| ... |
... |
@@ -22,8 +22,17 @@ |
| 22 |
22 |
1. The separation of the individual protocols and its usage when forwarding to the application server. This means that for //HTTP// and //HTTPS// a separate VirtualHost with appropriate configuration must be used. |
| 23 |
23 |
1. Configuration of the conditional RewriteRule for the forwarding of WebSocket connections via WS and WSS. By default, FORMCYCLE uses the corresponding ports of the servlet container (WS port = HTTP port, WSS port = HTTPS port). |
| 24 |
24 |
|
| 25 |
|
-This configuration, as well as any settings that may be necessary when using self-generated certificates, is briefly illustrated here: |
|
25 |
+For the Apache settings it is necessary to activate the corresponding modules. The following are required as minimum: |
| 26 |
26 |
|
|
27 |
+* proxy |
|
28 |
+* proxy_http |
|
29 |
+* proxy_wstunnel |
|
30 |
+* rewrite |
|
31 |
+ |
|
32 |
+Further information about the modules of Apache you will find [[here>>https://httpd.apache.org/docs/current/mod/||rel="noopener noreferrer" target="_blank"]]. |
|
33 |
+ |
|
34 |
+The configuration described above, as well as any settings that may be necessary when using self-generated certificates, is briefly illustrated here: |
|
35 |
+ |
| 27 |
27 |
((( |
| 28 |
28 |
{{code language="none"}} |
| 29 |
29 |
<VirtualHost www.example.com:80> |
| ... |
... |
@@ -104,8 +104,11 @@ |
| 104 |
104 |
{{code language="none"}} |
| 105 |
105 |
<Engine...... |
| 106 |
106 |
<Valve className="org.apache.catalina.valves.RemoteIpValve" |
|
116 |
+ internalProxies="<IP's of the trusted proxy server>" |
| 107 |
107 |
remoteIpHeader="x-forwarded-for" |
| 108 |
108 |
protocolHeader="x-forwarded-proto" |
| 109 |
109 |
protocolHeaderHttpsValue="https" /> |
| 110 |
110 |
</Engine> |
| 111 |
111 |
{{/code}} |
|
122 |
+ |
|
123 |
+**Note:** If the configuration of the //X-Forwarded// header does not work, it may be necessary to configure the IPs of the trustworthy proxy servers in the //internalProxies// property. One or more IP addresses (e.g.: 192\.168\.0\.10|192\.168\.0\.11) or an IP address range is expected here, which can be defined using a regular expression (e.g .: 169\.254\.\d{1,3}\.\d{1,3}). |
