Web Connection
Reverse proxy and Web connection
Gravatar is a globally recognized avatar based on your email address. Reverse proxy and Web connection
  Marcel DESMET
  All
  Nov 6, 2025 @ 03:56am

Hello, Hello, It seems there are some issues with your library running in reverse proxy situation. Remote administration, using ~/ in code ...

First line is from localhost virtual dir and the second from web reverse proxy adress ( double parameter ) . Speed is because there is a "set step on" in code

Tks Marcel

Gravatar is a globally recognized avatar based on your email address. re: Reverse proxy and Web connection
  Rick Strahl
  Marcel DESMET
  Nov 6, 2025 @ 09:34am

A reverse proxy should not change the Url. If the proxy is working properly all the base request data should stay intact.

That looks like you don't have your proxy configured right to respect the virtual directory properly.

Post your captured request data (from the log is easiest) to see what's actually different in the request data between proxy and direct access.

+++ Rick ---

Gravatar is a globally recognized avatar based on your email address. re: Reverse proxy and Web connection
  Marcel DESMET
  Rick Strahl
  Nov 6, 2025 @ 11:57am

REQUEST.GetCurrentUrl() return the http://local ip/virtual directory/....

Maybe we do something wrong, anyhow application could run but with some rewrite for url handling and with local administration

web.config

			<rule name="ReverseProxyInboundRule1" enabled="true" stopProcessing="true">
				<match url="(.*)" />
				<action type="Rewrite" url="http://local ip server/greenshop/{R:1}" />
			</rule>

Server vars reverse proxy ( remote ip is WAN IP with variable port 61291 or 50977 or etc... )

&PHYSICAL_PATH=C%3a%5cWebconnectionprojects%5cWebMove%5cweb%5cGreenshop%5cfr%5cShowitems.jaz&QUERY_STRING=Category%3dShop&SCRIPT_NAME=%2fgreenshop%2ffr%2fShowitems.jaz&REQUESTID=510234995201_43&DLLVERSION=Web+Connection+Handler+8.1.2+(.NET+Handler)++&WCCONFIG=C%3a%5cWebconnectionprojects%5cWebMove%5cweb%5cGreenshop%5cweb.config&ADMIN_PAGE=%2fgreenshop%2fadmin%2fadmin.aspx&APPL_WEB_PATH=http%3a%2f%2f102.53.70.125%2fgreenshop&APPL_MD_PATH=%2fLM%2fW3SVC%2f1%2fROOT%2fgreenshop&APPL_PHYSICAL_PATH=C%3a%