Blog

Managed File Transfer and Network Solutions

Setting Up A HTTPS To HTTP Reverse Proxy

Posted by John Carl Villanueva on Wed, Jul 01, 2015 @ 11:58 PM

Overview

Today, we'll teach you how to set up a HTTPS to HTTP reverse proxy. This service can come in handy if you have a HTTP Web server hosted in an internal network that you would like external clients to access via HTTPS. That way, inbound clients connecting via the Internet can access your site securely. 


What we want to do

https_http_reverse_proxy

Notice that, while the reverse proxy and web server exchange data via plain HTTP, clients connecting to the reverse proxy communicate over a secure HTTPS connection. As such, these connections are able to benefit from the security functions of SSL, such as data-in-transit encryption and host authentication. 

This configuration makes perfect sense because, while client requests originating from the same internal network as the Web server can be considered safe, requests coming from the Internet should be treated with caution.

 

How to do it

The screenshots you'll be seeing below are from the JSCAPE MFT Gateway Web GUI. Don't worry if you don't have that installed. Just go through the tutorial to see how easy it is to set this up.

Then if you like what you see, just simply download the free evaluation by clicking the download button at the end of the post.

Sounds good? Let's proceed.

Launch the JSCAPE MFT Gateway Manager. It's a Web GUI, so it runs on any popular browser, including Chrome, Firefox, Safari, and Internet Explorer.

Once you've launched the Manager, navigate to the Services menu and then click the Add button.

 

add-https-http-proxy-service

 

Select HTTPS/HTTP as the proxy service protocol from the Protocol drop-down list and then click OK.

 

select-https-http-protocol

 

Enter the IP/host address of your reverse proxy. This will be the IP address/hostname your reverse proxy will be listening on and where external clients will be connecting to via HTTPS. Also specify the port number. The usual value is 443.

After that, specify the IP address/hostname of your HTTP server. This Web server would likely be found in your internal network, behind your corporate firewall. Also specify the port number of that Web server. The usual value is 80.

 

https-http-settings

 

After that, go to the Key setting and select a server key. This is the key that will be used to provide data-in-motion encryption and server authentication. 

 

https-http-settings-key

 

Tick the checkbox that says Enable URL rewriting and then click the Settings button. 

 

 

https-http-enable-url-rewriting

 

There can be instances when you may need to rewrite HTTP headers and/or content. For example, you might want to trap HTTP responses containing the target host/port and replace them with the local host/port of the gateway. This can be especially important in cases where HTML content returned by HTTP/S service contains both relative and absolute URL references.

The URL rewrite rules will enable JSCAPE MFT Gateway to carry out those rewrites automatically.

For more information about setting URL rewrite rules, click that link. But for now, just tick HTTP to HTTPS and then click the OK button.

 

https-http-url-rewrite-rules

 

Review your settings. If everything looks good, finalize this procedure by clicking the Add button.

 

https-http-add

 

You should now see your HTTPS/HTTP service on the Services screen. Try connecting to it from a couple of Web clients. 

newly-added-https-http-service-1

 

Here's a screenshot showing a Web browser connecting to a JSCAPE MFT Server Web-based file transfer service via the HTTPS/HTTP reverse proxy.

 

connecting-to-https-http-reverse-proxy

 

Get Started

Want to try this yourself? Download the free, fully-functional evaluation edition of JSCAPE MFT Gateway now. 

 

Download JSCAPE MFT Gateway

 

Other articles related to this

 

Comparing Load Balancing Algorithms

Active-Active vs Active-Passive High Availability Cluster

Configuring A High Availability Cluster for Various TCP/UDP Services

How To Set Up SSL Client Authentication on an HTTPS and FTPS Server

Top 8 Benefits of a Reverse Proxy

Forward Proxy vs Reverse Proxy

 

 

Topics: JSCAPE MFT Gateway, Secure File Transfer, Reverse Proxy