Hace unas semanas hablábamos de cómo hacer una redirección transparente en Apache en función de una cookie. Uno de los ejemplos que puse es el acceso a un entorno de test de nuestra aplicación. Un entorno de test al que podamos acceder nosotros como desarrolladores o incluso se lo podamos enseñar a un cliente final sin afectar al funcionamiento normal de la web (que por otro lado está funcionando).
A veces, podemos crear una dirección paralela tipo test.miweb.com, pero otras veces no es posible. Y decirle a todo el mundo que añada una dirección IP a su archivo hosts, y que nos haga caso, es complicado. Pensemos en aplicaciones que tienen una fuerte dependencia del host al que están vinculada. Un ejemplo sencillo es WordPress, muchas veces nos encontramos con plugins o temas que, tanto en su configuración como en otras tablas almacenan el host y se complicado estar todo el rato haciendo cambios en la base de datos. Pero no solo WordPress, esta necesidad nos puede surgir con multitud de aplicaciones.
Tabla de contenidos
Un poco de historia (personal)
Todo empezó buscando una manera de cambiar el DocumentRoot de un VirtualHost en función de una cookie. Aunque la propiedad DocumentRoot no soporta condiciones ni se puede cambiar tan fácilmente. Lo que debemos hacer es una redirección con proxy en función de una condición. Esta redirección puede ser a la misma máquina, o a otra diferente, incluso máquinas virtuales o contenedores docker, siempre que tengamos acceso por red. Estas máquinas también pueden ser privadas. Por lo que nuestro servidor principal puede tener un segundo interfaz de red que esté conectado a otro servidor y hacer el proxy hacia ese segundo servidor.
Así que, si en este momento tenemos suficiente con la máquina donde tenemos el servidor web principal podemos utilizar otro puerto en el que también levantaremos el servidor web. A mí me gusta el 180, por poner un puerto. Ese puerto debemos mantenerlo privado, para que el acceso sea solo dentro del host local y no esté expuesto a Internet (cosa que no queremos). Podemos elegir, si la página de pruebas está en otro host, perfecto. Si queremos que dicha web de pruebas esté en el mismo host, seguid leyendo.
Escuchando por el puerto 180
Lo primero es que Apache escuche en el puerto 180, aunque podríamos utilizar otro servidor web como Nginx, lighthttpd, etc. Aunque si lo que queremos es utilizarlo como entorno de test, es conveniente que utilicemos siempre el mismo servidor web (por lo que pueda pasar).
Aunque nuestra web la sirvamos por HTTPs. La redirección no hace falta hacerla también por HTTPs. Ya que la conexión segura se seguirá haciendo entre Apache y el usuario final que pide la web, y luego Apache hará una conexión no segura con él mismo para acceder a la web de pruebas. Puede que, según nuestros contratos con el cliente, o según lo paranoicos que seamos con la seguridad, nos interese también cifrar esta comunicación interna, pero eso ya es cuestión de gustos.
