On Thu, 2008-02-21 at 21:30 +0100, Udo Rader wrote:
> Hi,
> 
> I have the following setup:
> 
> an externally reachable https server with mod_proxy enabled that should
> reverse proxy requests to other servers within the DMZ:
> 
> inet ---> https reverse proxy ---> http hosts
> 
> Now everything "almost" works, except for some (not all) urls not
> correctly rewritten, most notably stylesheet urls.
> 
> When the orginal (internal) url would look like
> 
> http://internal.example.com/css/style.css
> 
> the reverse proxy converts it into
> 
> http://reverseproxy.example.com/css/style.css
> 
> instead of the correct
> 
> https://reverseproxy.example.com/css/style.css
> 
> Unfortunately I don't seem to be able to overcome this problem, so maybe
> someone else has an idea ...
> 
> My reverse proxying configuration looks like this:
> 
> --------CUT-------
> ProxyPass /someApp/ http://internal.example.com/someApp/
> ProxyHTMLURLMap http://internal.example.com/someApp/ /someApp
> 
> <Location /someApp/>
>         ProxyPassReverse /
>         SetOutputFilter  proxy-html
>         ProxyHTMLURLMap  /      /someApp/
>         ProxyHTMLURLMap  /someApp  /someApp
> </Location>
> --------CUT-------
> 
> As you see, I've also included mod_proxy_html, but that does not change
> anything.

So in order to solve the riddle myself, the problem was really well
hidden and not due to a the configuration I posted above.

The problem was that I had mod_deflate globally enabled for the https
host (being not only a reverse proxy but also a "regular" webserver as
well), resulting in mod_deflate obviously having some precedence over
mod_proxy_html and that again resulting in mod_proxy_html not converting
anything.

Disabling mod_deflate globally and enabling it only where I really
needed it, solved the problem.

However, this looks like a mod_proxy_html <=> mod_deflate interaction
problem.

-- 
Udo Rader

bestsolution.at EDV Systemhaus GmbH
http://www.bestsolution.at


> 

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to