Restrict access to a location in Apache reverse proxy with TLS

Fri, 04 Sep 2020 00:00:00 +0000

Ever had a case where you needed to use a name based Apache reverse proxy in front of some application server, while restring access to some proxied location at the same time? Here’s how to do it.

First define a virtual host:

<VirtualHost *:443>
    ServerName myserver.example.com

Set the request headers (you are of course using TLS, aren’t you):

RequestHeader set X-Forwarded-Proto "https"
RequestHeader set X-Forwarded-Port "443"

Proxy to some internal address, here to localhost port 8080:

ProxyRequests Off
ProxyPreserveHost On
ProxyPass http://127.0.0.1:8080/
ProxyPassReverse http://127.0.0.1:8080/

Restrict access to the host or networks you need to:

<Location "/my/location/">
 Require ip 10.0.0.0/8
</Location>

Note: this will work with Apache 2.4 and up. With older versions you can use the same idea.

Apache on Puppeteers Oy

Restrict access to a location in Apache reverse proxy with TLS

First define a virtual host:

Set the request headers (you are of course using TLS, aren’t you):

Proxy to some internal address, here to localhost port 8080:

Restrict access to the host or networks you need to: