Page Comparison

We provide several guides here to integrate PowerFolder Server with third party web servers:

Apache Proxy and PowerFolder Server for SSL Encryption

In this article we are showing a configuration example for running using PowerFolder Server with an Apache Proxy for a SSL-encrypted web interface sessions.

Requirements

The requirements below are necessary for the setup:

• Apache 2.2 and higher with mod_proxy,mod_rewrite and mod_ssl enabled.
• A valid, officially signed SSL certificate.  PowerFolder Clients will NOT work with invalid or self-signed certificates.

PowerFolder Server Web Configuration

For this scenario we need to change settings in the server preferences:

• Set the Web Base URL under Preferences > Network > Server URLs:

  Code Block
  https://powerfolder.example.com

  
  

• Set the Web Tunnel URL under Preferences > Network > Server URLs:

  Code Block
  http://powerfolder.example.com/rpc

   Please note that the URL must use HTTP not HTTPS, since the traffic posted against that URL will be encrypted by the PowerFolder internal protocol.

  
  

• Set the HTTPS/SSL port under Preferences > Network > Hostname and Ports:

  Code Block
  "-1"

  
  

 After changing those settings, please restart PowerFolder Server.

Apache Configuration

Configure a virtual host within Apache, which responds to requests to http://powerfolder.example.com and https://powerfolder.example.com and forwards the requests to the web port of PowerFolder Server:

<VirtualHost *:80>
       ServerAdmin hostmaster@example.com
       ServerName powerfolder.example.com

       RewriteEngine on
       RewriteCond             %{SERVER_PORT}  !=443
       RewriteCond             %{REQUEST_URI}  !^/rpc
       RewriteRule             ^.*$            https://%{SERVER_NAME}%{REQUEST_URI} [NC,R=301,L]

         ProxyPass               /rpc                    http://10.0.0.1:8080/rpc     nocanon
       ProxyPassReverse        /rpc                    http://10.0.0.1:8080/rpc
 
</VirtualHost>


Listen 10.0.0.1:443
<VirtualHost 10.0.0.1:443>
       ServerAdmin hostmaster@example.com
       ServerName powerfolder.example.com

       SSLEngine  On
       SSLCACertificateFile   /etc/apache2/ssl/powerfolder.example.com.ca-bundle.crt
       SSLCertificateFile     /etc/apache2/ssl/powerfolder.example.com.crt
       SSLCertificateKeyFile  /etc/apache2/ssl/powerfolder.example.com.key
       SSLCipherSuite ALL:-ADH:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP

        ProxyPass               /rpc                    http://10.0.0.1:8080/rpc     nocanon
       ProxyPassReverse        /rpc                    http://10.0.0.1:8080/rpc


       ProxyPass               /rpc                    !

        ProxyPass               /                       http://10.0.0.1:8080/        nocanon
       ProxyPassReverse        /                       http://10.0.0.1:8080/
</VirtualHost>

 We exclude the /rpc URL part from the SSL-encryption, because this URL is used for the PowerFolder Clients to tunnel their traffic by using the HTTP POST method, in case they are behind a firewall and can't establish a direct connection to PowerFolder Server. Since the PowerFolder data traffic is encrypted anyway by a PowerFolder internal protocol, we don't need encryption here. It would just slow down the connection.

 Please note: When it is required by the SSL certificate authority to use an intermediate certificate, it has to be loaded with the SSLCACertificateFile configuration entry. If such an intermediate certificate is NOT required, you can simply drop that line.

Setting up Nginx as SSL proxy

In this article we are showing a configuration example for running using PowerFolder Server with a Nginx Proxy for a SSL-encrypted web interface sessions.

Requirements

The requirements below are necessary for the setup:

• Nginx 1.1 and higher.
• A valid, officially signed SSL certificate.    PowerFolder Clients will NOT work with invalid or self-signed certificates.

PowerFolder Server Web Configuration

For this scenario we need to change settings in the server preferences:

• Set the Web Base URL under Preferences > Network > Server URLs:

  Code Block
  https://powerfolder.example.com

  
  

• Set the Web Tunnel URL under Preferences > Network > Server URLs:

  Code Block
  http://powerfolder.example.com/rpc

   Please note that the URL should not use HTTP not HTTPS, since the traffic posted against that URL will be encrypted by the PowerFolder internal protocol.

  
  

• Set the HTTPS/SSL port under Preferences > Network > Hostname and Ports:

  Code Block
  ' -1 '

 After changing those settings, please restart PowerFolder Server.

• PF server restart is required.

nginx Configuration

Configure a virtual host within Nginx, which responds to requests to http://powerfolder.example.com and https://powerfolder.example.com and forwards the requests to the web port of PowerFolder Server:

Please add the following parameter to the nginx.conf to allow the loadbalancer for uploading large files.

The http block in the configuration affects all of the server blocks or virtual hosts.

Following is an example of allowing uploads till 1 GB:

server {
      server { listen 80;
        server_name powerfolder.example.com;
    listen 10.0.0.1;                 server_name powerfolder.example.com;
       
        location / {  
                      rewrite       		rewrite ^ https://$server_name$request_uri? permanent;
      
         }
     
          location /rpc {
	                        proxy_pass http://10127.0.0.1:8080/rpc;
        		proxy_set_header X-Forwarded-Host $host;
				proxy_set_header X-Forwarded-For $remote_addr;
  }        }
}

server {
		listen      server {
                listen 10.0.0.1:443;
                443 ssl;
		server_name powerfolder.example.com;
                		client_max_body_size 100G;

		ssl on;
                		ssl_certificate /etc/nginx/ssl/powerfolder.example.com.chained.crt;
                ssl_certificate_key /etc/nginx/ssl/		ssl_certificate_key /etc/nginx/ssl/powerfolder.example.com.key;

                		location / {
                        proxy_pass http://10.				proxy_pass http://127.0.0.1:8080;
				proxy_set_header X-Forwarded-Host $host;
             }				proxy_set_header X-Forwarded-For $remote_addr;
		}

		location /websocket {
				proxy_http_version 1.1;
				proxy_pass http://127.0.0.1:8080/websocket;
        }

http {
        ...
       client_max_body_size 102400M;

		proxy_set_header X-Forwarded-Host $host;
				proxy_set_header X-Forwarded-For $remote_addr;
				proxy_set_header Upgrade $http_upgrade;
				proxy_set_header Connection "Upgrade";
		}

		location /websocket_client {
				proxy_http_version 1.1;
				proxy_pass http://127.0.0.1:8080/websocket_client;
       		    proxy_set_header X-Forwarded-Host $host;
				proxy_set_header X-Forwarded-For $remote_addr;
				proxy_set_header Upgrade $http_upgrade;
				proxy_set_header Connection "Upgrade";
		}
}