Hi Guys,

I just wanted to check and see if what i want would be possible with NGINX.

I have 3 different types of services:
- HTTP/HTTPS Websites
- Windows RDP Sessions
- Linux SSH Sessions

What i would like to do is let my students logon to my website (PHP/MySQL) and if they are, only then they have access to each of those services.

Now the problem is they access these services DIRECTLY, so with RDP they directly go to the IP address on port 3389.

So my thinking was i create a NGINX proxy server which accepts the connection, checks if they are logged in preferably via a PHP script i write, and then allows or denies the connection.
For HTTP/HTTPS i think this won't be a problem, but how about the RDP and SSH sessions? I read something about TCP streams should work, but how would the authentication work?

Love to hear (creative) suggestions!

Thanks!

You might be able to pass authentication tokens between http {} and stream {} via Lua and shared_dict.
Have a look at the Lua API for stream.
https://github.com/openresty/stream-lua-nginx-module

---
nginx for Windows http://nginx-win.ecsds.eu/