add support for forward proxy

[jinglong]

Edit:
The proxy_connect module has been integrated into Tengine 2.3.0. And this pull request is closed now.

• Tengine ngx_http_proxy_connect_module documentation: link
• Merged pull request for Tengine 2.3.0: Added new module: ngx_http_proxy_connect_module #1210

[yaoweibin]

test cases, please.

[lark]

Any progress or plan on this feature?

[lark]

I have rebased jinglong's work onto current master (d7fe6a4), and fixed various compilation errors, mostly for internal api changes. No test done yet.

See https://github.com/lark/tengine/tree/proxy-connect

[lark]

Add proxy_connect_bind directive. See https://github.com/lark/tengine/tree/proxy-connect
@jinglong @yaoweibin @chobits please have a look. I can make a new pull request.

[giasek]

Can You please provide some example how to use this module ?

[chobits]

@giasek
Configuration from our internal test case is as following:

...
$t->write_file_expand('nginx.conf', <<'EOF');

%%TEST_GLOBALS%%

daemon         off;

events {
}

http {
    %%TEST_GLOBALS_HTTP%%

    resolver 8.8.8.8;

    server {
        listen  8081;
        server_name server_8081;
        location / {
            echo hello;
        }
    }

    server {
        listen       127.0.0.1:8080;
        server_name  localhost;
        proxy_connect;
        proxy_connect_allow 443 80 8081;
        proxy_connect_connect_timeout 10s;
        proxy_connect_read_timeout 10s;
        proxy_connect_send_timeout 10s;
        proxy_connect_send_lowat 0;
        location / {
            proxy_pass http:https://127.0.0.1:8081;
        }
    }
}
EOF
...

[giasek]

@chobits cool, this really works for me. There is one thing because of I can not sleep ;). I'm using this module for a forward proxy

    location / {
    auth_basic "Restricted";
    auth_basic_user_file htpasswd;
    proxy_pass http:https://$http_host$uri$is_args$args;
    }
}

and when I enable basic http authentication tengine asks me for a credentials every domain is resolved and pushed by tengine. I would like to authenticate one time.
Can some help, please ?

[chobits]

After talking with @jinglong , we would reopen a new pull request for this module. In new pull request, we will fix some compatible problems, add test case, merge @lark 's proxy_connect_bind patch and put this module source to tengine/modules directory.

A standalone module for nginx is here.

[eagleusb]

Hello,

do you plan to merge it soon ? It would be awesome to have the CONNECT method :)

[chobits]

hi @gooodmorningopenstack
Yes. This work is ongoing but we expect to clean code before merging.

[jfbus]

Hi. Any news on this PR ?

[chobits]

hi @jfbus , this module will be included in the later release of Tengine.
If you want to use, you can install this module into Tengine. I have maintain this module for some time, and it's production ready now. See https://github.com/chobits/ngx_http_proxy_connect_module#install.

[mbicca]

Hi @chobits ,

Just to clarify, this is not yet added to the latest Tengine release correct?

I installed it through ppa on Ubuntu and I don't see this module as available.

Thank you!
-Marco

[chobits]

hi @mbicca

Just to clarify, this is not yet added to the latest Tengine release correct?

Yes. If you want to use proxy_connect module with Tengine, you can install proxy_connect module from source.

[ghost]

When to add this module to tengine?
Hope it soon getting added

[chobits]

hi @netroby ,

Will add it to tengine this version (tengine 2.3.x).
Currently we are merging nginx-1.15.x, this work is is nearing completion.

---

For nginx users, use this one.

[chobits]

Hi @netroby @mbicca @gooodmorningopenstack @jfbus @giasek @lark

The proxy_connect module has been merged into master, we'll release 2.3.x soon!
See this #1210.

I'm closing this pull request.