1

# General config
Timeout 300
KeepAlive On
MaxKeepAliveRequests 350
KeepAliveTimeout 15

# MPM
ThreadsPerChild 1200
MaxConnectionsPerChild 0

# h2
Protocols h2 h2c http/1.1
H2WindowSize 2688000

# SSL/Proxying
Listen 443

# Updated with every deployment, applied using a graceful restart httpd -k restart
DocumentRoot "C:\releases\release-20250403-074927\web\public"

SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
SSLProxyCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
SSLCompression Off
SSLHonorCipherOrder on 
SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
SSLProxyProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
SSLPassPhraseDialog  builtin
SSLSessionCache         "dbm:C:/Apache24/logs/ssl_scache"
SSLSessionCacheTimeout  300
SSLUseStapling On
SSLStaplingCache shmcb:C:/Windows/Temp/OCSPstapling_cache(128000)

<VirtualHost _default_:443>

# Enable proxying over HTTPS
SSLProxyEngine on
SSLProxyVerify none
SSLProxyCheckPeerCN off
SSLProxyCheckPeerName off
SSLProxyCheckPeerExpire off

RewriteEngine on

# Protect against the "HTTP Poxy" attack (CVE-2016-5387)
RequestHeader unset Proxy early

# Switch on reverse proxying for incoming requests that match server IDs
# e.g. POST requests for files to https://www.acme.com/?t=server1

# SERVER1
RewriteCond %{HTTP_HOST} .*acme.com.*
RewriteCond %{QUERY_STRING} .*t=server1.* [NC]
RewriteRule ^(.*)$ https://x.x.x.x$1 [P]

# SERVER2
RewriteCond %{HTTP_HOST} .*acme.com.*
RewriteCond %{QUERY_STRING} .*t=server2.* [NC]
RewriteRule ^(.*)$ https://x.x.x.x$1 [P]

...

</VirtualHost>

For immediate assistance, please email our customer support: [email protected]

Download RAW File