Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 15 Jun 2004 15:04:59 +0300
From:      Haim Ashkenazi <haim@babysnakes.org>
To:        freebsd-stable@freebsd.org
Subject:   Re: need suggestions for reverse proxy
Message-ID:  <pan.2004.06.15.12.04.55.166312@babysnakes.org>
References:  <pan.2004.06.14.09.41.50.727310@babysnakes.org> <20040614111822.1564.qmail@web14106.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 14 Jun 2004 13:18:22 +0200, Claus Guttesen wrote:

>> I'm looking for a reverse proxy for https to protect
>> an IIS server. at the
>> moment I'm using "pound" but then the IIS doesn't
>> recognize where the
>> original request came from so I can't do things like
>> allow,deny from a
>> certain IP or use awstats. It should be able to deal
>> with sessions and
>> load balancing (although at the moment I only have
> 
> You may try squid, although I doubt that squid works
> with https in your setup. Squid needs to know the
> private keys in order to decrypt the session-info so
> it can be session-aware. One way to deal with this is
> to let squid decrypt and pass it on to IIS as
> cleartext. Squid is capable of removing unwanted
> URL's.
> 
> But statefull loadbalancing may not be squids
> strength.
well, I'll test it and see how it works...

> 
> We are using LVS (Linux Virtual Server). Although I
> would have preferred a BSD-solution, nothing beats LVS
> in terms of scalability. Had an old 486 with 64 MB
> RAM, which could handle more than 10.000 unique
> visitors a day.
how would it help me? the web server has to sit on IIS.

thanx
-- 
Haim




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?pan.2004.06.15.12.04.55.166312>