En Apache, la configuración puertos suele estar en /etc/apache2/httpd.conf, /etc/apache2/apache2.conf, /etc/apache2/ports.conf o incluso los archivos pueden estar situados en /etc/httpd/ . En mi caso, en la instalación en Ubuntu, suele estar en /etc/apache2/ports.conf, y finalmente lo podemos dejar así:
1 2 3 4 5 6 7 8 9 | Listen 80 Listen 180 <IfModule ssl_module> Listen 443 </IfModule> <IfModule mod_gnutls.c> Listen 443 </IfModule> |
O incluso podríamos cercar más el acceso así, haciendo que solo escuchemos en el host local:
1 | Listen 127.0.0.1:180 |
Ahora, nuestro Virtualhost de la web quedaría así (lo pongo completo, con SSL y todo:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 | <VirtualHost *:80> ServerName www.miweb.com ServerAlias miweb.com ServerAdmin administrador@miweb.com DocumentRoot /var/www/miweb.com/www RewriteEngine On RewriteCond %{HTTPS} off RewriteCond %{REQUEST_URI} "!/.well-known/acme-challenge/" RewriteRule (.*) https://www.%{HTTP_HOST}%{REQUEST_URI} [NE,L,R=301] ErrorLog ${APACHE_LOG_DIR}/error.log CustomLog ${APACHE_LOG_DIR}/access.log ombined # Include conf-available/php7.0-fpm.conf </VirtualHost> <VirtualHost *:180> ServerName www.miweb.com ServerAlias miweb.com DocumentRoot /var/www/miweb.com_testing/www ErrorLog ${APACHE_LOG_DIR}/error.log CustomLog ${APACHE_LOG_DIR}/access.log combined Include conf-available/php7.0-fpm.conf </VirtualHost> <IfModule mod_ssl.c> <VirtualHost _default_:443> ServerName www.miweb.com ServerAlias miweb.com ServerAdmin administrador@miweb.com DocumentRoot /var/www/miweb.com/www ProxyPreserveHost On RewriteEngine On RewriteCond %{HTTP_COOKIE} cookie=([^;]+) RewriteCond %1 ^pruebas$ RewriteRule ^/(.*) http://127.0.0.1:180/$1 [P,L] ErrorLog ${APACHE_LOG_DIR}/error.log CustomLog ${APACHE_LOG_DIR}/access.log combined Include conf-available/php7.0-fpm.conf SSLEngine on SSLCertificateFile /etc/letsencrypt/live/miweb.com/cert.pem SSLCertificateKeyFile /etc/letsencrypt/live/miweb.com/privkey.pem SSLCertificateChainFile /etc/letsencrypt/live/miweb.com/fullchain.pem <FilesMatch "\.(cgi|shtml|phtml|php)$"> SSLOptions +StdEnvVars </FilesMatch> <Directory /usr/lib/cgi-bin> SSLOptions +StdEnvVars </Directory> </VirtualHost> </IfModule> |
Posibles cambios
Al estar utilizando otro VirtualHost, en este caso, el del puerto 180, podemos utilizar otra versión de PHP (En este caso, la web usa PHP), por supuesto otro DocumentRoot diferente, por lo que podríamos tener otra rama del repositorio de nuestra aplicación y la ésta podrá tener configuración de caché/logs/base de datos diferente a la aplicación principal.
Este sistema nos podría ayudar mucho a la hora de probar nuestra aplicación web en un entorno real o incluso con datos reales (si es posible), justo antes de desplegarla definitivamente.
Seguridad
Como dije antes, el puerto 180 no debe estar expuesto al exterior. No nos interesa que personas no autorizadas entren a nuestro sistema de pruebas. Podríamos tener contraseñas débiles, datos no reales o información de depuración activada que pueda dar pistas para atacar nuestra aplicación. Este puerto lo podemos bloquear desde nuestro proveedor de servicio, o desde la misma máquina, aplicando una restricción con UFW o desde iptables, así:
Ahora, debemos ser cuidadosos con las personas a las que les establecemos los valores de la cookie, porque podrán entrar a una zona privada de nuestro sistema. Sería conveniente no tener el acceso activado constantemente, sino activarlo solo cuando sea necesario, o poner también reglas por IP. Yo también, en los servicios donde utilizo esta técnica utilizo cookies como:
accesodepruebas=hn8JV9V1IfJylvQCmo+VUJb8ENgEIs/cbA8pWa7j1mE
La cadena aleatoria la podemos obtener así:
De manera que sea muy muy difícil para alguien hallar el valor adecuado de la cookie.
Foto principal: unsplash-logoPietro De Grandi
What a good and useful article. Can you let me share your post?
Its such as you learn my thoughts! You appear to understand so much about this, such as you wrote the guide in it or something. Newport roofing</a
Cookie testing is the type of software testing that checks the cookie created in the web browser. A cookie is a small piece of information that is used to track where the user navigated throughout the pages of the website.
