Apache proxy app problem

Community Support
1

I have an internet facing Debian server with just apache installed in my DMZ to be used as a proxy. I have a Rocket Chat server on my internal network that is not internet facing. I want the communication from the internet to my DMZ server to be https and the communication from the DMZ server to the Rocket Chat server to be https.

If I configure the communication from the DMZ to the Rocket Chat server to be http and the communication from the DMZ to the internet to be https everything works great. Both the Rocket Chat web page and the Rocket Chat app work from the internet.

But if I change the communication from the DMZ server to the Rocket Chat server to https the Rocket Chat app quits working. The Rocket Chat web page still works.

Here is the configuration in my Apache proxy server where everything works:

RewriteEngine On
RewriteCond %{HTTP:Upgrade} =websocket [NC]
RewriteRule /(.*)           ws://rocketchat.fibrecu.local:3000/$1 [P,L]
RewriteCond %{HTTP:Upgrade} !=websocket [NC]
RewriteRule /(.*)           http://rocketchat.fibrecu.local:3000/$1 [P,L]

SSLProxyEngine on
ProxyPass / http://rocketchat.fibrecu.local:3000
ProxyPassReverse / http://rocketchat.fibrecu.local:3000

Here is the configuration in my Apache proxy server that the app does not work:

RewriteEngine On
RewriteCond %{HTTP:Upgrade} =websocket [NC]
RewriteRule /(.*)           ws://rocketchat.fibrecu.local:443/$1 [P,L]
RewriteCond %{HTTP:Upgrade} !=websocket [NC]
RewriteRule /(.*)           https://rocketchat.fibrecu.local:443/$1 [P,L]

SSLProxyEngine on
ProxyPass / https://rocketchat.fibrecu.local:443
ProxyPassReverse / https://rocketchat.fibrecu.local:443

Any suggestions on how to get the app working with https the whole way?

image
image.png1159×385 21.1 KB

2

It looks like you are attempting to internally rewrite / proxy to https inside your network.

Your rewrite and proxy should actually still look like this even though you have likely added all of the https stuff above this.

With this your https://yourserver will terminate the tls at apache. Then it will proxy in the DMZ to Rocket.Chat

1 Like