iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
Yes, Nginx and Apache can run on the same server. The reliable design is to make Nginx the public-facing web server on ports 80 and 443, then bind Apache to a separate local address and port such as 127.0.0.1:8080. Nginx forwards each request with proxy_pass, while Apache continues selecting the correct site with its normal name-based virtual hosts.
This arrangement removes the port-binding conflict, keeps Apache inaccessible from the public network, and lets Nginx handle TLS, redirects and edge logging. The sections below show how to build, verify and troubleshoot that layout.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The target architecture
A web server can listen only when its IP address and port are available. Two daemons cannot both own the same listener, so assigning both Nginx and Apache to 0.0.0.0:80 or 0.0.0.0:443 causes one service to fail at startup. Give each process a distinct endpoint instead:
Client
|
| HTTP :80 / HTTPS :443
v
Nginx (public listener and optional TLS termination)
|
| proxy_pass http://127.0.0.1:8080
v
Apache (loopback :8080 and backend virtual hosts)Only Nginx needs to be reachable through the server’s public firewall rules. Apache listens on loopback, so requests must first pass through Nginx. If policy requires a separate internal network, Apache can instead bind to a private, firewalled address; the same proxying model applies.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application:Upgraded attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Warranty & Support: Our Electric air duster comes with 5 years warranty and 24/7 customer service. During this period, if you have any questions,pls kindly feel free to contact us.
What each server does
| Layer | Responsibility | Listener in this design |
|---|---|---|
| Nginx | Accepts client HTTP and HTTPS connections, applies hostname and path routing, optionally terminates TLS, adds forwarding headers, and proxies responses back to clients. | Public port 80 and, for HTTPS, public port 443 |
| Apache | Serves the application or site and chooses its virtual host from the forwarded Host value and backend port. |
127.0.0.1:8080 (or another private address and free port) |
Nginx’s proxy operation has three stages: it sends a request to the configured upstream, fetches the response, and sends that response to the client. Apache therefore does not need to know the client’s network connection; it receives an internal request from Nginx and handles it as the origin server.
Plan the change before editing files
- Identify every hostname that Apache currently serves, including
ServerNameandServerAliasvalues. - Choose a backend address and port that are not already in use.
127.0.0.1:8080is a common example. - Decide whether Nginx will terminate TLS. Central termination is usually simplest because certificates, HTTP-to-HTTPS redirects and TLS policy live in one place.
- Decide which forwarded headers the application and Apache logs require, then configure trust only for the Nginx address.
- Keep a way to test both configurations before reloading either daemon.
Install both services from the operating system’s supported packages. Package names, configuration directories and service-management commands differ by distribution, so use the conventions documented for your operating system rather than copying paths from another platform.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Step 1: Move Apache to a private backend port
Edit Apache’s main Listen directive and any virtual-host bindings so that they use the selected backend endpoint. A minimal pattern is:
Listen 127.0.0.1:8080
<VirtualHost 127.0.0.1:8080>
ServerName example.com
ServerAlias www.example.com
# DocumentRoot and application directives remain here
</VirtualHost>Apply the same address and port to every Apache virtual host that should be reached through Nginx. Preserve each site’s ServerName and ServerAlias; those names still determine which backend site Apache selects. If Apache has separate Listen lines for ports 80 or 443, remove or change them so no Apache process continues competing for Nginx’s public listeners.
Binding to loopback is a security boundary as well as a port choice. A process outside the host cannot connect directly to 127.0.0.1:8080. If you bind Apache to a private interface instead, enforce equivalent firewall rules and make sure Nginx can reach that address.
Step 2: Configure Nginx as the HTTP reverse proxy
Create one Nginx server block for each public hostname, or group aliases that should behave identically. The essential HTTP configuration is:
server {
listen 80;
server_name example.com www.example.com;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://127.0.0.1:8080;
}
}proxy_pass names the backend and includes its port. The explicit headers preserve the original host, expose the client address for applications that need it, maintain the proxy chain, and tell Apache or the application whether the client used HTTP or HTTPS. Choose the exact header policy deliberately: Nginx changes some proxied Host and Connection behavior by default, and your logging or application framework may require a different policy.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
For several sites on one machine, add a matching Nginx server block for each hostname and point each block to the appropriate Apache backend. Keep the names synchronized on both sides. A request can reach the wrong site when Nginx’s server_name does not match the requested hostname or Apache’s default virtual-host order catches an unexpected name.
Step 3: Add HTTPS at the Nginx edge
With edge termination, Nginx accepts TLS on port 443, decrypts the request, and sends ordinary HTTP over the loopback connection to Apache. The HTTPS server block must listen on 443 with SSL enabled and reference the certificate and private-key files managed on your host:
server {
listen 443 ssl;
server_name example.com www.example.com;
# Configure ssl_certificate and ssl_certificate_key
# with the certificate files used by this host.
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://127.0.0.1:8080;
}
}Keep the HTTP listener when you need to redirect clients to HTTPS; implement that as a separate port-80 server block whose only job is the redirect. Apache should understand that the original request was HTTPS through X-Forwarded-Proto. If the application ignores that value, it may generate an HTTP URL, redirect repeatedly, or create a redirect loop.