I am confident you’ve got a great enthusiast following there. military pistol holster
I never knew about these things before, your article is quite informative, I should be lucky to have come across this, thanks for everything, if you have enough time, you can try playing basketball legends game, this game is really cool and fun.
Thank you for this article. Great work. It was very helpful.
One kind of software testing is called «cookie testing,» and it involves verifying the validity of a cookie stored in a web dordle browser. A «cookie» is a tiny file that stores information about a user’s actions on a website.
I appreciate the information and suggestions you have given me slope game. I will make an effort to understand it better for more.
Reading through a piece that provokes thought in its readers is one of my favorite things to do. In addition, many thanks for allowing me to share my thoughts here! five nights at freddy’s
The most popular pastime both in the US and throughout the world is playing slots at an onlinecasino https://ratemycasino.ca/reviews/caxino/. For slotplayers, the majority of US casinos provide bonuses and rewards. Most casino websites provide free spins and other welcome bonuses when you join up and make a deposit into your account.
I am a new user of this site so here i saw multiple articles and posts posted by this site,I curious more interest in some of them hope you will give more information on this topics in your next articles.
Really no matter if someone doesn’t be aware of after that its up to other users that they will help, so here it takes place 카지노사이트추천.
Thanks for sharing such great information with us. Your Post is beneficial and the information is reliable for new audience. Thanks again for sharing such a useful post. Siding Services
I really like your sharing, the information is really helpful to me. Hope you will have more interesting and interesting posts.
fireboy and watergirl
Whenever you need to uplift yourself, listen to your angels.
If I were you, I would incorporate more positive adjectives that begin with S into your vocabulary, as they help with lifting your spiriting or describing a person.
Thank you so much for sharing this great blog. Very inspiring and helpful too. Hope you continue to share more of your ideas. I will definitely love to read Sunderland roofers
Hello I am from impermeabilizar cubierta, I am glad to read the whole content of this blog and am very excited and happy to say that the webmaster has done a very good job here putting all the information content and information in one place, I will refer to this information with reference on my website
That’s so cool. Thanks for sharing! http://www.bestpainterboston.com
I’ve been looking for photos and articles on this topic over the past few days due to a school assignment, baccaratsite and I’m really happy to find a post with the material I was looking for! I bookmark and will come often! Thanks 😀
What a post I’ve been looking for! I’m very happy to finally read this post. 온라인카지노 Thank you very much. Can I refer to your post on my website? Your post touched me a lot and helped me a lot. If you have any questions, please visit my site and read what kind of posts I am posting. I am sure it will be interesting.
It is convenient that we always use the same web server in Baltimore.
That is definitely this sort of amazing inventiveness that you might be supplying so you offer the idea apart pertaining to free of charge. I want to share the landscaping design here. Let me know what you think.
Y decirle a todo el mundo que añada una dirección IP a su archivo hosts, y que nos haga caso, es complicado. | drywall repair fort worth tx
Este sería un sitio web muy interesante y me gusta cómo nos mostró incluso la codificación incluida en su sitio web. Para cualquier persona interesada, visite nuestro sitio web y obtenga más información sobre electrical contractors.
Nice! A cookie-based test environment is an effective way to ensure the functionality of a website.
There is an infinite number of ways in which you may personalize both your squad and your strategy, which will guarantee that the game will never get boring. color by number
I have been looking for articles on these topics for a long time. 바카라사이트 I don’t know how grateful you are for posting on this topic. Thank you for the numerous articles on this site, I will subscribe to those links in my bookmarks and visit them often. Have a nice day.
Thanks for posting Some Great ideas. Check this out http://www.tejadosansebastian.com
La codificación parece complicada. Para cualquiera que desee sell my house fast raleigh nc, por favor contáctenos.
I learned something new today. But, do you know who is the best drywall company in your area?
