Nicolas Melay's questions

I need to rewrite the client authentication scheme in requests going through an Apache 2.4 reverse proxy. Specifically, I want to ignore the provided username and password, and force the same username + password for all requests. Is that doable ?

I'm running Apache as an HTTPS reverse proxy, with many real hosts proxied through a single VirtualHost (single public IP, wildcard certificate), using mod_rewrite and mod_proxy.

Basically, something like:

<VirtualHost *:443>
SSLEngine On
...
RewriteEngine On
RewriteCond %{SERVER_NAME} ^(server1|server2|server3)\.domain\.net$
RewriteRule ^/(.*)$ https://%{SERVER_NAME}/$1 [P]   # Forward requests for listed servers
RewriteRule ^.*$ - [F]                              # Block anything else
</VirtualHost>`

Now I need to set Timeout to a larger value than default, but only for requests going to one of these servers (sync server for mobile devices).

Can this be done without requiring a separate VirtualHost (and thus another public IP) ?