Is it possible to configure Nginx to accept requests both with and without proxy protocol to the same URL?phpbb behind a reverse proxyProtocol switching with reverse proxy and application server with static linksHow to use nginx as reverse proxy with multiple IPs and SSL?Can I run Apache2 and Nginx on the same server with only 1 IPDoes NGINX allow for switching load to another server without losing the requests?How to let nginx simply pass a request to a forwarding proxy server?How to proxy multiple node apps on the same SSL domain with nginxnginx reverse stream proxy with multiple ports to the same serverNginx configuration with HAproxy proxy protocol and internal redirectionNGINX reverse-proxy exposing backend server IP address and protocol

What is the significance behind "40 days" that often appears in the Bible?

PTIJ: Who should I vote for? (21st Knesset Edition)

Why does overlay work only on the first tcolorbox?

Is "upgrade" the right word to use in this context?

Do I need to be arrogant to get ahead?

Why Choose Less Effective Armour Types?

What's the meaning of a knight fighting a snail in medieval book illustrations?

How could a scammer know the apps on my phone / iTunes account?

New passport but visa is in old (lost) passport

A single argument pattern definition applies to multiple-argument patterns?

Is it true that good novels will automatically sell themselves on Amazon (and so on) and there is no need for one to waste time promoting?

Have the tides ever turned twice on any open problem?

ERC721: How to get the owned tokens of an address

Relationship between sampajanna definitions in SN 47.2 and SN 47.35

Most cost effective thermostat setting: consistent temperature vs. lowest temperature possible

Is there a symmetric-key algorithm which we can use for creating a signature?

Official degrees of earth’s rotation per day

I got the following comment from a reputed math journal. What does it mean?

Bacteria contamination inside a thermos bottle

What is the relationship between relativity and the Doppler effect?

Violin - Can double stops be played when the strings are not next to each other?

Is it normal that my co-workers at a fitness company criticize my food choices?

Is a party consisting of only a bard, a cleric, and a warlock functional long-term?

Why do passenger jet manufacturers design their planes with stall prevention systems?



Is it possible to configure Nginx to accept requests both with and without proxy protocol to the same URL?


phpbb behind a reverse proxyProtocol switching with reverse proxy and application server with static linksHow to use nginx as reverse proxy with multiple IPs and SSL?Can I run Apache2 and Nginx on the same server with only 1 IPDoes NGINX allow for switching load to another server without losing the requests?How to let nginx simply pass a request to a forwarding proxy server?How to proxy multiple node apps on the same SSL domain with nginxnginx reverse stream proxy with multiple ports to the same serverNginx configuration with HAproxy proxy protocol and internal redirectionNGINX reverse-proxy exposing backend server IP address and protocol













1















I have a set of applications behind a proxy server which forwards request appropriately and uses the proxy protocol to preserve the request's origin data. The apps also make requests amongst each other so I want them to accept requests with and without the proxy protocol. Is it possible to configure Nginx to do this in some way without using a different server_name or port?










share|improve this question


























    1















    I have a set of applications behind a proxy server which forwards request appropriately and uses the proxy protocol to preserve the request's origin data. The apps also make requests amongst each other so I want them to accept requests with and without the proxy protocol. Is it possible to configure Nginx to do this in some way without using a different server_name or port?










    share|improve this question
























      1












      1








      1








      I have a set of applications behind a proxy server which forwards request appropriately and uses the proxy protocol to preserve the request's origin data. The apps also make requests amongst each other so I want them to accept requests with and without the proxy protocol. Is it possible to configure Nginx to do this in some way without using a different server_name or port?










      share|improve this question














      I have a set of applications behind a proxy server which forwards request appropriately and uses the proxy protocol to preserve the request's origin data. The apps also make requests amongst each other so I want them to accept requests with and without the proxy protocol. Is it possible to configure Nginx to do this in some way without using a different server_name or port?







      nginx reverse-proxy






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked 6 hours ago









      Calum HalpinCalum Halpin

      154




      154




















          1 Answer
          1






          active

          oldest

          votes


















          2














          Without using a different server block, the only way to do this is with different listen directives. This means the server running nginx must have different IP addresses for connecting to the server from the external proxy and from the internal server farm.



          For example, you might have an internal network 10.87.239.0/24 for your internal apps, and the server running nginx is on 10.87.239.3. Then you have an external network 10.87.238.0/24 which your external proxy server uses to reach nginx, and the server has address 10.87.238.3. In this case you can configure nginx as:



          server 
          # PROXY protocol connections
          listen 10.87.238.3:443 ssl http2 proxy_protocol;
          set_real_ip_from 10.87.238.2; # The address(es) of the proxies
          real_ip_header proxy_protocol;

          # Direct connections
          listen 10.87.239.3:443 ssl http2;
          listen [::]:443 ssl http2;

          # everything else for this block



          On a related note, you should have already deployed IPv6 within your organization, even without global IPv6 connectivity. You can use that for your internal communications if you haven't got a separate internal IPv4 network.






          share|improve this answer






















            Your Answer








            StackExchange.ready(function()
            var channelOptions =
            tags: "".split(" "),
            id: "2"
            ;
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function()
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled)
            StackExchange.using("snippets", function()
            createEditor();
            );

            else
            createEditor();

            );

            function createEditor()
            StackExchange.prepareEditor(
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader:
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            ,
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            );



            );













            draft saved

            draft discarded


















            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f958608%2fis-it-possible-to-configure-nginx-to-accept-requests-both-with-and-without-proxy%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            2














            Without using a different server block, the only way to do this is with different listen directives. This means the server running nginx must have different IP addresses for connecting to the server from the external proxy and from the internal server farm.



