[TriLUG] serving multiple HTTPS sites on same server with redirection

[Aaron Joyner]

Hi Marvin,

I'm a bit perplexed about what your goal is?  I read over your rules, and
it seems like you're trying to use 'iptables' when what you really want is
another 'Listen' stanza(s) in your apache config?  Can you clarify why you
want Apache to listen to two sets of ports on two IPs on the same machine,
and why 4 Listen stanzas isn't the right choice for that?

Listen 80
Listen 8080
Listen 443
Listen 8443

(Of course, they may need to exist inside the appropriate / separate
<VirtualHost> directives.)

For more info:
http://httpd.apache.org/docs/2.2/bind.html

Aaron S. Joyner


On Fri, May 10, 2013 at 1:52 PM, Blackburn, Marvin <mblackburn at glenraven.com
> wrote:

> We are looking at this -- it may be our only method for this.
> It's hard to believe that others making iptables work for ip aliases.
> Thanks for you suggestion.
>
> -----Original Message-----
> From: trilug-bounces at trilug.org [mailto:trilug-bounces at trilug.org] On
> Behalf Of David Brain
> Sent: Wednesday, May 08, 2013 10:07 PM
> To: Triangle Linux Users Group General Discussion
> Subject: Re: [TriLUG] serving multiple HTTPS sites on same server with
> redirection
>
> Digressing slightly, Server Name Indication (SNI) supported by most
> modern browsers/OS, allows multiple SSL sites with differing host
> names to be served from the same IP.
>
> http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI
>
> I'd not run across this until recently when looking at packet captures
> of SSL transactions.
>
> David.
>
>
> --
> This message was sent to: Aaron S. Joyner <aaron at joyner.ws>
> To unsubscribe, send a blank message to trilug-leave at trilug.org from that
> address.
> TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug
> Unsubscribe or edit options on the web  :
> http://www.trilug.org/mailman/options/trilug/aaron%40joyner.ws
> TriLUG FAQ          :
> http://www.trilug.org/wiki/Frequently_Asked_Questions
>