Hi Joel,

when setting up proxies, beware of character translations in URIs ( especially /), or you'll encounter problems with zone installations or faulty pkg search results (returning matches matching the query string up to first /).

Also avoid squid as it has documented allowed fault tolerance for caches and pkg will choke on that.

Apache proxy works for us after some tweaking:
    AllowEncodedSlashes NoDecode
    ProxyRequests off

Regards
Hark

On 11/24/11 10:02 AM, Joel Feltes - LuxairGroup wrote:
Hello Bart,

So if I see well, It cannot be configured via the SMF but have to use a
reverse proxy config.

I had found this documentation, but thought there would be an other way
using the svccfg command.

Just to explain why I'm asking this:
I'm preparing a new DMZ environment within our company with Solaris 11
servers and I think my network team will kill me if I ask them to open
different ports from the DMZ to the server-range just for accessing
different IPS repository. Having one address with one port will be a
much easier config on the firewall's (just keep it easy if possible).

But I can live with the solution documented, but I think I will do this
config on my reverse proxy and do not touch the httpd.conf of the repo
server.

Thank's for you help

Joel




On 24.11.11 00:39, Bart Smaalders wrote:
On 11/23/11 14:20, Joël Feltes - Luxair wrote:
Hello,

Hoping writing to the right person.
My name is Joël and I'm from Luxembourg (Europe). We met on OOW2011
in the exhibition hall (like many other people).

I'm searching for a while to create different IPS repositories on my
network by using the standard http-port and seperating them by
different subdirectories under my doc-root instead of different
ports, so for example:

Instead of creating:
http://myrepo.mydomain:11123
http://myrepo.mydomain:11124
http://myrepo.mydomain:11125

I would like to have:
http://myrepo.mydomain/repo1
http://myrepo.mydomain/repo2
http://myrepo.mydomain/repo3

Is this possible, or not?
I can't find a documentation on this.


Hi Joël!

We use apache for this.

You'll find what you want in
http://docs.oracle.com/cd/E23824_01/pdf/E21803.pdf
on page 28.

I'll be out of the office for a business trip for a couple of weeks;
[email protected] is an alias the IPS team monitors closely.

Hope this helps!

- Bart


_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss

Reply via email to