5cWebconnectionprojects%5cWebMove%5cweb%5cGreenshop%5c&AUTH_TYPE=&AUTH_USER=&AUTH_PASSWORD=&LOGON_USER=&REMOTE_USER=&CERT_COOKIE=&CERT_FLAGS=&CERT_ISSUER=&CERT_KEYSIZE=&CERT_SECRETKEYSIZE=&CERT_SERIALNUMBER=&CERT_SERVER_ISSUER=&CERT_SERVER_SUBJECT=&CERT_SUBJECT=&CONTENT_LENGTH=0&CONTENT_TYPE=&GATEWAY_INTERFACE=CGI%2f1.1&HTTPS=off&HTTPS_KEYSIZE=&HTTPS_SECRETKEYSIZE=&HTTPS_SERVER_ISSUER=&HTTPS_SERVER_SUBJECT=&INSTANCE_ID=1&INSTANCE_META_PATH=%2fLM%2fW3SVC%2f1&LOCAL_ADDR=102.53.70.125&PATH_INFO=%2fgreenshop%2ffr%2fShowitems.jaz&PATH_TRANSLATED=C%3a%5cWebconnectionprojects%5cWebMove%5cweb%5cGreenshop%5cfr%5cShowitems.jaz&REMOTE_ADDR=102.53.70.25&REMOTE_HOST=102.53.70.25&REMOTE_PORT=62639&REQUEST_METHOD=GET&SERVER_NAME=102.53.70.125&SERVER_PORT=80&SERVER_PORT_SECURE=0&SERVER_PROTOCOL=HTTP%2f1.1&SERVER_SOFTWARE=Microsoft-IIS%2f10.0&URL=%2fgreenshop%2ffr%2fShowitems.jaz&HTTP_CONNECTION=Keep-Alive&HTTP_ACCEPT=text%2fhtml%2capplication%2fxhtml%2bxml%2capplication%2fxml%3bq%3d0.9%2c*%2f*%3bq%3d0.8&HTTP_ACCEPT_ENCODING=gzip%2c+deflate%2c+br%2c+zstd%2c+peerdist&HTTP_ACCEPT_LANGUAGE=en-US%2cen%3bq%3d0.5&HTTP_COOKIE=_ga_4YTGKTLEXZ%3dGS2.1.s1761926044%24o14%24g0%24t1761926044%24j60%24l0%24h0%3b+_ga%3dGA1.1.779830872.1759563385%3b+_gcl_au%3d1.1.681112123.1759563385%3b+_clck%3dau6rfg%255E2%255Eg0m%255E0%255E2103%3b+language%3dfr%3b+jj_acceptCookies%3dtrue%3b+GREENSHOP%3drNSNhvsdozQwL3t7&HTTP_HOST=102.53.70.125&HTTP_MAX_FORWARDS=10&HTTP_REFERER=https%3a%2f%2fremote.greenshop.fr%2f&HTTP_TE=trailers&HTTP_USER_AGENT=Mozilla%2f5.0+(Windows+NT+10.0%3b+Win64%3b+x64%3b+rv%3a144.0)+Gecko%2f20100101+Firefox%2f144.0&HTTP_UPGRADE_INSECURE_REQUESTS=1&HTTP_SEC_FETCH_DEST=document&HTTP_SEC_FETCH_MODE=navigate&HTTP_SEC_FETCH_SITE=same-origin&HTTP_PRIORITY=u%3d0%2c+i&HTTP_X_ORIGINAL_URL=%2ffr%2fShowitems.jaz%3fCategory%3dShop&HTTP_X_FORWARDED_FOR=91.183.96.41%3a50953&HTTP_X_ARR_SSL=3072%7c256%7cC%3dUS%2c+O%3dLet%27s+Encrypt%2c+CN%3dR12%7cCN%3dremote.greenshop.fr&HTTP_X_ARR_LOG_ID=9cd328e1-cf4b-4cf7-bb4e-ef31895d2122&HTTP_X_P2P_PEERDIST=Version%3d1.1&HTTP_X_P2P_PEERDISTEX=MinContentInformation%3d1.0%2c+MaxContentInformation%3d2.0&Output+File=C%3a%5cWebconnectionprojects%5cWebMove%5cdeploy%5ctemp%5cWC_510234995201_43.out&

