ProxyPass ip地址变量

Question

我正在设置一个代理，让一个完全隔离的vlan (称为VLAN1)通过代理访问另一个vlan (VLAN2)。

一个服务器有两个NIC: on用于VLAN1 (10.1.1.50)，另一个用于VLAN2 (10.1.2.254)。

在我的VLAN1上，我有几台服务器运行同一个web应用程序(针对不同的用户)：

• https: //10.1.1.101/myapp
• https: //10.1.1.102/myapp
• https: //10.1.1.103/myapp
• ..。

在我的代理服务器(10.1.2.254或10.1.1.50)上，文件/etc/httpd/conf.d/myapp.conf：

ServerName  Proxy-IsolatedNetwork
#
# SSL
#
SSLProxyCheckPeerCN     Off
SSLProxyCheckPeerExpire Off
SSLProxyCheckPeerName   Off
SSLProxyEngine          On
SSLProxyProtocol        All
SSLProxyVerify          optional_no_ca
SSLProxyVerifyDepth     0

#
# Proxy
#
ProxyPreserveHost On

案例1

如果我写这篇文章，它会奏效：

ProxyPass /101 https://10.1.1.101/myapp
ProxyPassReverse /101 https://10.1.1.101/myapp

ProxyPass /myapp https://10.1.1.101/myapp
ProxyPassReverse /myapp https://10.1.1.101/myapp

如果我们转到https: //10.1.2.254/101，就可以访问https: //10.1.1.101/myapp上托管的myapp。

但

案例2

我想要的是：

• https: //10.1.2.254/101个=> https: //10.1.1.101/myapp
• https: //10.1.2.254/102 => https: //10.1.1.102/myapp
• https: //10.1.2.254/103个=> https: //10.1.1.103/myapp

如何让多个ProxyPass/ProxyPassReverse工作？

ProxyPass /101 https://10.1.1.101/myapp
ProxyPassReverse /101 https://10.1.1.101/myapp
ProxyPass /myapp https://10.1.1.101/myapp
ProxyPassReverse /myapp https://10.1.1.101/myapp

ProxyPass /102 https://10.1.1.102/myapp
ProxyPassReverse /102 https://10.1.1.102/myapp
ProxyPass /myapp https://10.1.1.102/myapp
ProxyPassReverse /myapp https://10.1.1.102/myapp

ProxyPass /103 https://10.1.1.103/myapp
ProxyPassReverse /103 https://10.1.1.103/myapp
ProxyPass /myapp https://10.1.1.103/myapp
ProxyPassReverse /myapp https://10.1.1.103/myapp

Answer 1

答案是关闭ProxyPreserveHost，然后我可以删除所有行ProxyPass /myapp & ProxyPassReverse /myapp