Tunneling over plain-HTTPS?

[divB]

Hi,

I've the following scenario: A Linux gateway with just Port 80 and 443 (Apache2 Webserver) and Port 22 (ssh) open. Nothing more.

Behind that Linux Gateway there's a 2x ApplicationServer on Windows Server 2003 (on VMware).

I do not want to directly give access to the WindowsServer from the internet but I'd rather like to "tunnel" the 2x traffic over plain HTTPS using Apache2. Is this somehow possible?

Would this be possible with the Webexport (http://www.2x.com/forums/viewtopic.php?t=1455)?

Thank you in advance,
divB

 

[nixu]

Your 2X Gateway MUST be infrount of the web server. The 2X Application server on the other hand can be behind.

This is what you can do.

                                 Firewall
                                    |
---> 2x gateway port 80 & 443  ---- |------>  2x App server.
                 |                  |
                 |                  |
                 \/                 |
        Apache2 Webserver  port 81  |
                                    |

Nixu

 

[divB]

Hi,

I was afraid of that. The problem is that on the one hand the complete Windows Installation runs inside a VMware emulation on a Linux host. Piping the whole traffic to the VMware host system and then back makes the whole thing slow and error-prone. One the other hand it would break the firewall to let the Windows machine have direct access to the internet.

I guess the 2x gateway isn't available for *NIX?

Another idea: Do you you how the 2x protocol works? Is it built on the HTTP protocol or is it a simple proprietary binary protocol?

My idea would be an apache module that simple routes all traffic which makes an "invalid" (HTTP) request to the 2x App server. (if the protocol is binary/proprietary).

If the protocol would be built up on HTTP protocol things would be much more easier: Apache would just need to pass all requests back to the 2x Server ("reverse proxy").

But i guess that the protocol will be similar to RDP and just use port 80, won't it?

Do you think this idea would work?

lg,
divB

 

[nixu]

HI

My idea would be an apache module that simple routes all traffic which makes an "invalid" (HTTP) request to the 2x App server. (if the protocol is binary/proprietary)

.

This should work fine as the protocol is binary/proprietary.

Nixu[/quote]