3

I have one machine with public IP currently serving a SVN repository through dav_svn on HTTPS; now I need to install Redmine and serve it on HTTPS too. I also need to be able to connect to both sites/application using an IP address because I can't trust internal DNS resolving nor I can edit hosts files.

What is the best solution? Is it feasible to move SVN on localhost:SomePort, Redmine to localhost:SomeOtherPort and to install an HTTPS reverse proxy (like Pound) to redirect connections using pattern/URL matching?

Andrea de Palo
  • 332
  • 1
  • 5
  • Thanks to everyone. To be complete I can't add other IPs or change ports on-the-fly because the machine is behind a router not controlled by me. Considered this, I will try to setup a reverse HTTPS proxy. Anyway thanks for suggesting SNI: I didn't know it – Andrea de Palo Nov 03 '09 at 17:05

2 Answers2

4

There are a few solutions - one is to buy a wildcard certificate and serve that everywhere. Another is to make sure you are using at least Apache 2.2.12 and enable SNI, which allows you to use SSL with name-based virtual hosts for the few browsers that support it. Or, you can add a public IP, add a virtual private IP on the server and map them on your firewall and use IP based hosting.

womble
  • 95,029
  • 29
  • 173
  • 228
Aaron Brown
  • 1,677
  • 1
  • 12
  • 21
0

It seems like you have pretty much boxed yourself out of virtual hosting with those requirements.

That being said you should have no problem running things on different ports and accessing those ports directly over ssl.

or

Running the services under different apache roots / subtrees with a single master ssl cert.

or

Running the different services with straight http localhost, and then using a reverse proxy you say or even apache proper to handle the SSL front end while doing a backend connection over http to the service in question. I think I would take a look at nginx, I don't think pound is going to do what you want since its specifically geared towards load balancing not targeted proxy redirection / regex.

MattyB
  • 993
  • 4
  • 6