• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Resolved Apache + Nginx As Reverse Proxy Imunify360 Question

X-HTTG

New Pleskian
Server operating system version
Ubuntu 22.04
Plesk version and microupdate number
Plesk Obsidian v18.0.56_build1800231106.15 os_Ubuntu 22.04
My current setup is Apache + ModSecurity with imunify360 ruleset. I want to run Nginx as a reverse proxy for Apache. Will I have to switch Mod security from Apache WAF to Nginx WAF with Imunify360 ruleset or do I keep Modsecurity as Apache? Is that supported?
 

Attachments

  • modsec1.PNG
    modsec1.PNG
    34 KB · Views: 17
I read the question as "When I use Nginx, do I have to use ModSecurity 3.0 with Nginx?". You can keep it as it is with Apache unless you disable "Proxy mode" (in that case only Nginx will server content and rules that apply to Apache won't work any longer).
 
I read the question as "When I use Nginx, do I have to use ModSecurity 3.0 with Nginx?". You can keep it as it is with Apache unless you disable "Proxy mode" (in that case only Nginx will server content and rules that apply to Apache won't work any longer).
Okay thank you for clarifying that. So I am now using Nginx as a reverse proxy for apache but I left the modsecurity ruleset to Apache 2.9 with custom imunify360 ruleset instead of switching it to Nginx WAF 3.0.
 
I read the question as "When I use Nginx, do I have to use ModSecurity 3.0 with Nginx?". You can keep it as it is with Apache unless you disable "Proxy mode" (in that case only Nginx will server content and rules that apply to Apache won't work any longer).
So if i decide to use cloudflare will i have to restore visitor IP Address with Nginx???
 
Now there is a default plesk page on my hostname where as originally my hostname, IP and Domain all had the same webpage!!!
 
Could you please create a new thread for this different and new question? Please also describe the steps that lead to the issue, what you'd expect instead etc.
 
Back
Top