Simple Reverse Proxy

This is how to install a simple HTTP/HTTPS reverse proxy using Pound on NetBSD.

Installation

Install a NetBSD host.
I’ve used a XEN3PAE_DOMU instance.

Install the pound package from the pkgsrc binary repository (or compile it):

# pkg_add http://nyftp.netbsd.org/pub/pkgsrc/packages/NetBSD/i386/5.0/All/pound-2.4.5nb1.tgz

Create the directory that will be used to chroot the daemon:

# mkdir /var/chroot/pound
# chown _httpd:_httpd /var/chroot/pound

Install the SSL certificate that you’ll use to publish HTTPS web sites:

# mkdir /usr/pkg/etc/pound
# chown _httpd:_httpd /usr/pkg/etc/pound
# chmod 0750 /usr/pkg/etc/pound
# cp [CERTIFICAT] /usr/pkg/etc/pound/www.tumfatig.net.pem
# chown _httpd:_httpd /usr/pkg/etc/pound/www.tumfatig.net.pem
# chmod 0640 /usr/pkg/etc/pound/www.tumfatig.net.pem

Add “pound=YES” to the rc.conf file.
Add a line to start the pound daemon to the rc.local file.

Configuration

Fill-in the /usr/pkg/etc/pound.cfg configuration file.
will add code here later…

No Comments

Leave a Reply

%d bloggers like this: