Best way for simple proxy?

Help
1

I have a simple set up. I have 1 public IP so I want Caddy to proxy domains to hosts on the local network.

I currently have this:

domain.com:80 {
reverse_proxy http://10.0.0.35
}

domain.com:443 {
reverse_proxy http://10.0.0.35
}

However, is there any way to make it simpler, such as combining the two (same domain but different ports)? I want Caddy to get SSL certificates for the domains. Are there other options I should consider for a basic proxy that simply redirects to another host like this?

2

After reading some docs and forum posts I’ve come to this:

domain.com, www.domain.com {
reverse_proxy http://10.0.0.35 {
header_up Host {http.request.host}
header_up X-Real-IP {http.request.remote.host}
header_up X-Forwarded-For {http.request.remote.host}
header_up X-Forwarded-Port {http.request.port}
header_up X-Forwarded-Proto {http.request.scheme}
}
}

Can anymore be done for a simple proxy?

3

Yep! That’s how to do it!

You don’t need any of the header_up stuff though. Caddy already sets the For and Proto headers on its own automatically, and the other 3 are very rarely necessary.

Those header_up options are very commonly copy pasted from config to config by users who aren’t sure what those do without understanding why they need them.

4

Is my understanding correct that if I just set domains like above, then Caddy takes care of http and https (including certificate) by itself so I never have to specify ports basically?

5

Yep!

6

Nice, thanks :slight_smile:

7

Is it possible to disable http2 for domain with Caddy v2?
“http2 false” as used in v1 doesn’t seem to work?

8

No. Why would you need that? If the client doesn’t support http2, it will fallback to http1.1.

9

Alright, then there’s no need to disable it :slight_smile:

10

It is possible, but this is decided at the TLS layer:

tls {
    alpn http1.1
}

Still… don’t do this unless it’s really necessary @Amplificator – Francis is right, HTTP/2 will only be used if the client supports it.

1 Like
11

Alright, I’ll keep it enabled :slight_smile:

12

This topic was automatically closed after 30 days. New replies are no longer allowed.