Hacker News Reader

What if you just set up an nginx reverse proxy?

gitrepo.mycompany.com/product.git --> reverse proxy to git.mycompany.com/gitrepo/product.git

Should be straight forward in nginx

Just curious since I am not experienced with this stuff, are you talking about a TCP reverse proxy (so it could work with the SSH protocol too)? And would haproxy work equally well to nginx for this?

If I remember right, nginx doesn't support ssh + http(s) on the same port. I'd be happy to learn this isn't correct, though because my personal server only is allowing http through.

Generally speaking, you cannot bind more than one service to a port on a given interface

Yeah, that's the issue i had ran into. I was `listen`ing on 80, but wanted to multiplex ssh+http on the same port and nginx didn't support it.

You can actually distinguish between those on a single port using http://nginx.org/r/ssl_preread and some sslh-like checks using e.g. njs.

You bring up a good point -- nginx proxying won't help for connections made over SSH (which is a large portion of our deployment)

Good point. However, I guess recent nginx supports streaming tcp proxy, so maybe it would work. http://nginx.org/en/docs/stream/ngx_stream_proxy_module.html

Presumably this falls afoul of the "without hacking" requirement.

Reply on news.ycombinator.com