Forum Moderators: phranque

Message Too Old, No Replies

Apache reverse proxy to backend SSL service

mod_ssl

         

carteran

11:24 pm on Sep 22, 2011 (gmt 0)

10+ Year Member



Greetings,

I'm new to SSL proxying in apache and want to establish an understanding of how mod_ssl and reverse proxying works - I've been unable to find anything definitive up to now. We have a reverse proxy server(apache2) in our DMZ with a certified UC MultiSAN SSL certificate (recently acquired) covering a bunch of service alternate names which use SSL. We then have a range of backend web servers (apache, tomcat, IIS) on our private network which are accessible via the reverse proxy. We want encryption from the client to the backend. I want to understand how SSL works from the client on the internet right through to the backend server particularly how the reverse proxy component handles the transfer. do I need one certificate on the backend server and another on the reverse proxy server to have SSL encryption from client to backend. If so how is it configured?

Many thanks