Return-Path: X-Original-To: apmail-cassandra-user-archive@www.apache.org Delivered-To: apmail-cassandra-user-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 46601172E2 for ; Fri, 19 Jun 2015 07:15:28 +0000 (UTC) Received: (qmail 44512 invoked by uid 500); 19 Jun 2015 07:15:25 -0000 Delivered-To: apmail-cassandra-user-archive@cassandra.apache.org Received: (qmail 44466 invoked by uid 500); 19 Jun 2015 07:15:25 -0000 Mailing-List: contact user-help@cassandra.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@cassandra.apache.org Delivered-To: mailing list user@cassandra.apache.org Received: (qmail 44456 invoked by uid 99); 19 Jun 2015 07:15:25 -0000 Received: from Unknown (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 19 Jun 2015 07:15:25 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id AA1EA18019D for ; Fri, 19 Jun 2015 07:15:24 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -1.109 X-Spam-Level: X-Spam-Status: No, score=-1.109 tagged_above=-999 required=6.31 tests=[RCVD_IN_MSPIKE_H2=-1.108, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled Received: from mx1-eu-west.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id ITFnTjwefqVa for ; Fri, 19 Jun 2015 07:15:17 +0000 (UTC) Received: from emea01-db3-obe.outbound.protection.outlook.com (mail-db3on0104.outbound.protection.outlook.com [157.55.234.104]) by mx1-eu-west.apache.org (ASF Mail Server at mx1-eu-west.apache.org) with ESMTPS id 7B6662549D for ; Fri, 19 Jun 2015 07:15:16 +0000 (UTC) Authentication-Results: cassandra.apache.org; dkim=none (message not signed) header.d=none; Received: from [192.168.101.102] (83.173.214.74) by VI1PR09MB0062.eurprd09.prod.outlook.com (10.161.104.151) with Microsoft SMTP Server (TLS) id 15.1.190.14; Fri, 19 Jun 2015 07:15:08 +0000 Subject: Re: Deploying OpsCenter behind a HTTP(S) proxy To: References: <55828BCB.2040007@gfproducts.ch> From: Jonathan Ballet Message-ID: <5583C176.9070506@gfproducts.ch> Date: Fri, 19 Jun 2015 09:15:02 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Icedove/38.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Transfer-Encoding: 7bit X-Originating-IP: [83.173.214.74] X-ClientProxiedBy: AM3PR04CA0042.eurprd04.prod.outlook.com (10.242.16.42) To VI1PR09MB0062.eurprd09.prod.outlook.com (25.161.104.151) X-Microsoft-Exchange-Diagnostics: 1;VI1PR09MB0062;2:H7WcCF31inrBOR8wj1S7NaFaTo6RJrvCFzQNsv96uXUlT76FPFUHfqjrcaU1vOBE;2:utirz3k6RckYf75TlpidQbgHRfvrmPYi7jC2xWLKugCPes/LFfzF51UxmLfiQ7BvXQ1YqmN3H1z11rtM4wJnM0c7/d8WsFweAI5Pcgp2rtJKrJEqrOT/1UyeExWKiC23pJcTy2dzeLLHQNnxJuh7WQ==;3:Mp2d4fQEIoJWnwEPfII27nX+uXwS4vvfZ1pSo3besFzFkxOm/1+OHB1fRuDQtiaVAHdN5u6EVPMnd8SMUptC5JHtdzWKXo7FMEnHMweKuubDne9oyyS/x3PCEMFYobRBzvBJy83XtBkpD7DRr+3arfmTYYBun3fi9uYjgGVT96slYteUElrA3HCb0a4X4WUwnRgCpOu8m03Ast5FfOfd2EFP5GJNKExnQXt3AVyAuOTMKBCgvRUjQeRBAp4QgrubIIspYvuCy0JdEJNPovNjRnlvr5C9dIM/9NlR0AVqV2w= X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:VI1PR09MB0062; X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(5005006)(3002001);SRVR:VI1PR09MB0062;BCL:0;PCL:0;RULEID:;SRVR:VI1PR09MB0062; X-Forefront-PRVS: 