Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Reverse proxy MSRPC in Caddy v2 #2732

Open
whitestrake opened this issue Aug 30, 2019 · 0 comments

Comments

@whitestrake
Copy link
Collaborator

commented Aug 30, 2019

1. What would you like to have changed?

Implement special handling for reverse proxying MSRPC / tunneling as required for Microsoft Remote Desktop Gateway and Outlook Anywhere services.

2. Why is this feature a useful, necessary, and/or important addition to this project?

As these services don't use standard HTTP, despite communicating on HTTP(S) ports and using the same to negotiate / encrypt connections, without this addition Caddy can't reverse proxy these services effectively. People wishing to use Caddy to load balance a hybrid environment would instead need to use HAProxy, which appears to handle this natively, or Apache, which apparently handles it with a third party module (see: https://github.com/bombadil/mod_proxy_msrpc)

3. What alternatives are there, or what are you doing in the meantime to work around the lack of this feature?

HAProxy apparently handles this, and supports TLS passthrough, so one could put HAProxy in front of both Caddy and MSRPC services.

The net server type or even plain port forwarding would suffice only if the user doesn't also want to have Caddy hosting / proxying to other servers in a la vhosts.

4. Please link to any relevant issues, pull requests, or other discussions.

https://caddy.community/t/need-help-setting-up-caddy-as-reverse-proxy-for-remote-desktop-services-gateway/347
https://caddy.community/t/caddy-as-remote-desktop-gateway/4383
https://caddy.community/t/remote-desktop-gateway-via-subdomain/6145

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
1 participant
You can’t perform that action at this time.