Question

我正在使用apache mod_proxy将代理转发到正在使用非标准端口的后端HTTPS服务器（被多个防火墙阻止，而不需要反向代理）。

客户端连接通过HTTPS连接到apache，然后连接到我相信的是nginx或tomcat服务器（后端服务器是Zimbra邮件服务器管理控制台）。

我在日志中收到以下错误

[Thu Jun 27 11:35:26 2013] [debug] mod_proxy_http.c(56): proxy: HTTP: canonicalising URL //[internal_url]:7071/
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(1506): [client [client_ip] proxy: https: found worker https://[internal_url]:7071/ for https://[internal_url]:7071/
[Thu Jun 27 11:35:26 2013] [debug] mod_proxy.c(968): Trying to run scheme_handler against proxy
[Thu Jun 27 11:35:26 2013] [debug] mod_proxy_http.c(1973): proxy: HTTP: serving URL https://[internal_url]:7071/
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(1949): proxy: HTTPS: retrying the worker for ([internal_url])
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(1955): proxy: HTTPS: worker for ([internal_url]) has been marked for retry
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(2011): proxy: HTTPS: has acquired connection for ([internal_url])
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(2067): proxy: connecting https://[internal_url]:7071/ to [internal_url]:7071
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(2193): proxy: connected https://[internal_url]:7071/ to [internal_url]:7071
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(2444): proxy: HTTPS: fam 2 socket created to connect to [internal_url]
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(2285): proxy: CONNECT: sending the CONNECT request for [internal_url]:7071 to the remote proxy [internal_ip]:7071 ([internal_url])
[Thu Jun 27 11:35:26 2013] [error] (70014)End of file found: proxy: HTTPS: attempt to connect to [internal_url]:7071 via http CONNECT through [internal_ip]:7071 ([internal_url]) failed
[Thu Jun 27 11:35:26 2013] [error] ap_proxy_connect_backend disabling worker for ([internal_url])
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(2029): proxy: HTTPS: has released connection for ([internal_url])

在安装了“apache2 2.2.22-6ubuntu2.2”和“libapache2-mod-proxy-html 3.0.1-1.1”软件包的Ubuntu 12.10服务器上进行以下配置

    ProxyRequests   on
    ProxyRemote     *       https://[internal_url]:7071
    ProxyPass       /       https://[internal_url]:7071/
    ProxyPassReverse        /       https://[internal_url]:7071/
    ProxyPassReverseCookieDomain    [internal_url] [external_url]

    SSLProxyEngine  on

    ProxyPreserveHost       on
    ProxyVia        on

我不知道我还能做些什么。后端服务器站点可以通过apache服务器上的lynx访问，因此对我来说这不是一个明显的问题。

Answer 1

如果我理解你的问题 - 你的沟通路线是这样的

浏览器Apache后端服务器

在这种情况下，您必须删除ProxyRemote指令 - 因为仅当您通过另一个代理与后端服务器进行通信时才需要它。

Apache反向代理到https站点给出（70014）找到的文件结尾：

1 个答案: