We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
Accept
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus
Barracuda CloudGen Firewall
Overview Documentation Training Certification Materials

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see https://campus.barracuda.com/doc/71862301/ for further information on our EoS policy.

How to Set Up a Reverse Proxy

  • Last updated on

In Reverse Proxy mode, the proxy directs incoming requests from other servers to the client without providing the origin details. To set up a reverse proxy using the Barracuda NG Firewall, configure the listening port and reverse proxy settings.

In this article:

Before You Begin

To set up a reverse proxy, first complete the following:

  1. Install the Barracuda NG Firewall hotfix 521 on your system.
  2. Verify that you activated the HTTP Proxy service in reverse proxy mode. For instructions, see How to Set Up and Configure the HTTP Proxy.

Configure the Listening Port

In the settings for the HTTP Proxy, use TCP listening port 80.

  1. Go to CONFIGURATION > Configuration Tree > Box > Virtual Servers > your virtual server > Assigned Services > HTTP Proxy > HTTP Proxy Settings.
  2. In the left menu, select IP Configuration.
  3. Click Lock.
  4. In the TCP Listening Port field, enter 80. Verify that you have port 80 available for your reverse proxy.
  5. When you change the listening port, you must also change the port used in host firewall rule OP-SRV-PX. By default, the rule uses TCP 3128. If you want to use HTTP, change TCP 3128 to HTTP. If you want to use HTTP and HTTPS, change TCP 3128 to HTTP+S. For more information on configuring host firewall rules, see Host Firewall.
  6. Click Send Changes and Activate.

Configure Reverse Proxy Settings

To configure the reverse proxy settings:

  1. Go to CONFIGURATION > Configuration Tree > Box > Virtual Servers > your virtual server > Assigned Services > HTTP Proxy > HTTP Proxy Settings.
  2. In the left menu, select Reverse Proxy Settings.
  3. Click Lock. 
  4. Specify your Reverse Proxy Settings. For more information on these settings, see the following Reverse Proxy Settings section.
  5. Click Send Changes and Activate.

Reverse Proxy Settings

The following table provides more detailed descriptions of the Reverse Proxy Settings:

SettingDescription
Backend Web SiteThe website that should be reversed respectively accelerated. If there is no host header, enter your primary domain (for example, mydomain.com).
Use SSL

Select yes from the Use SSL list to provide HTTPS and HTTP support for the reverse proxy. Import your certificate and key by clicking Ex/Import for SSL Certificate and SSL Private Key.

Switch to Advanced View and click on SSL Settings in the left menu to configure SSL cipher settings. When set to Disallow Weak Ciphers (default), the following cipherstring is used:

!aNULL:ALL:!EXPORT:!LOW:!MEDIUM:!RC2:!3DES:!DSS:!SEED:!RC4:!PSK:@STRENGTH

Backend IP AddressesIn this table, add the IP addresses of your back-end servers. You must add the IP address of at least one back-end server.
Round Robin

Unless you want to use domain or URL-based mapping, you can enable round robin load balancing between multiple back-end servers by selecting yes from the Round Robin list.

Load balancing is not available if traffic shaping is enabled on the device to which the web server is attached. For more information, see Traffic Shaping.

Additional Backend DomainsIn this table, you can add additional domains for domain-based virtual hosts.
Domain to Backend Mapping

Note that the Name field of entries in this table must not exceed 21 characters.

If you have not installed Barracuda NG Firewall hotfix 521, the ACL-based reverse mapping table is provided. In this table, you can add ACLs for the back-end server that should be used.

To map either a domain or a specific URL to a back-end server, click +, enter a descriptive name for the map (for example, DOMA04), and click OK. 

  • In the Backend Mappings configuration window, map either a domain or a specific URL to a back-end server.
  • From the Mapping Type list, select Domain for domain to backend mapping. If you are using url-regex to back-end mapping, select Url-Regex.
  • From the Domain list, select a domain that is specified in the Additional Backend Domains table. If you are using url-regex to back-end mapping, enter the regular expression to match an URL against (for example, http://example.com/foo/.*).

  • From the Backend list, select the back-end server that should handle the requests that match the above configuration. This list includes the back-end servers that you entered in the Backend IP Addresses table.

Last updated on
Previous Article Next Article