I saw your article well. You seem to enjoy safetoto for some reason. We can help you enjoy more fun. Welcome anytime 🙂
Comenzó como una lectura interesante, pero luego me confundí con la terminología. Por favor visite nuestro website a cualquier persona interesada en nuestros servicios.
Estoy tan intrigado con este sitio web y, sin saberlo, hice clic en este hilo y fue interesante. Disculpe por cambiar de tema, pero si está interesado, visítenos en http://www.landscapingchilliwack.com
What a post I’ve been looking for! I’m very happy to finally read this post. 카지노사이트 Thank you very much. Can I refer to your post on my website? Your post touched me a lot and helped me a lot. If you have any questions, please visit my site and read what kind of posts I am posting. I am sure it will be interesting.
Podemos elegir, si la página de pruebas está en otro host, perfecto.
Your ideas inspired me very much. 토토사이트순위 It’s amazing. I want to learn your writing skills. In fact, I also have a website. If you are okay, please visit once and leave your opinion. Thank you.
Awesome article. Thank you so much for sharing with us. keep sharing this type of articles in future..
An article worth noting and should be learned. Thank you for providing this great information.
Having a test environment for a website based on a cookie is a practical solution to access a test version of an application without affecting its normal functioning.
Podríamos tener contraseñas débiles, datos no reales o información de depuración activada que pueda dar pistas para atacar nuestra aplicación. foundation repair contractor
Wow! great topic
Soda Club Women Limited Edition Jacket
Tower Defense game is a popular strategy game genre in which the player must build defensive towers to stop enemy attacks. Players have a limited number of resources to use in building and upgrading their defensive towers. The game usually has many different difficulty levels, from easy to difficult, and the challenges also change according to the difficulty level of each level. The player’s goal is to keep enemies from entering his land and destroy them all before they reach their destination.
terraria is a place full with exciting new experiences! A place shrouded in secrecy! A territory that is solely yours, which you are free to mold, protect, and enjoy. In Terraria, you have an abundance of choices to make. Do you have the desire to pull the trigger whenever you play action games? A master builder? Someone who collects? An explorer? Everyone can find something that appeals to them here.
Great post i must say and thanks for the information. Education is definitely a sticky subject. However, is still among the leading topics of our time. Thanks 메이저사이트
I finally found what I was looking for! I’m so happy. 안전놀이터추천 Your article is what I’ve been looking for for a long time. I’m happy to find you like this. Could you visit my website if you have time? I’m sure you’ll find a post of interest that you’ll find interesting.
This blog is very nice. I really like such a fantastic written blog. I will keep coming here again and again. Visit my link as well. https://www.tejadosygoterasgranada.com/reparacion-de-tejados-y-cubiertas
When I read your article on this topic, the first thought seems profound and difficult. There is also a bulletin board for discussion of articles and photos similar to this topic on my site, but I would like to visit once when I have time to discuss this topic. 파워볼사이트
I like what you guys are up too. Such clever work and reporting! Keep up the excellent works guys I have incorporated you guys to my blogroll. I think it will improve the value of my site :). 안전놀이터
Outstanding information flow. We should take the five minutes it will take to read this text while lying down. (: 토토사이트
team helps you to guide in all aspects of Technology, Business, Gadgets, Marketing and Apps related news. Our goal is to provide all the latest information to our audience. 먹튀검증
I am very glad to see such excellent info being shared freely out there. Youre so cool! I dont suppose Ive read anything like this before (: 메이저사이트
I am hoping for the same best effort from you in the future as well. In fact, your creative writing skills have inspired me. (: 토토사이트순위
I have been looking for this information for a long time, I was very surprised when I found it here.New Pelle Pelle
One day I went to you and saw my comments, please tell me why you can write so well, you solved my confusion, let me open, you are really good, I like your posts, if you see the comments, I hope you reply to me will be very happy메이저놀이터
Have you ever heard of all the best things to do in New Brunswick – one of the thirteen provinces and territories of Canada. It is one of the three Maritime provinces and one of the four Atlantic provinces. It is the only province with both English and French as its official languages.