Server vars for local request

&PHYSICAL_PATH=C%3a%5cWebconnectionprojects%5cWebMove%5cweb%5cGreenshop%5cfr%5cShowitems.jaz&QUERY_STRING=Category%3dShop&SCRIPT_NAME=%2fgreenshop%2ffr%2fShowitems.jaz&REQUESTID=732594769361_7&DLLVERSION=Web+Connection+Handler+8.1.2+(.NET+Handler)++&WCCONFIG=C%3a%5cWebconnectionprojects%5cWebMove%5cweb%5cGreenshop%5cweb.config&ADMIN_PAGE=%2fgreenshop%2fadmin%2fadmin.aspx&APPL_WEB_PATH=http%3a%2f%2flocalhost%2fgreenshop&APPL_MD_PATH=%2fLM%2fW3SVC%2f1%2fROOT%2fgreenshop&APPL_PHYSICAL_PATH=C%3a%5cWebconnectionprojects%5cWebMove%5cweb%5cGreenshop%5c&AUTH_TYPE=&AUTH_USER=&AUTH_PASSWORD=&LOGON_USER=&REMOTE_USER=&CERT_COOKIE=&CERT_FLAGS=&CERT_ISSUER=&CERT_KEYSIZE=&CERT_SECRETKEYSIZE=&CERT_SERIALNUMBER=&CERT_SERVER_ISSUER=&CERT_SERVER_SUBJECT=&CERT_SUBJECT=&CONTENT_LENGTH=0&CONTENT_TYPE=&GATEWAY_INTERFACE=CGI%2f1.1&HTTPS=off&HTTPS_KEYSIZE=&HTTPS_SECRETKEYSIZE=&HTTPS_SERVER_ISSUER=&HTTPS_SERVER_SUBJECT=&INSTANCE_ID=1&INSTANCE_META_PATH=%2fLM%2fW3SVC%2f1&LOCAL_ADDR=127.0.0.1&PATH_INFO=%2fgreenshop%2ffr%2fShowitems.jaz&PATH_TRANSLATED=C%3a%5cWebconnectionprojects%5cWebMove%5cweb%5cGreenshop%5cfr%5cShowitems.jaz&REMOTE_ADDR=127.0.0.1&REMOTE_HOST=127.0.0.1&REMOTE_PORT=58348&REQUEST_METHOD=GET&SERVER_NAME=localhost&SERVER_PORT=80&SERVER_PORT_SECURE=0&SERVER_PROTOCOL=HTTP%2f1.1&SERVER_SOFTWARE=Microsoft-IIS%2f10.0&URL=%2fgreenshop%2ffr%2fShowitems.jaz&HTTP_CONNECTION=keep-alive&HTTP_ACCEPT=text%2fhtml%2capplication%2fxhtml%2bxml%2capplication%2fxml%3bq%3d0.9%2c*%2f*%3bq%3d0.8&HTTP_ACCEPT_ENCODING=gzip%2c+deflate%2c+br%2c+zstd&HTTP_ACCEPT_LANGUAGE=en-US%2cen%3bq%3d0.5&HTTP_COOKIE=_ga_4YTGKTLEXZ%3dGS2.1.s1762361876%24o497%24g1%24t1762361965%24j60%24l0%24h0%3b+_ga%3dGA1.1.904273704.1679135213%3b+language%3dfr%3b+_ga_WXPFEFR1S7%3dGS2.1.s1760191069%24o295%24g1%24t1760192120%24j38%24l0%24h0%3b+_uetvid%3d865981d0d7ba11ed88298586bca358c1%3b+_clck%3d1cnti9%255E2%255Eg0r%255E0%255E1230%3b+frontend_lang%3dfr_BE%3b+cids%3d1%3b+_gcl_au%3d1.1.379331121.1759252528%3b+jj_acceptCookies%3dtrue%3b+GREENSHOP%3d8LnfoZDqYAk3K5Rm%3b+_clsk%3d16ulz0g%255E1762361966822%255E3%255E1%255Ez.clarity.ms%252Fcollect&HTTP_HOST=localhost&HTTP_USER_AGENT=Mozilla%2f5.0+(Windows+NT+10.0%3b+Win64%3b+x64%3b+rv%3a144.0)+Gecko%2f20100101+Firefox%2f144.0&HTTP_UPGRADE_INSECURE_REQUESTS=1&HTTP_SEC_FETCH_DEST=document&HTTP_SEC_FETCH_MODE=navigate&HTTP_SEC_FETCH_SITE=none&HTTP_SEC_FETCH_USER=%3f1&HTTP_PRIORITY=u%3d0%2c+i&Output+File=C%3a%5cWebconnectionprojects%5cWebMove%5cdeploy%5ctemp%5cWC_732594769361_7.out&
Gravatar is a globally recognized avatar based on your email address. re: Reverse proxy and Web connection
  Rick Strahl
  Marcel DESMET
  Nov 6, 2025 @ 09:07pm

A re-write rule is not a reverse proxy.

Rewrite will literally rewrite the current request, so it won't actually change the URL. I think what you want is a redirect so that the new URL is properly detected by the server.

+++ Rick ---

Gravatar is a globally recognized avatar based on your email address. re: Reverse proxy and Web connection
  Marcel DESMET
  Rick Strahl
  Dec 10, 2025 @ 11:39am

Hello,

Westwind administration works fine now with ARR and UrlRewrite
By default HostHeader is not forwarded but here is Web.config to activate

  <system.webServer>
    <proxy enabled="true" preserveHostHeader="true" reverseRewriteHostHeader="true" responseBufferLimit="0" /> 
	<rewrite>
        

This is really comfortable for debugging. Just forward public url to my dev. computer

Gravatar is a globally recognized avatar based on your email address. re: Reverse proxy and Web connection
  Rick Strahl
  Marcel DESMET
  Dec 10, 2025 @ 01:40pm

That's good to know - I wasn't familiar with the Host headers settings on the rewrite key.

I guess you need these for CORS to work?

+++ Rick ---

Gravatar is a globally recognized avatar based on your email address. re: Reverse proxy and Web connection
  Marcel DESMET
  Rick Strahl
  Dec 11, 2025 @ 06:03am

Yes thoses where needed for CORS

But I was too enthusiastic when I wrote that it was working, the connection consistently fails.

Here is what Gpt-5 write about this problem

Why ARR + Windows Authentication Breaks

NTLM/Kerberos handshake requires multiple back-and-forth exchanges between the client and the server.

When ARR sits in the middle, it terminates the connection and forwards requests, but it doesn’t participate in or relay the Windows Auth negotiation.

Result: the backend (West Wind) never sees the proper handshake ? always returns 401 Unauthorized.

© 1996-2026