Thursday, April 17, 2008

Stuck on Apache

Ok So I am stuck.

Basically I need to do this

Check for presence of a cookie, If cookie is present go to Balacner a else go to balancer b. But I am not able to do so

Anyone has an idea let me know please.

Friday, March 28, 2008

Reverse Proxy Using Apache

I have been doing some work on reverse proxy with apache.
First I started on a home machine with is

1. x86 Solaris 10.
2. 2 CPU with only 256mb memory
3. Apache 2.2 downloaded from www.sunfreeware.com

however the version that came from www.sunfreeware.com had some issues

1. apache mod_proxy was a bit old
2. Only supported prefork mpm

Then went downloaded apache 2.2.24 from the apache own site and started to compile.
The compile didnot go as smooth as I expected. Had to redo is many times to get the right config

Finally I was able to get
1. mod_proxy which would do what I needed
2. worker mpm
3. openssl ssl configs

I can have some configs provided if needed.

The tests so far I have done

1. Connect Reverse Proxy with https front and https backend
2. Connect Reverse Proxy with https front and http backend
3. Do cookie manipulation by changing cookie domain in and out
4. Do some content replacement/modification on an html page. Needed an external filter which I used in conjunction with unix sed command to change the content on the fly. I belive this takes a lot of cpu and memory. However I will confirm once I am able to add some memory to my machine. The test here done was to replace for example Harry to Larry in ever occurance in page or subsequent pages.

So far this is all I have been able to do. But as I move on I will post here.

If someone would like me to test a special use case let me know so I can try that.

My next step is to proxy email systems like gmail and hotmail to run from proxy.
Also would like to test masking 302 response such that the destination url doesnot show up in the location bar.

Cheers

Saturday, March 8, 2008

Available Options for DX

I have been looking for some time. Whatever spare time I could get. So far I have seen following options. I havent tried them yet but they look like promising options



1. Apache Reverse Proxy with

mod_proxy,

mod_headers

mod_proxy_connect

mod_proxy_http



2. ZEUS ZXTM product

Zues actually is a software based product. You can only run it on a vmware virtual machine. They have a promotion running where they are offering a free software with each DX

http://www.zeus.com/landing/juniper_upgrade



Will be testing atleast the above 2 options soon. Will keep you posted on how it goes



Cheers

Saturday, February 2, 2008

Juniper DX Replacement Options

I thght of starting this Blog so we can share Ideas on what can be done for those who are looking to replace Juniper DX

Replacing Juniper DX is not going to be easy for those who use

1. SSL Offload with Active-n Load balanacing
2. Extensively use Apprules

If you do use them lets start talking about options

My first blog and frist post.