is April 25.  Register today to
ensure your place.  http://www.securityfocus.com/BlackHat-security-basics
----------------------------------------------------------------------------


---------------------------------------------------------------------------
FastTrain has your solution for a great CISSP Boot Camp. The industry's most 
recognized corporate security certification track, provides a comprehensive 
prospectus based upon the core principle concepts of security. This ALL INCLUSIVE curriculum utilizes lectures, case 
studies and true hands-on utilization 
of pertinent security tools. For a limited time you can enter for a chance 
to win one of the latest technological innovations, the SEGWAY HT. 
Log onto http://www.securityfocus.com/FastTrain-security-basics 
----------------------------------------------------------------------------