New Brunswick is bordered by Quebec to the north, Nova Scotia to the east, the Gulf of Saint Lawrence to the northeast, the Bay of Fundy to the southeast, and the U.S. state of Maine to the west. New Brunswick is about 83% forested and its northern half is occupied by the Appalachians The province’s climate is continental with snowy winters and temperate summers.
New Brunswick has a surface area of 72,908 km2 (28,150 sq mi) and 775,610 inhabitants (2021 census). Atypically for Canada, only about half of the population lives in urban areas. New Brunswick’s largest cities are Moncton and Saint John, while its capital is Fredericton.
In 1969, New Brunswick passed the Official Languages Act which began recognizing French as an official language, along with English. New Brunswickers have the right to receive provincial government services in the official language of their choice. About two thirds of the population are English speaking and one third is French speaking. New Brunswick is home to most of the cultural region of Acadia and most Acadians. New Brunswick’s variety of French is called Acadian French and 7 regional accents can be found.
New Brunswick was first inhabited by First Nations like the Mi’kmaq and Maliseet. In 1604, Acadia, the first New France colony, was founded with the creation of Port-Royal. For 150 years afterwards, Acadia changed hands a few times due to numerous conflicts between France and the United Kingdom. From 1755 to 1764, the British deported Acadians en masse, an event known as the Great Upheaval. This, along with the Treaty of Paris, solidified Acadia as British property. In 1784, following the arrival of many loyalists fleeing the American Revolution, the colony of New Brunswick was officially created, separating it from what is now Nova Scotia. In the early 1800s, New Brunswick prospered and the population grew rapidly. In 1867, New Brunswick decided to confederate with Nova Scotia and the Province of Canada (now Quebec and Ontario) to form Canada. After Confederation, shipbuilding and lumbering declined, and protectionism disrupted trade with New England.
From the mid-1900s onwards, New Brunswick was one of the poorest regions of Canada, a fact eventually mitigated by transfer payments. However, the province has seen the highest eastward migration in 45 years in both rural and urban areas, as people living in Ontario and other parts of Canada migrate to the area. As of 2002, the provincial GDP was derived as follows: services (about half being government services and public administration) 43%; construction, manufacturing, and utilities 24%; real estate rental 12%; wholesale and retail 11%; agriculture, forestry, fishing, hunting, mining, oil and gas extraction 5%; transportation and warehousing 5%. A powerful corporate concentration of large companies in New Brunswick is owned by the Irving Group of Companies. The province’s 2019 output was CA$38.236 billion, which is 1.65% of Canada’s GDP.
Tourism accounts for 9% of the labour force either directly or indirectly. Popular destinations include the Hopewell Rocks, Fundy National Park, Magnetic Hill, Kouchibouguac National Park and Roosevelt Campobello International Park.
The article strikes a harmonious balance between informative content and engaging storytelling. The author’s narrative style, combined with their inclusion of compelling anecdotes or case studies, creates an immersive reading experience that brings the topic to life.
Thanks for sharing this article about testing web functions with cookies.
A very awesome blog post. We are really grateful for your blog post. You will find a lot of approaches after visiting your post.
OkSports
Great post, interesting points raised. Thanks for sharing.
Pokemon showdown is not just a game, but a community of passionate players who love to share their knowledge and experience with others. With a dedicated forum and community chat rooms, you can connect with other players from around the world and learn from the best.
This is a great tutorial thank you for sharing it to us.
To my knowledge electricians sarasota is such a professional.
Book roofing companies sarasota for your roofing needs. They rock.
great post,
صب واي سيرفرس
Post more like this.
We have a site for sports games. You must be interested. OKBet download
Post more like this.
