Transparent reverse proxy to SSL host

0

I'll just explain my case.

I have a HTTPS website say https://**site.com which is located on some servers. Those server IPs are blocked for the clients. So I need to make this site available for clients browsers transparently.

So client browser goes to https://unblocked.**site.com and gets the requests content as it where original https://**site.com

I can crete those forwarding server on IP which is not blocked and can access orinal site. How should I configure my server (that will be mapped to unblocked.**site.com in DNS) to accomplish that?

Can I use nginx for such task? Or should I try squid?

I tried to configure nginx using config like that:

server {
    listen 443;
    server_name unblocked.**site.com;
    location / {
        set $upstream **site.com;
        proxy_pass https://$upstream;
    }
}

But this doesn't seem to work.

why I try to do curl https://unblocked.**site.com I get the error:

curl: (35) schannel: next InitializeSecurityContext failed: SEC_E_INVALID_TOKEN (0x80090308) - The token supplied to the function is invalid

My experices with squid is quite limited, I used to use it as transparent proxy, but not for such task.

So again: And I am asking is solution possible without installing certs on reverse proxy? If it can't be done with nginx maybe with some other solution for example squid? Or such transparent scheme is not possible in principle?

nginx
squid
asked on Server Fault Sep 21, 2018 by WHITECOLOR • edited Sep 22, 2018 by WHITECOLOR

0 Answers

Nobody has answered this question yet.


User contributions licensed under CC BY-SA 3.0