Skip to content

README.md

Latest commit

 

History

History
70 lines (51 loc) · 2.03 KB

README.md

File metadata and controls

70 lines (51 loc) · 2.03 KB

ssl-reverse-proxy

Simple HTTPs reverse proxy for an http backend server

Installing

go get -u github.com/rydz/ssl-reverse-proxy

Example

If this proxy is the first in your chain, you should enable the -strip-forwarded-for flag which will strip incoming X-Forwarded-For headers from the incoming requests.

X-Forwarded-For headers allow servers behind proxies to know the origin IP address of the request.

ssl-reverse-proxy \
  -target "http://localhost:8080" \
  -strip-forwarded-for \
  -cert "certificate.crt" \
  -key "key.key" \

Flags

Flag Default Description
u :80 address to bind to on upgrade server
a :443 address to bind to on HTTPs server
cert cert.crt location of certificate file
key key.key location of key file
strip-forwarded-for false strip existing forwarded for headers to prevent spoofing
formatter text logrus formatted for logs, one of 'text' or 'json'
color false enable color in the text formatter

Docker

Example usage

docker build -t reverse-proxy .

docker run \
  --network=webappnetwork \
  -e "TARGET=http://webapp" \
  -p "80:80" \
  -p "443:443" \
  -v "./certs":"/var/certs/" \
  -d \
  --name reverse-proxy \
  reverse-proxy

Environment variables

TARGET http://webapp:8080

Location of target server

CERT /var/certs/cert.crt

Location of certificate file

KEY /var/certs/key.key

Location of key file

UPGRADE_ADDR :80

Port to host upgrade server on.

SERVER_ADDR :443

Port to host SSL server on

STRIP_FORWARDED_FOR "false"

Strip the list of IPs from incoming X-Forwarded-For headers to prevent spoofing