Configuring an Nginx Server as a Reverse Proxy for an Apache Server

-
For this example I created and configured an Ubuntu virtual machine in the cloud. I next installed Nginx and Apache servers on the machine. Finally I configured Nginx as a reverse proxy for Apache. The purpose of this is that different servers are more efficient individually at delivering specific types of content. Specifically Nginx is better at serving static content and Apache is better at serving the backend data as is found in SQL servers.

 The process has quite a few steps. Once I had my Ubuntu server in the cloud I then proceeded to update all the software and install Nginx. A quick curl command of curl -I localhost shows that my localhost is now Nginx. So at this point I was now able to proceed to the rest of the configuring.


Nginx is now up and running as my localhost.

 Next I installed an Apache server on the virtual machine which will be serving the backend content from a database. Since Nginx is running on port 80 and Apache wanted to start on port 80 as well, I went into the configuration file for the Apache ports and changed the listening port to 8080 and specifically for ssl_module and mod_gnutls.c I put the listening port to 8443.

Port configuration file for Apache.


After restarting the Apache server and getting its status I can see the following message that lets me know a few things about the Apache server including its status, ID and tasks. Here I am most concerned with the system running successfully using my configuration file I just modified.

Apache server is up and running.


Next I want to confirm the web page status from the terminal. I sent a quick curl command to localhost:8080 and can now confirm with a 200 success message that Apache is the server on port 8080 for the localhost of the Ubuntu virtual machine.

Apache is now live and serving content.

Next I need to configure Nginx as a proxy. Here is the configuration needed for the Nginx server.

Now I restart the Nginx server and when I navigate to the URL of my cloud server I get an Apache page. Upon further inspection of the Network you can see that the server is nginx/1.14.0 (Ubuntu). 
  1. Server:
    nginx/1.14.0 (Ubuntu)


Nginx as a reverse proxy for Apache.
So now I have successfully configured Nginx as a reverse proxy for Apache and can build more content but am ready to scale and run at maximum efficiency for delivering static HTML content and SQL data at the same time.


Comments

Post a Comment

Popular posts from this blog

Automated Exploitation of a Bluetooth vulnerability that leads to 0-click code execution

-
Image
This blog post covers an interesting vulnerability that was just discovered earlier this year and an open source free tool that was created to automate testing for this vulnerability in Bluetooth devices.  I will preface this with the warning that this is of course done in my personal testing lab environment with my own devices for learning and demonstration purposes. I am in no way encouraging that these tools, snippets of code or techniques be used maliciously as there can be very serious legal consequences for those that use these hacking tricks nefariously. However, in a personal testing lab environment I think this is great for learning and allows someone to quickly be able to confirm or deny if their personal devices are truly standing up to the Bluetooth CVE of CVE-2023-45866 . CVE-2023-45866 is described as an issue where the " Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept
Read more

Sniffing GSM traffic on a private cellphone network

-
Image
Legal Disclaimer: GSM Research and Passive Traffic Monitoring ‘The information provided in this blog is for educational and informational purposes only. The author and publisher of this blog are not responsible for any misuse, illegal activities, or damages that may arise from the use of the information provided herein. The author conducted research using two Samsung phones and a BladeRF with YateBTS to create a small-scale GSM network for the purpose of analyzing and intercepting traffic. It is important to note that intercepting or tampering with wireless communication without proper authorization is illegal in many jurisdictions. The author undertook this research within a controlled and lawful environment, and any techniques or findings described in this blog should not be replicated or applied in unauthorized or illegal activities. The author strongly advises against engaging in any illegal activities, including but not limited to intercepting or tampering with wireless communicat
Read more

Raspberry Pi WiFi Honeypot 🍯

-
Image
This was a fun project to work on and build out. I learned a few new interesting tricks along the way. I started with this tutorial from 2013 by Andy Smith . However, a few things have changed with hostapd that I had to figure out through debugging. Also, the configuration of the nginx server as well as dnsmasq were slightly different for me using the new Raspbian Buster for Raspberry Pi 4.  This should save you some time if you follow my trick tips later on in the article that I found by searching through various message boards and googling error messages as I did debugging to get this working properly. I have gone over setting up nginx servers in previous articles so if you need help with getting started these may be helpful. So first things first. I started with a canakit and assembled the raspberry pi with the appropriate heat sinks and a little fan set to a standard speed. The speed is adjusted by how you install the wiring. If you haven't done this before you can follow the
Read more