0612E553B4 X-Forefront-Antispam-Report: SFV:NSPM;SFS:(10019020)(6009001)(6049001)(479174004)(51704005)(24454002)(377454003)(64126003)(87266999)(46102003)(74482002)(50466002)(77096005)(50986999)(83506001)(15975445007)(42186005)(2950100001)(54356999)(36756003)(65816999)(92566002)(59896002)(87976001)(47776003)(66066001)(76176999)(4001350100001)(19625305001)(117156001)(23676002)(77156002)(62966003)(2351001)(122386002)(450100001)(40100003)(19580395003)(19580405001)(5001960100002)(80316001)(33656002)(86362001)(189998001)(107886002)(110136002);DIR:OUT;SFP:1102;SCL:1;SRVR:VI1PR09MB0062;H:[192.168.101.102];FPR:;SPF:None;MLV:sfv;LANG:en; X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtWSTFQUjA5TUIwMDYyOzk6K1BTbHFzRGl3RkJJUzI3Z1h2UkVMZzFFYVRI?= =?utf-8?B?aktjaGpvY2pOaHVzRUVFZkU5aHVML2lUK1hJL1ZQVlhpUm5nNFd1K2lXRldK?= =?utf-8?B?QlZycGNvdG9NMmx6MjJXWEV5QUZIVGplR21BanlwSHBsckhKNTI4RkdmRlRw?= =?utf-8?B?V2R3dVF1TURiRnd6QW14T0dJNG93aFBQT3NKRmRIdGowNEw1Q3RoWUlybG9n?= =?utf-8?B?bWxLOU01Q1Z1VUxSSlJHK2JrVzRyVmQ1blg2RkpXdC82RFczNExUdlBCNHIx?= =?utf-8?B?L3NhbHNZQlhNTE9RazJWYzJZVnV3aXhyeEIzRDNLaHZTT1ZQZkV3ekhnOE1z?= =?utf-8?B?UXF1OFlMOWc2dEpTSk1yNVphSTJzbWlMaGpBNEZIOFArTFFhcmsvRXZzVFMy?= =?utf-8?B?RkltcE50YWp3ZE53M010ZytVQncwZzM4WGhSL2JsTU43cGF0OTdwREtWVExX?= =?utf-8?B?QVUzdEJyZ21MNUZKZjZzcmZBWDErUDZSTmMrMjZxeVlxOCtRcDFwL3pPUVhz?= =?utf-8?B?ZE4xUTR3TmI0MjdycUxIUFZGS1c5M1hMMFZYenplMW01ZmFmTkFtb2ZQeEFn?= =?utf-8?B?V2pMQm9EeXA3S01mV0trb3MwSW9OZUZaUXVPZ24xcFd5UThqd3ZPenNCYWpN?= =?utf-8?B?VEFiT2hYUGR4UUVDai9oUFlpZXdDbUFaTnRwUHRpUFViRTJwNXlBQVNSODNM?= =?utf-8?B?T043MU9sQzlSRmc2a1dXNjJsUzloZ3E3a3lnZDBaNTZFNzhPUytKSnlCdTd0?= =?utf-8?B?Lzk0SXY2cTZsc3c1VFdkYlZsZGJPQlJ2Q29WN2dxWFJ3NUZpcHExcWZlOFFv?= =?utf-8?B?eUVYV28xWG93a1NyUC9vQjRSTUNMRElrb2x3UFVjdnRGcmpTVCtFTUtnc1FK?= =?utf-8?B?dFdqdTZJNHJvTTE1dGtPc1lEamhXYlhwSlhJcXEzcmg2bkExSHdUSHl4UlpF?= =?utf-8?B?VkZpQjkvdE80N3lWaDdWYWpxK3ZvWFZabDNLeWkzbFM1SlNJTDVtc2dBL0Rr?= =?utf-8?B?cEt6WCtDU1JmcHZlM1lxSnV2Z1ozNlhtdnFlbGdwMDZaa08xUjJQVVN3Qmkr?= =?utf-8?B?T2ROcUYySmQvbW9ZbkRsSzNaaFpmUFNIdXhQS1JqaVh3MUFDNG5xMy8reEt6?= =?utf-8?B?cmh3b1o5YVBISnVHUVhDclIva1JQQ0FMTVFYbm9JdkN1WEJsWE42dG1HNmJL?= =?utf-8?B?dlRDaTBsSmpSeEVUcTlSVnpvaWU5SDZoR0JUNW5uUHJ2Qk1qclRPRk9lTExM?= =?utf-8?B?OGdSYS9QQWl1UThoUS9pTktwWEJaT0hoWm4vR2FqdEVwczM5REttT0tRMU8y?= =?utf-8?B?R0twMVBmZ241bjFsRDQxREk4Z3owcVJ3cWFvYS84NmM1RlVWb3g3enhIYnlD?= =?utf-8?B?ak9nbCtzNWJxVFZva21NNCtwRVZZMTg2UHlsb1RkZCtHYS9ocVdLWDdSYWd6?