Why might Apache ReverseProxy not work behind NAT?

A

Alexander Semenenko2020-11-20 12:24:04

Apache HTTP Server

Alexander Semenenko, 2020-11-20 12:24:04

The simplest ReverseProxy for accessing internal web servers. On the web servers of the 1C base. So after updating the platform to 8.3.17, the databases in the internal network are opened through a proxy, but when passing through nat they are not opened. It is clear that something has been changed in the platform (in the module for apache), but how could this affect the patency through nat.

access.log when requested from the internet (nat):

"GET /AU7ZYH8V/ru_RU/scripts/mod_bootstrap_bootstrap.js?sysver=8.3.18.1201 HTTP/1.1" 200 2885 "https://xxx/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"GET /AU7ZYH8V/ru_RU/manifest.json?sysver=8.3.18.1201 HTTP/1.1" 200 2885 "https://xxx/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"GET /AU7ZYH8V/ru_RU/e1csys/mngsrv/favicon.ico HTTP/1.1" 200 2881 "https://xxx/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

Access through a proxy but in the local network (without nat):

"GET /AU7ZYH8V/ru_RU/scripts/mod_bootstrap_bootstrap.js?sysver=8.3.18.1201 HTTP/1.1" 200 5021 "https://10.15.0.57/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"GET /AU7ZYH8V/ru_RU/scripts/mod_sw_sw.js?sysver=8.3.18.1201 HTTP/1.1" 200 614 "https://10.15.0.57/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"GET /AU7ZYH8V/ru_RU/mainform.html?sysver=8.3.18.1201 HTTP/1.1" 200 33935 "https://10.15.0.57/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"GET /AU7ZYH8V/ru_RU/webclient_start.css?sysver=8.3.18.1201 HTTP/1.1" 200 6532 "https://10.15.0.57/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"GET /AU7ZYH8V/ru_RU/scripts/lib_diff_match_patch.js?sysver=8.3.18.1201 HTTP/1.1" 200 6633 "https://10.15.0.57/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"GET /AU7ZYH8V/ru_RU/scripts/webcolors.js?sysver=8.3.18.1201 HTTP/1.1" 200 4315 "https://10.15.0.57/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"GET /AU7ZYH8V/ru_RU/scripts/lib_jszip_min.js?sysver=8.3.18.1201 HTTP/1.1" 200 30464 "https://10.15.0.57/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"GET /AU7ZYH8V/ru_RU/scripts/lib_html2canvas_min.js?sysver=8.3.18.1201 HTTP/1.1" 200 43845 "https://10.15.0.57/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"GET /AU7ZYH8V/ru_RU/e1csys/mngcore/splashBottom.png?sysver=8.3.18.1201 HTTP/1.1" 200 10900 "https://10.15.0.57/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"GET /AU7ZYH8V/ru_RU/e1csys/mngcore/splashTop.png?sysver=8.3.18.1201 HTTP/1.1" 200 11008 "https://10.15.0.57/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"GET /AU7ZYH8V/ru_RU/scripts/mod_main_loader.js?sysver=8.3.18.1201 HTTP/1.1" 200 949013 "https://10.15.0.57/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"GET /AU7ZYH8V/ru_RU/resourceStrings?sysver=8.3.18.1201 HTTP/1.1" 200 47356 "https://10.15.0.57/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"POST /AU7ZYH8V/ru_RU/e1cib/login?version=8.3.18.1201&cred=CA==&nooida&vl=ru_RU&clnId=af12688e-8b21-1c8d-5811-d90129ee3423 HTTP/1.1" 402 1240 "https://10.15.0.57/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

"GET /AU7ZYH8V/ru_RU/e1cib/additionalAuthSettings?sysver=8.3.18.1201 HTTP/1.1" 200 401 "https://10.15.0.57/AU7ZYH8V/ru_RU/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.66 Safari/537.36"

At the same time, passing nat mod_bootstrap_bootstrap.js is empty, and not passing it is really a java script file, with variable declarations. And since when passing through nat it turns out to be empty, then the further application does not start.

Maybe someone will be able to understand what is happening, or faced similar (not necessarily in 1C), unsubscribe.