[KB8461] Configure nginx in ESET Bridge proxy chaining situation with Squid-based proxies

Issue

  • Configure ESET Bridge proxy chaining situation with Squid-based proxies

Details


Click to expand

In the proxy chaining mode, Nginx strips the scheme and the hostname and adds them into HTTP headers. Certain proxies like Squid consider such requests as malformed.


Solution

To provide an absolute URI (Uniform Resource Identifier) to Squid-based proxy servers, follow the steps below:

  1. Open the nginx.conf.http.server.template file.

    See the file location for Windows and Linux:

    • Windows: C:\ProgramData\ESET\Bridge\Proxies\Nginx\Conf\nginx.conf.http.server.template
    • Linux: /var/opt/eset/bridge/nginx/conf/nginx.conf.http.server.template

  2. Add the following two lines to the nginx.conf.http.server.template file:

    rewrite ^(.*)$ ://$server_host$uri$is_args$args;
    rewrite ^(.*)$ http$uri$is_args$args break;
  3. Verify that the nginx.conf.http.server.template file looks like the code below after you added the two lines from step 2:

    if ($remote_proxy_http = "111") {
     set $proxy_rewrite_backend_r http://${REMOTE_PROXY_SERVER_ADDRESS}:${REMOTE_PROXY_SERVER_PORT};
     rewrite ^(.*)$ ://$server_host$uri$is_args$args;
     rewrite ^(.*)$ http$uri$is_args$args break;
    }
  4. Restart the ESET Bridge service.

Chat with ESET AI Advisor for support