[users@httpd] Removing backend server from ProxyBalancer

2016-08-10 Thread Mohanavelu Subramanian
Hi All, we are using mod_proxy, mod_proxy_balancer as LB. I have a use case to dynamically remove the BalancerMember from ProxyBalancer. I am arrived with 2 approaches. But I got some doubt in approach 2. Approach 1: First shutdown the backend server which is added as BalancerMember in apache, t

[users@httpd] Apache as both Reverse and Forward Proxy

2016-08-05 Thread Mohanavelu Subramanian
Hi All, Currently, we are using apache as reverse proxy server. We have a new use case, where clients would send their callback endpoint to our backend server for long running tasks. Then after completing the long running task, the server would use the client's callback endpoint to send the respon

Re: [users@httpd] Disable apache web server not to accept any new requests from clients

2016-08-03 Thread Mohanavelu Subramanian
> > > 2016-08-02 7:07 GMT+02:00 Mohanavelu Subramanian : > >> Hi All, >> >> In our project, we are using Apache server as load balancer(mod_proxy) >> with many instances of tomcat containers as backend. >> >> I have a scenario where we need to

[users@httpd] Disable apache web server not to accept any new requests from clients

2016-08-01 Thread Mohanavelu Subramanian
Hi All, In our project, we are using Apache server as load balancer(mod_proxy) with many instances of tomcat containers as backend. I have a scenario where we need to have an option for Activate/De-activate traffic in apache server. In case of de-activate scenario, apache server should not accept

Re: [users@httpd] Apache as forward and reverse proxy

2016-07-14 Thread Mohanavelu Subramanian
Hi Nick, Thanks a lot for the inputs. Could you please the share some configuration for the same, if you have any for reference. Thanks & Regards, Mohan On 14-Jul-2016 4:00 pm, "Nick Kew" wrote: > On Thu, 2016-07-14 at 14:48 +0530, Mohanavelu Subramanian wrote: > >

[users@httpd] Apache as forward and reverse proxy

2016-07-14 Thread Mohanavelu Subramanian
Hi All, I want to configure apache server to act as both forward and reverse proxy. The official doc says "Apache can be configured in both a forward and reverse proxy mode." But there is also another statement "In a typical reverse proxy configuration, this option ProxyRequests Directive should

[users@httpd] Asynchronous callback from tomcat

2016-07-13 Thread Mohanavelu Subramanian
Hi All, Good morning. Our application is deployed on tomcat. We have apache load balancer and tomcat container running on separate virtual machines. We got a requirement to implement asynchronous callback for long running tasks from client. So, with this feature client would send soap request wi

Re: [users@httpd] Two way SSL authentication between apache proxy server and tomcat

2016-05-31 Thread Mohanavelu Subramanian
the SSL_CLIENT_CERT , you must configure a > SSLValve, see: > https://tomcat.apache.org/tomcat-7.0-doc/api/org/apache/catalina/valves/SSLValve.html > > > > David Balažic > > Software Engineer > > www.comtrade.com > > > > *From:* Mohanavelu Subramanian [mailto

[users@httpd] Two way SSL authentication between apache proxy server and tomcat

2016-05-30 Thread Mohanavelu Subramanian
Hi All, Good Morning. I want to implement 2 way SSL authentication between apache proxy and tomcat. I am using mod_proxy to integrate apache and tomcat. I have some doubts in the implementation. I have done some initial analysis on this. I would create a self-signed CA certificate(CA.crt). I wou

[users@httpd] Secured connection between Apache Httpd and Tomcat over AJP protocol

2016-05-25 Thread Mohanavelu Subramanian
Hi All, Good Morning. I have Httpd process and Tomcat instances both running on 2 different machines. The communication between them happens through AJP protocol (mod_jk) which doesnt support encryption. But we are using some features of mod_jk like automatic passing of security information like

[users@httpd] Adding Tomcat instances dynamically to Apache Load Balancer without restart

2016-04-06 Thread Mohanavelu Subramanian
Hi All, Good Morning. I am working in a Cloud based project where I encounter Scale-in/ Scale out of Tomcat instances. We have Apache load balancer as well. The requirement is to dynamically add any new Tomcat instances during scale out to Load balancer and remove tomcat instances during scale-in

Re: [users@httpd] Apache Web Server rpm(2.2.x) for Linux OS to support TLSv1.2

2015-08-27 Thread Mohanavelu Subramanian
procedures to be followed for building a rpm for apache version 2.2.31 Thanks & Regards, Mohan On Sun, Aug 23, 2015 at 12:51 PM, Mohanavelu Subramanian wrote: > Hi Jeff, > > Thanks a lot and I try to compile as per the link. > > Regards, > Mohan > > On Sun, Aug 23, 20

Re: Re[2]: [users@httpd] SSL - How client certificates are verified?

2015-08-23 Thread Mohanavelu Subramanian
one from > apache? > > Thank you. > > ------ Original Message -- > From: "Mohanavelu Subramanian" > To: users@httpd.apache.org; "Sterpu Victor" > Sent: 8/23/2015 10:19:13 AM > Subject: Re: [users@httpd] SSL - How client certificates are verified

Re: [users@httpd] Apache Web Server rpm(2.2.x) for Linux OS to support TLSv1.2

2015-08-23 Thread Mohanavelu Subramanian
> > The above link shows how to do that. > > > > On Friday, August 14, 2015, Mohanavelu Subramanian > wrote: > >> Hi Daniel, >> >> Thanks a lot for the reply. >> >> I have downloaded the apache 2.2.31 source code and tried compiling it. >

Re: [users@httpd] SSL - How client certificates are verified?

2015-08-23 Thread Mohanavelu Subramanian
Hi, With the option "SSLVerifyClient require" , server mandates the client to send its certificate for authentication. Then the server verifies this client certificate against the CA certificate file configured in apache. If the client certificate has been signed by a valid CA, then the authentica

Re: [users@httpd] Apache Web Server rpm(2.2.x) for Linux OS to support TLSv1.2

2015-08-14 Thread Mohanavelu Subramanian
ly use the openssl version you want to use. > > Apache will allow you to use tlsv1.2 when the openssl version it was > compiled against supports it. > > 2015-08-11 21:01 GMT+02:00 Mohanavelu Subramanian : > >> Hi All, >> >> Good Morning. >> >> I am to new

[users@httpd] Apache Web Server rpm(2.2.x) for Linux OS to support TLSv1.2

2015-08-11 Thread Mohanavelu Subramanian
Hi All, Good Morning. I am to new Apache Users mailing list. I have described the issue I am facing to support TLSv1.2 Currently, our product use Apache 2.2.12 provided by SLES 11sp3. We are doing a securing hardening now by enabling only TLSv1.2 protocol and disabling other protocols. I tried t