Apache Integration with HTTPS Support

You are here
Apache Integration with HTTPS Support

Disclaimer

The information below is solely for setting up an Apache Proxy for use with MyConnection Server (MCS).

Apache has a wealth of setup options, that directly affect server security, and should be carefully reviewed to assess if they are required. We highly recommend working in tandem with the appropriate network security lead to ensure correct setup.

Visualware are not liable for any issues that arise from incorrect setup.

Click here to review the offical Apache Security tips documentation. Note the version of Apache as this may have changed since the writing of this disclaimer.

Overview

MyConnection Server supports being implemented as a proxy service to Apache. This is achieved when MyConnection Server is installed through Apache's reverse proxy shared object interface. This approach allows the Apache services to be the sole front end to the MyConnection Server services. This enables support of both HTTP and HTTPS.

To implement MySpeed Server as a reverse proxy with Apache requires several steps to amend the Apache configuration file HTTPD.conf

Setup the Apache shared objects

Modify live Apache httpd.conf.

Locate the LoadModules section in the HTTPD.conf and amend  as follows:

=====================================
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule proxy_connect_module modules/mod_proxy_connect.so
=====================================

Please note that the three listed Apache shared object modules need to be installed and present on the Apache Server  for the proxy interface to work successfully.

Setup the Apache Server proxy definition

Locate the mod_proxy definition section in the HTTPD.conf and amend as follows:

=====================================
<IfModule mod_proxy.c>
ProxyRequests Off
ProxyPreserveHost On
=====================================

The two lines following this declaration define the destination IP-address which is the address and port that you have installed the MySpeed Server on.

This (for now) must be an IP-address on this machine, i.e. Apache and MySpeed Server must be installed on the same physical server

ProxyPass                     /myspeed/       http://192.168.100.22:7450/myspeed/
ProxyPassReverse       /myspeed/       http://192.168.100.22:7450/myspeed/

<Proxy *>
Order deny,allow
Deny from all
Allow from 192.168.100.

Note: The allow statement above indicates only those IP addresses that are permitted to do this reverse proxy (or see/invoke) MySpeed
</Proxy>
======================================

Note the IP address used is for example only. Substitute the actual IP address that is being used to access the Apache Server application.

Test the MyConnection Server proxy interface

Test the proxy interface using Apache Server URL defined in step 2, example  http://192.168.100.22/myspeed/

This URL will result in the MySpeed Server main menu hosted page to be served by the Apache Server