Sharing a port between the reverse proxy and the broker

When a broker is configured with a reverse proxy, you can use port 443 for both reverse proxy and broker.

About this task

It is recommended that the broker is configured on port 443. The reason for this is that clients might be connecting from networks with HTTP proxies or restrictive firewall policies where outgoing connections are blocked, except for a few ports. Connections to port 443 are allowed but might be inspected to ensure that the SSL/TLS protocol is used. You can configure the broker to share port 443.

Procedure

To configure a port that accepts connections from endpoints, other brokers, and HTTPS requests, configure an Inbound or Inbound6 connection with port 443 and an InboundHTTPS or InboundHTTPS6 connection.

For example,

1.ConnectionType = Inbound

1.PortToListen = 443

2.ConnectionType = InboundHTTPS

When the broker detects that the configuration contains two connections with the same port, PortToListen, and interface, BindTo, it automatically merges the two connections.

The exception is that an InboundHTTP or InboundHTTP6 connection cannot be merged with another type of inbound connection. This limitation is because the broker does not support non-encrypted and encrypted connections on the same port. When an InboundHTTP or InboundHTTP6 connection is configured with the same port and interface as another type of inbound connection, the broker writes an error in the log. It also internally disables the InboundHTTP or InboundHTTP6 connection.

Parameters for connections are merged in the following way.
Table 1. Parameter values for merged connections
Parameter Action taken
prefix.RetryDelay The parameter is taken from the first connection that is loaded. Parameters from subsequent connections are ignored. A warning is written to the log for each conflicting parameter.
prefix.TLSCertificateFile
prefix.TLSCertificatePassphrase
prefix.TLSCipherList HTTPSCipherList overrides TLSCipherList. A warning is written to the log if the parameters conflict.