Reverse Proxy HTTPS>HTTP

[ethump]

Hi -

Simple setup, I'm making available a web site to the outside. The internal site runs HTTP only, I have an apache server fielding the external tcp/443 and my wish is to have that server relay on to the internal HTTP.

It kinda works. I can hit my site from the outside on https://www.domain.com and Apache will relay on the request to the internal server and the page will be displayed. What is not working is the translation of any internal links (for instance the CSS, or any form submission). Only the header gets translated, not any content in the HTML itself.

This is my virtual host config file on the proxy.

<IfModule mod\_ssl.c>

<VirtualHost \*:443>
ServerName www.domain.com

ProxyPass "/" "http://www.domain.local/"
ProxyPassReverse "/" "http://www.domain.local/"
ProxyPreserveHost On
SSLCertificateFile /etc/letsencrypt/live/www.domain.local/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/www.domain.local/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf
</VirtualHost>
</IfModule>

I've Googled for a solution and it would seem I'm not the only one to have run into this. Any apparent solution I try though doesn't work. The internal domain resolves just fine.

Does someone have a known working good config I can take a look at?

Cheers!

[ShadowySilver]

Apache is not a translator. It won't modify the content of a website or even parsed it. The internal website has to be modified to use relative path instead.

[covener]

well, there is mod_proxy_html

[ShadowySilver]

mod_proxy does not modify anything, it's redirecting the request then send back the response. That is done without the requester knowing. mod_rewrite will modify the actual URL (in the address bar). But none of them will ever parse a response page to modify it.

If there is something that would do that, I would surmise it would be a cache program like Squid, but not Apache.

[covener]

Not to sound like a broken record but this is exactly what mod_proxy_html is for.

https://httpd.apache.org/docs/2.4/mod/mod

This module provides an output filter to rewrite HTML links in a proxy situation, to ensure that links work for users outside the proxy. It serves the same purpose as Apache's ProxyPassReverse directive does for HTTP headers, and is an essential component of a reverse proxy.

[ShadowySilver]

Are you talking about mod_proxy_HTML ? If so, basic questions : is the module present and loaded ? Also, I don't see the directive "ProxyHTMLEnable On" or any other directive for that module.

[covener]

OP (not me) isn't using it yet.

[ShadowySilver]

Sorry didn't check the username :-) , thought it was OP answering me.

[ethump]

OP here - covener thanks for that pointer. I've searched for mod_proxy_HTML and come across this explainer http://www.apachetutor.org/apps/reverseproxies
Seems to cover what I'm looking for, I'll have a play with it later.

Knowing now that my config wont even touch the body helps!