If you ever read my blog entry for setting up the Debian.org.tw, you probably already know that I love to use reverse proxy in the front of my web servers. This approach can solve the signal IP address for multiple Vservers problem, also it can provide web cache which reducing the server loading.

Since the proxy server (Squid) pass the http session to the real web servers, one of the problem is that my web servers always saw signal source IP address, which is the proxy’s IP address. Even through the proxy server still put the client’s IP in the `X-Forwarded-For’ http header, it’s still painful to retrieve the correct IP address from the head in every web application.

Thanks for Thomas Eibner, who wrote the reverse proxy add forward module for apache. The module simply check the IP address to see if it comes from the proxy server, if it is it will put the IP address in `X-Forwarded-Host’ or `X-Host’ to `Host’ header. So you don’t need to worry about the wrong IP address, and track the http requests more easily.

Debian package is ported by Piotr Roszatycki, but it’s still the old 0.5 version. Since the 0.6 is out, I filed a bugreport for remind him. For my etch servers, I back-ported the package with the last version. You can download it from my personal repository.

BTW, Piotr Roszatycki use yada for libapache2-mod-rpaf, who is also the maintainer of yada. After reading the yada’s script file `debian/packages’, I really feel like I went to my `good’ old days with RPM/specs. :p

昨晚在 魯米爺咖啡Tossg 聚會分享了一點架設 dot 的心得。

說是分享,其實只是漫談。稍微介紹了現在的 Debian.org.tw 的伺服架構,其實我一向很討厭巨細靡遺的介紹「如何作」這種事情,因為通常沒有 Google 大神不知道的事情,而且重新整理敘述那些步驟,遠比順利的話數分鐘內可以設定完成的工作量要大多了,絲毫沒有意願作這種差事。尤其我通常使用那些穩定、資料充足的自由軟體,在一堆高手前面獻寶實在丟臉,真正有意義的事情是或許提供方向與經驗吧。

Continue reading