Thanks for sharing this great post. It is nice to find tutorials like this that are easy to understand.
Thank you for explaining the concept of having a test environment for your website based on a cookie. I understand that sometimes creating a separate subdomain like test.myweb.com may not be feasible, and instructing everyone to modify their hosts file can be cumbersome.
Your post is helpful I got enough idea about the cookies for the website. The post is nice please check mine too https://www.magnacustomllc.com/home-construction-and-remodeling-ny
A simple example is WordPress, many times we find plugins or themes that, both in their configuration and in other tables, store the host and it is difficult to spend all the time making changes to the database of Abilene Drywall Contractors. But not only WordPress, this need can arise with a multitude of applications.
This is such a game-changer. web design orlando is incredible in what the can accomplish.
Everything is looking great thanks to Screen enclosures bradenton. They are the best there is.
This is a great way to test web function using cookie.
Check out our list of the best methods to get started! From using a third-party service like Gmail or Outlook, to using an email client like Gmail or Outlook on your desktop, we’ve got you covered. 먹튀검증
Can I get your affiliate link to your host? I wish my web site loaded up as fast as yours lol 메이저사이트
Nevertheless imagine if you added some great graphics or video clips to give your posts more, “pop”! Your content is excellent but with images and clips, this site could definitely be one of the most beneficial in its niche.
This is a great tutorial about web function, thank you for posting this.
สล็อตยูฟ่า789 สมัคร UFABET789 เว็บแทงบอล เว็บแม่ สมัครง่ายรับโบนัสฟรี เดโม่ บาคาร่า ได้ทุกค่าย ทุกเกม คาสิโนสดฟรีไม่ต้องฝาก
I’ve been browsing online more than 3 hours today, yet I never found any interesting article like yours. 메이저사이트 추천합니다
It is pretty worth enough for me. In my view, if all webmasters and bloggers made good content as you did, the web will be much more useful than ever before. 먹튀검증사이트 추천
You should write very seriously, I hope I see your sincerity, such a good idea should be seen by more people, because it is really very good, really thank you so much for sharing so selflessly. 메이저사이트
Pretty nice post. I just stumbled upon your weblog and wanted to say that I have really enjoyed browsing your blog posts. After all I’ll be subscribing to your feed and I hope you write again soon!
My HomePage: How to Play Online Keno in the Philippines
nice information website cookies, thanks for sharing with us https://www.sakinazojwala.com/food-product-photographer-in-mumbai-india
Pretty nice post. I just stumbled upon your weblog and wanted to say that I have really enjoyed browsing your blog posts. After all I’ll be subscribing to your feed and I hope you write again soon!
My HomePage: tennis bet
Thanks for sharing how to make the 180 port secure from outside access.
This redirection can be to the same machine, or to a different one, even virtual machines or docker containers, and water damage drywall as long as we have network access. These machines can also be private.
A simple example is WordPress, many times we at Atlanta Drywall Contractors find plugins or themes that, both in their configuration and in other tables, store the host and it is difficult to spend all the time making changes to the database.
This is the one of the most important information for me. And I am feeling glad reading your article. The article is really excellent?
Yellow Jacket Freddie Mercury
I hope you can be seen and understood by more people. You are really outstanding, your writing is very good, which makes me feel honored. I also feel that there are many shortcomings that need to be improved, and you have done very well!토토사이트
Nordvpn mod apk allows you to circumvent internet censorship imposed by governments or organizations, enabling access to information and resources that might otherwise be blocked.
Thank you for this easy to understand tutorial.
I must say, I am deeply impressed. You have written a great blog. I really like it very much. Looking forward to another exciting article. Good luck to the author! Everything goes smoothly.토토사이트
It was so nice because it wasn’t a casual and obvious writing. It’s a writing that allows you to think about new and colorful things. I’ll try to write good things like this 안전놀이터
La información no puede ser más precisa. Gracias desde la web con reseña de Remitly