            For example, you might have an internal network 10.87.239.0/24 for your internal apps, and the server running nginx is on 10.87.239.3. Then you have an external network 10.87.238.0/24 which your external proxy server uses to reach nginx, and the server has address 10.87.238.3. In this case you can configure nginx as:



            server 
            # PROXY protocol connections
            listen 10.87.238.3:443 ssl http2 proxy_protocol;
            set_real_ip_from 10.87.238.2; # The address(es) of the proxies
            real_ip_header proxy_protocol;

            # Direct connections
            listen 10.87.239.3:443 ssl http2;
            listen [::]:443 ssl http2;

            # everything else for this block



            On a related note, you should have already deployed IPv6 within your organization, even without global IPv6 connectivity. You can use that for your internal communications if you haven't got a separate internal IPv4 network.






            share|improve this answer



























              2














              Without using a different server block, the only way to do this is with different listen directives. This means the server running nginx must have different IP addresses for connecting to the server from the external proxy and from the internal server farm.



              For example, you might have an internal network 10.87.239.0/24 for your internal apps, and the server running nginx is on 10.87.239.3. Then you have an external network 10.87.238.0/24 which your external proxy server uses to reach nginx, and the server has address 10.87.238.3. In this case you can configure nginx as:



              server 
              # PROXY protocol connections
              listen 10.87.238.3:443 ssl http2 proxy_protocol;
              set_real_ip_from 10.87.238.2; # The address(es) of the proxies
              real_ip_header proxy_protocol;

              # Direct connections
              listen 10.87.239.3:443 ssl http2;
              listen [::]:443 ssl http2;

              # everything else for this block



              On a related note, you should have already deployed IPv6 within your organization, even without global IPv6 connectivity. You can use that for your internal communications if you haven't got a separate internal IPv4 network.






              share|improve this answer

























                2












                2








                2







                Without using a different server block, the only way to do this is with different listen directives. This means the server running nginx must have different IP addresses for connecting to the server from the external proxy and from the internal server farm.



                For example, you might have an internal network 10.87.239.0/24 for your internal apps, and the server running nginx is on 10.87.239.3. Then you have an external network 10.87.238.0/24 which your external proxy server uses to reach nginx, and the server has address 10.87.238.3. In this case you can configure nginx as:



                server 
                # PROXY protocol connections
                listen 10.87.238.3:443 ssl http2 proxy_protocol;
                set_real_ip_from 10.87.238.2; # The address(es) of the proxies
                real_ip_header proxy_protocol;

                # Direct connections
                listen 10.87.239.3:443 ssl http2;
                listen [::]:443 ssl http2;

                # everything else for this block



                On a related note, you should have already deployed IPv6 within your organization, even without global IPv6 connectivity. You can use that for your internal communications if you haven't got a separate internal IPv4 network.






                share|improve this answer













                Without using a different server block, the only way to do this is with different listen directives. This means the server running nginx must have different IP addresses for connecting to the server from the external proxy and from the internal server farm.



                For example, you might have an internal network 10.87.239.0/24 for your internal apps, and the server running nginx is on 10.87.239.3. Then you have an external network 10.87.238.0/24 which your external proxy server uses to reach nginx, and the server has address 10.87.238.3. In this case you can configure nginx as:



                server 
                # PROXY protocol connections
                listen 10.87.238.3:443 ssl http2 proxy_protocol;
                set_real_ip_from 10.87.238.2; # The address(es) of the proxies
                real_ip_header proxy_protocol;

                # Direct connections
                listen 10.87.239.3:443 ssl http2;
                listen [::]:443 ssl http2;

                # everything else for this block



                On a related note, you should have already deployed IPv6 within your organization, even without global IPv6 connectivity. You can use that for your internal communications if you haven't got a separate internal IPv4 network.







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered 4 hours ago









                Michael HamptonMichael Hampton

                172k27315642




                172k27315642



























                    draft saved

                    draft discarded
















































                    Thanks for contributing an answer to Server Fault!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid


                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.

                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function ()
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f958608%2fis-it-possible-to-configure-nginx-to-accept-requests-both-with-and-without-proxy%23new-answer', 'question_page');

                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    Möglingen Índice Localización Historia Demografía Referencias Enlaces externos Menú de navegación48°53′18″N 9°07′45″E / 48.888333333333, 9.129166666666748°53′18″N 9°07′45″E / 48.888333333333, 9.1291666666667Sitio web oficial Mapa de Möglingen«Gemeinden in Deutschland nach Fläche, Bevölkerung und Postleitzahl am 30.09.2016»Möglingen

                    Virtualbox - Configuration error: Querying “UUID” failed (VERR_CFGM_VALUE_NOT_FOUND)“VERR_SUPLIB_WORLD_WRITABLE” error when trying to installing OS in virtualboxVirtual Box Kernel errorFailed to open a seesion for the virtual machineFailed to open a session for the virtual machineUbuntu 14.04 LTS Virtualbox errorcan't use VM VirtualBoxusing virtualboxI can't run Linux-64 Bit on VirtualBoxUnable to insert the virtual optical disk (VBoxguestaddition) in virtual machine for ubuntu server in win 10VirtuaBox in Ubuntu 18.04 Issues with Win10.ISO Installation

                    Torre de la Isleta Índice Véase también Referencias Bibliografía Enlaces externos Menú de navegación38°25′58″N 0°23′02″O / 38.43277778, -0.3838888938°25′58″N 0°23′02″O / 38.43277778, -0.38388889Torre de la Illeta de l’Horta o Torre Saleta. Base de datos de bienes inmuebles. Patrimonio Cultural. Secretaría de Estado de CulturaFicha BIC Torre de la Illeta de l’Horta. Dirección General de Patrimonio Cultural. Generalitat ValencianaLugares de interés. Ayuntamiento del CampelloTorre de la Isleta en CastillosNet.org