Skip to content

Commit 6fe18d8

Browse files
authored
update config (#18)
1 parent 2041c30 commit 6fe18d8

File tree

1 file changed

+21
-2
lines changed

1 file changed

+21
-2
lines changed

docs/source/forward-proxy.rst

Lines changed: 21 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -207,16 +207,35 @@ If you do not want to grant those privileges, you can run the binary without the
207207
208208
127.0.0.1 forward-proxy.scion
209209
210+
The primary option for connecting to the SCION HTTP Forward Proxy is over HTTPS.
210211
Most browsers or HTTPS clients will not trust the self-signed certificate used by the SCION HTTP Forward Proxy by default. To avoid certificate warnings, the user must either:
211212
- Import the root certificate use into the browser trust store. If the user has followed the installation examples in the `examples <https://github.com/scionproto-contrib/http-proxy/tree/main/_examples>`__ folder, the root certificate can be found in the ``/usr/share/scion/caddy-scion`` directory.
212213
For MacOS, the root certificate can be found in the ``/usr/local/scion/caddy-scion`` directory. Please, use the Keychain Access application to import the root certificate.
213214
- Disable certificate verification in the browser or client, e.g.:
214215
- Run chrome with, ``chrome --ignore-certificate-errors``
215-
- Use the ``--insecure`` and ``--proxy-insecure`` flag with curl, e.g.:
216+
- Use the ``--proxy-insecure`` flag with curl, e.g.:
216217

217218
.. code-block:: bash
218219
219-
curl --insecure --proxy-insecure -x http://forward-proxy.scion:8080 https://www.example.org
220+
curl --proxy-insecure -x https://forward-proxy.scion:9443 https://www.example.org
221+
222+
Alternatively, you can enable plain HTTP support for the SCION HTTP Forward Proxy by adding the following lines to the JSON configuration file:
223+
224+
.. code-block:: json
225+
226+
"apps": {
227+
"http": {
228+
"http_port": 9080,
229+
"https_port": 9443,
230+
"servers": {
231+
"forward": {
232+
"logs": {},
233+
"metrics": {},
234+
"listen": [
235+
":9080",
236+
":9443"
237+
],
238+
...
220239
221240
Running the SCION HTTP Forward Proxy as in-network service
222241
----------------------------------------------------------

0 commit comments

Comments
 (0)