Welcome! Log In Create A New Profile

Advanced

Re: nginx as fwd-proxy to an https server

March 19, 2012 07:06PM
On Mon, 2012-03-19 at 23:28 +0100, Gelonida N wrote:
> If I understood well, the 'normal' setup is to
> let the client talk via https to nginx and to have all servers
> behind nginx talk plain http.
>

> However I have one setup, where I'd like to have an encrypted
> communication between nginx and one of the other servers (which cannot
> be reached directly by the web client)
>
> web client --https--> nginx --https--> another server

This is perfectly normal too, although probably less common.

> Nginx may be able to intercept (decrypt) the request (no security issue
> for the given setup), but it would also be fine if nginx wouldn't be
> able to decrypt the communication.

Nginx will need to decrypt the data in order to re-encrypt it for the
second leg.

> The remote server is also running nginx, but has however another
> certificate.

Won't matter.

> Any suggestions / recommendations for such a setup?

It is just as you described. Just use https:// as the scheme rather
than http:// in your proxy_pass directive.

Regards,
Cliff


_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

nginx as fwd-proxy to an https server

Gelonida N March 19, 2012 06:30PM

Re: nginx as fwd-proxy to an https server

Cliff Wells March 19, 2012 07:06PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 78
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready