To set up an Apache HTTP Server as a reverse proxy: Requires Apache httpd version 2.4.17 or later.
To use an Apache HTTP Server as a reverse proxy, you need to run an a2enmod script and add directives to a. Configuration guidelines for Apache HTTP Server, IIS, NGINX, and Pound are provided below. To configure the headers in your proxy server, follow the guidelines that are specific to your server. You'll also need to configure the headers in your proxy server to point to the application at this location. If you're running your YouTrack server from a subdirectory or non-root context, you need to make sure that the base URL for your YouTrack server includes the context path. For specific instructions, see Stop and Start YouTrack. Follow the guidelines that are appropriate for your Apache, IIS, or NGINX server. XXXX is the port number your proxy server listens to.ĬontextPath is the name of the subdirectory where you run your YouTrack server, if you're not serving the application from the root context.Ĭonfigure the headers in your proxy server. Youtrack.sh configure -listen-port 1111 -base-url ġ111 is the port number that your YouTrack server listens to. Before you start, make sure you have selected the tab that corresponds to your YouTrack installation. The steps for performing this operation vary by installation type. The YouTrack service user should have sufficient permissions to access these files and folders. This command creates configuration files and folders. You can change the base URL for your YouTrack server from the command line using the configure command.Īlways execute the configure command on behalf of the OS user that runs the YouTrack service. Change the Base URL of your YouTrack Server Use the diagnostic tools for your reverse proxy to determine whether you provide sufficient connections and adjust these values accordingly. The exact values for connection-related directives varies based on server load. If you have an insufficient number of connections, or are serving pages over plain HTTP, issues and agile boards that are opened in new tabs are either blank, loading, or partially loaded. These connections are required by pages that support live updates. You will also need to optimize the performance settings for your server to allow a sufficient number of connections to YouTrack. Performance Optimization for Worker Connections The instructions for proxy server header configurations that are provided on this page include the directives that support HSTS. This protects your installation against possible man-in-the-middle attacks, where the redirect from the HTTP to the HTTPS version of the site can be exploited to direct a user to a malicious site instead of the secure version of the original page. We also strongly recommend that you set up your reverse proxy server to use HTTP Strict Transport Security (HSTS). Use the following list to determine which server version is required to complete this setup: The instructions on this page assume that these requirements are met. With earlier versions of OpenSSL, users connect using the legacy HTTP/1.1 specification, which lacks the performance benefits of an HTTP/2 connection. You also need to ensure that the OpenSSL library that is used by the reverse proxy server is version 1.0.2 or later. For most servers, the HTTP/2 protocol only works with HTTPS connections, which means that you need to secure your connections with an SSL/TLS certificate. To get the best performance from your YouTrack installation, your proxy server should support HTTP/2. Connections using older versions of the protocol are not supported. Secure connections to YouTrack Server installations must be configured to use TLS version 1.2 or later. This page includes guidelines for Apache, IIS, and NGINX servers. The reverse proxy setup consists of the following steps:Ĭonfigure YouTrack to point to the base URL of the proxy server.Ĭonfigure the headers of your proxy server. For details, see Configure Built-in TLS from the Command Line. You can also configure HTTPS for an existing YouTrack installation from the command line. For details, see Configure Built-in TLS in Web-based Configuration Wizard. You can configure and enable it in the Configuration Wizard during installation or upgrade. If your only reason for using a third-party proxy is to secure the connections between your YouTrack server and its clients, consider using the built-in TLS instead. You can set up YouTrack to work behind a reverse proxy server.
0 kommentar(er)
