HTTP Proxy Server: Apache/Nginx Reverse Proxy Configuration

Being a middleman and not making a difference? A Practical Manual for Reverse Proxy Configuration

A lot of partners first heard of reverse proxy always confused, in fact, this thing is like a courier transfer station. The goods you buy online will not be sent directly from the manufacturer, but first to the local warehouse and then transferred. Similarly, the reverse proxy server is to help your real server to receive customers "reception", today we will teach you how to use Apache/Nginx to build this reception.

Three questions for the soul before configuration

Why do I need a proxy IP?To cite a real case: last year, an e-commerce platform for promotions, direct exposure of the source station IP led to the server was wool party crowded. If you use a reverse proxy + dynamic IP pool, it's like putting a gas mask on the server, hiding the real address and spreading the traffic pressure.

I have to brag about this.ipipgo's Residential IP ResourcesTheir IPs are real home broadband IPs, unlike server room IPs that are easily recognized and intercepted. Especially when doing business that requires a long-term stable connection, using their static residential IP is very effective.

Apache reverse proxy settings (exclusive for older drivers)

1. First, make sure that your Apache installed proxy module (not installed their own face to the wall)
2. Open the httpd.conf file and add this paragraph at the end:

ProxyPass "/" "http://你的目标服务器/"
    ProxyPassReverse "/" "http://你的目标服务器/"
    ProxyRequests Off
</VirtualHost

Be careful to putdestination server addressSwitch to a proxy IP provided by ipipgo, for example to http://123.123.123.123:8080这样的格式. Here comes the point!ProxyRequests OffThis parameter must be set, otherwise your server will become a public proxy, which will be exploited by blackmailers in minutes.

Nginx Reverse Proxy Configuration (Newbie Friendly)

Nowadays, young people prefer to use Nginx, after all, the configuration file is more refreshing. Open nginx.conf and add these to the server block:

location / {
    proxy_pass http://代理IP:端口; proxy_set_header Host $host; proxy_set_header
    proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header
    proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr.
}

Here's a pitfall to watch out for:proxy_set_headerThese two lines are not for show! If you don't add them, the request header received by the back-end server will be misplaced, just like if you send a courier without writing the recipient's phone number. It is recommended to work with ipipgo'sLong-lasting static IPUse it to avoid frequent IP changes that result in the configuration always having to be modified.

Apache vs Nginx: What's the best way to go?

Personal advice: if you want to use a dynamic IP pool, it's easier to go with Nginx. Like ipipgo'sDynamic Residential IPSupports API real-time IP replacement, with Nginx's reload directive, it can realize minute-level switching without interrupting service.

Common Rollover Scene QA

Q：Why can't I access it after configuration?
A: First check three pieces of kit: 1) whether the firewall release ports 2) whether the proxy IP is valid (with ipipgo)Online testing tools(3) Whether the target server allows proxy access

Q: Proxy servers can't handle high concurrency?
A: 80% of the short-lived IP, frequent establishment of new connections to slow down the speed. Change to ipipgoExclusive long-lasting IPDoesn't it smell good to use a full bandwidth for one IP?

Q: How do I test if the proxy is working?
A: Write a php page on the target server:
<?php echo $_SERVER[‘HTTP_X_REAL_IP’]; ?>
If your real IP is displayed when accessing, it means the proxy is successful (remember to turn off direct access)

Say something from the heart.

There are two things I fear the most in reverse proxying: IP blocking and troublesome configuration. Tossing public proxies on your own is like buying a mask at the market - the quality depends on luck. Professional things should be left to the professionals, such asipipgoThis kind of service provider with 90 million+ residential IP pools can automatically filter blacklisted IPs, which is much more reliable than we manually change IPs. Next time you encounter configuration difficulties, remember three key points: use good proxy header settings, choose the right IP type, and regularly check the channel status, and you are guaranteed to lose less hair.