= =?utf-8?B?YUR6T2VaNjhLTmNrVHFrbmVmYXJvaHp1eml5QUxKY0sxSjhwZThGZ3BkL3Nh?= =?utf-8?B?RThjUStBVzV0b0J2RVA2MEtkZ0txUEpqR3U4YmtuU2tHRWFXMHhxZXU0cTBQ?= =?utf-8?B?Q0xxUzlNNmVWTFFNNWQ1VFF1a3FIQT09?= X-Microsoft-Exchange-Diagnostics: 1;VI1PR09MB0062;3:CvMroEtcXYQ+MG1czWMcff28feL5z4ofnnO6dsw6NDK6kvLStyOHm9cj4Pgw7g0isDnr+S52NYY1pNzqvag9LF2rcWonTf62pSfcO+gTJe+PYT1XlzXc3cdF6uP1G55iMPqS5Ioo4ZDdVXi4pLO+1A==;10:gl2g26Yp7rKRsIRcdYJGJAhvcbFmri7j04+DqGojHKY4lpjhj5p3OjVqEDI58LsTbVDFQQ63iNUfXAhQvuTs4B8H7c/6Mjw3wFEqebS8mws=;6:uLr+cxVpNyGv52UHLfkZhODh2LXcg2HO4TNrM+9OCYrkp6YCr4wrqNbrwBVmBpf4 X-OriginatorOrg: gfproducts.ch X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Jun 2015 07:15:08.8904 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR09MB0062 Hi Spencer, I certainly know how to configure a proxy or how to rewrite URLs if I need to and we are currently not looking for a contractor, but thanks for your message! :) Jonathan On 06/18/2015 11:29 AM, Spencer Brown wrote: > First, your firewall should really be your frontend There operational > frontend is apache, which is common. You want every url with opscenter > in it handled elsewhere. You could also set up proxies for /. > cluster-configs, etc... > Then there is mod_rewrite, which provides a lot more granularity about > when you want what gets handled where.I set up the architectural > infrastructure for Orbitz and some major banks, and I'd be happpy to > help you out on this. I charge $30/hr., but what you need isn't very > complex so we're really just talking $100. > > On Thu, Jun 18, 2015 at 5:13 AM, Jonathan Ballet > wrote: > > Hi, > > I'm looking for information on how to correctly deploy an OpsCenter > instance behind a HTTP(S) proxy. > > I have a running instance of OpsCenter 5.1 reachable at > http://opscenter:8888/opscenter/ but I would like to be able to > serve this kind of tool under a single hostname on HTTPS along with > other tools of this kind, for easier convenience. > > I'm currently using Apache as my HTTP front-end and I tried this > naive configuration: > > > ServerName tools > ... > ProxyPreserveHost On > ######### Proxy to OpsCenter ######### > ProxyPass /opscenter/ http://opscenter:8888/opscenter/ > ProxyPassReverse /opscenter/ http://opscenter:8888/opscenter/ > > > This doesn't quite work, as OpsCenter seem to also serve specific > endpoints from / directly > > > Of course, it doesn't correctly work, as OpsCenter seem to also > serve specific data from / directly, such as: > > /cluster-configs > /TestCluster > /meta > /rc > /tcp > > Is there something I can configure in OpsCenter so that it serves > these URLs from somewhere else, or a list of known URLs that I can > remap on the proxy, or better yet, a known proxy configuration to > put in front of OpsCenter? > > Regards, > > Jonathan > >