httpd-cvs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
Subject svn commit: r1648846 - in /httpd/httpd/trunk/docs/manual/mod: mod_proxy.xml mod_proxy_connect.xml
Date Thu, 01 Jan 2015 13:56:40 GMT
Author: fabien
Date: Thu Jan  1 13:56:40 2015
New Revision: 1648846

Add a hint about how CONNECT-method requests are filtered out by <Proxy>,
and how to enable them. I could not find this information easily.

In particular, the straightforward <Proxy>... does
not allow CONNECT to the corresponding SSL server. Probably it would work
if a web client sent a "GET HTTP/1.1" to the
proxy, but none would do that.  


Modified: httpd/httpd/trunk/docs/manual/mod/mod_proxy.xml
--- httpd/httpd/trunk/docs/manual/mod/mod_proxy.xml (original)
+++ httpd/httpd/trunk/docs/manual/mod/mod_proxy.xml Thu Jan  1 13:56:40 2015
@@ -490,6 +490,18 @@ ProxyPass /examples http://backend.examp
+    <p>The next example will allow web clients from the specified IP
+    addresses to issue <code>CONNECT</code> requests to access the
+    <code></code> SSL server, if
+    <module>mod_proxy_connect</module> is enabled.
+    </p>
+   <highlight language="config">
+  Require ip
+   </highlight>
     <note><title>Differences from the Location configuration section</title>
       <p>A backend URL matches the configuration section if it begins with the 
       the <var>wildcard-url</var> string, even if the last path segment in the

Modified: httpd/httpd/trunk/docs/manual/mod/mod_proxy_connect.xml
--- httpd/httpd/trunk/docs/manual/mod/mod_proxy_connect.xml (original)
+++ httpd/httpd/trunk/docs/manual/mod/mod_proxy_connect.xml Thu Jan  1 13:56:40 2015
@@ -63,6 +63,19 @@
         <dd>The local port used for the connection to the backend server.</dd>
+   <p>CONNECT method requests are controlled by the
+   <directive module="mod_proxy">Proxy</directive> block
+   as any other HTTP request going through.
+   SSL connections through a proxy may be filtered explicitely
+   by specifying the target host and port, for instance:
+   </p>
+   <highlight language="config">
+  Require ip
+   </highlight>

View raw message