Hi Jan,
From: Jan Just Keijser [mailto:[email protected]]
Sent: donderdag 19 juni 2014 16:28
To: Witvliet, J, DMO/OPS/I&S/HIN; [email protected]
Subject: Re: [Openvpn-users] http-proxy
Hi Hans,
On 19/06/14 16:07, [email protected]<mailto:[email protected]> wrote:
Hi all,
Just visited another ministerial department, where the also might using or
openvpn-set-up.
As predictable, a whole new list of challenges ...
One of them is related to the use of http encapsulation:
At the a client you can configure that all traffic should go to
proxy.company.org, port 443
And that its content should go to vpn_node_22.company.org, tcp port 5000.
But what if you also want:
Some content should go to vpn_node_22.company.org, tcp port 5010.
So, Is it possible to configure a reversed-proxy like apache or squid to
support multiple different destinations?
What I've seen so far from the docu, is that they sort-off rewrite the
http-header
I am not sure if I understand your question:
if a http proxy is used to restrict or redirect client access , then the http
proxy server can make decisions based on the incoming request, e.g.
1) clientA wants to connect to site
www.example.com:443<http://www.example.com:443>
2) clientA connects to the proxy first, request a 'CONNECT
www.example.com<http://www.example.com> 443'
3) http proxy server grants access, or might even direct access to a different
host
4) clientA talks via the http proxy with (what it think is) the remote server
OpenVPN works at the routing level, so a similar scheme would have to be
achieved using routing. It is not possible to redirect clients to different
hosts based on port numbers, but as long as src ip + dest ip are
distinguishable then you can route traffic any way you like (on the openvpn
server).
Does this answer your question? if not, then please elaborate.
Partly.....
Imagine two clients, client-A and client-B
They BOTH connect to site www.example.com:443<http://www.example.com:443>
But in the config of client-A it indicates to openvpn server openvn.example.com
1500 tcp
and in the config of client-B it indicates to openvpn server openvn.example.com
1510 tcp
So, both users share the same proxy, but should end up on different
vpn-servers...
Hans
______________________________________________________________________
Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet
de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u
verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat
aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband
houdt met risico's verbonden aan het electronisch verzenden van berichten.
This message may contain information that is not intended for you. If you are
not the addressee or if this message was sent to you by mistake, you are
requested to inform the sender and delete the message. The State accepts no
liability for damage of any kind resulting from the risks inherent in the
electronic transmission of messages.
------------------------------------------------------------------------------
HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions
Find What Matters Most in Your Big Data with HPCC Systems
Open Source. Fast. Scalable. Simple. Ideal for Dirty Data.
Leverages Graph Analysis for Fast Processing & Easy Data Exploration
http://p.sf.net/sfu/hpccsystems
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
