Anyone using any Linux SSL proxies?

Mailman List Mirror (Read Only)
1

Howdy,

I am wondering what folks are recommending/using these days for Linux SSL
proxies? I need to build a linux box that basically acts as an SSL offloader
would (like a BigIP / Cisco ACE / Netscaler would do). Listen on port 443,
decrypt the SSL and then forward the request onto the webserver on port 80.
DSR is not required.

Any suggestions?

Offlist replies would probably be more appropriate.

Thank You in advance.

Cheers,
Mike

2

How much traffic? That would be a major consideration....

3

Check out http://www.apsis.ch/pound/

It would appear the magic search term on google is linux reverse ssl proxy .... I started searching for linux ssl proxy. That turned up a lot of stuff for wrapping plain text in encryption, not the other way around. :slight_smile:

And yes how much traffic is a major consideration. If a lot, then you would want to utilize an accelerator card supported by openssl.

4

Hello Mike:

5

Don't forget Squid and its various project forks.

Adrian

6

Howdy,

I am wondering what folks are recommending/using these days for Linux SSL
proxies? I need to build a linux box that basically acts as an SSL offloader
would (like a BigIP / Cisco ACE / Netscaler would do). Listen on port 443,
decrypt the SSL and then forward the request onto the webserver on port 80.

Pound works ok for this. OpenBSD's relayd also supports this, and if it's
on a machine in the network path in front of the backend server/s, there's
a transparent mode that maintain the source IP address from the original
connection.

DSR is not required.

Just as well, if you think about it... :slight_smile:

7

hi

If you have multiple back end worker web services, then you should investigate the mod_proxy_balancer module, as it gives you an extended feature set that helps in this regard.

Best wishes
Andy Davidson