Edge termination is not the only option. If a policy requires encryption on every hop, configure HTTPS from Nginx to Apache as well and manage a separate upstream certificate. That is re-encryption, not TLS passthrough: Nginx still terminates the client connection and establishes a new protected connection to Apache. Passthrough would prevent Nginx from inspecting HTTP host and path data, so it is a different architecture and requires an appropriate stream-level design.
Step 4: Preserve the client identity safely
Apache receives a connection from Nginx, so the socket-level peer address is normally the Nginx address rather than the original client. Forwarded headers solve that visibility problem, but they also create a trust decision.
Hostcarries the hostname the client requested and lets Apache select the intended virtual host.X-Real-IPprovides a single client-address value for applications that use it.X-Forwarded-Forrecords the proxy chain and is useful for logs and access controls.X-Forwarded-Protorecords whether the original request was HTTP or HTTPS.
Configure Apache and the application to trust these values only when the request came from Nginx’s known address. If arbitrary clients can connect directly to Apache, they could forge the same headers. Loopback binding prevents that direct path in the common single-host layout.
Step 5: Validate and start the services
- Check Apache’s configuration with the platform’s supported Apache test command, such as the distribution’s
apachectlconfiguration test or equivalent. Fix every syntax or binding error before proceeding. - Check Nginx with
nginx -t. Do not reload a configuration that fails this test. - Start or reload Apache using the service manager supplied by your operating system, then do the same for Nginx.
- Inspect listeners with
ss -ltnpor the platform equivalent. Nginx should own public 80 and 443; Apache should own only its selected backend endpoint. - Request each hostname through Nginx and verify that the expected Apache virtual host responds. Test both HTTP and HTTPS if both are enabled.
Reload rather than stop-and-start when your service manager supports a validated reload. A reload reduces interruption, but it does not replace syntax testing or a listener check.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Follow one request through both layers
Understanding the handoff makes diagnosis easier. A browser resolves the hostname to the server’s public address and opens a connection to port 80 or 443. Nginx chooses a server block using the requested hostname. For HTTPS, it completes the client TLS handshake and decrypts the HTTP request. It then creates an upstream request to Apache’s loopback address, copies the selected headers and waits for Apache’s response. Apache uses the preserved Host header and its backend virtual-host definitions to choose the site, runs the application, and returns a status, headers and body. Nginx relays that response to the browser.
This sequence explains why a successful connection to Nginx does not prove that Apache is healthy. Each hop has its own socket, configuration and logs. Test the backend locally as well as through the public hostname when isolating a fault, while remembering that a direct local request may not include the same Host or forwarded headers as a real client.
Apache’s reverse-proxy directives: when they matter
In the Nginx-fronted design above, Nginx is the reverse proxy and Apache is the origin. Apache’s mod_proxy is relevant only if Apache itself must forward traffic to another application or service. Its reverse-proxy mode makes Apache appear to the client as an ordinary web server; ProxyPass and ProxyPassReverse are the core directives for that role.
Do not enable Apache’s ProxyRequests merely because the word “proxy” appears in the architecture. That directive enables forward-proxy behavior, where Apache relays requests chosen by clients. An unintentionally open forward proxy can be abused and is dangerous to both the local network and the wider Internet. Enable it only when you have an intentional, secured forward-proxy design.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Host-based and path-based routing
Host-based routing
Host routing is the natural fit for multiple websites. Nginx matches server_name, then sends the request to the backend port. Apache receives the same Host value and chooses its corresponding VirtualHost. This preserves Apache’s existing site separation while moving the public listener to Nginx.
Path-based routing
Nginx can also select an upstream from a URL path by using separate location blocks. For example, one path could go to Apache while another goes to a different local service. Path routing requires care around URI rewriting, application base URLs and trailing slashes. If the application is designed to run at the site root, placing it under a path prefix may require application-specific configuration rather than a proxy rule alone.
Security boundaries and maintenance
Expose only the edge ports that clients need. A public firewall normally permits TCP 80 and 443 to Nginx and does not permit the Apache backend port. Binding Apache to loopback is stronger than relying on a firewall rule alone because the service has no routable external socket. If a private interface is required for a multi-host arrangement, restrict that address to the Nginx host and monitor for accidental listener changes.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Protect private keys readable by Nginx, renew certificates before expiration, and test a renewal by validating the resulting Nginx configuration. Keep the operating-system packages for both daemons patched through the supported update channel. Configuration management should treat the backend port as shared data: changing Apache’s Listen value without changing every Nginx proxy_pass creates an immediate upstream failure.
There is no universal throughput or latency benefit to adding a second web server. The extra hop adds configuration and another failure point, while the value may be compatibility, centralized TLS or routing. Measure the actual workload if performance is a requirement rather than assuming one daemon is faster.
Logging and observability
Keep access and error logs at both layers. Nginx logs show what the client requested and whether the edge could reach the upstream. Apache logs show virtual-host selection and application-side failures. Include forwarded client information in Apache’s log format only after configuring the trust boundary; otherwise a forged header can make logs misleading.
When a request fails, identify the first layer that reports an error. An Nginx connection or upstream error points to listener, routing or reachability problems. A successful Nginx proxy connection followed by an Apache status or application error points to the backend configuration or application itself.
Common failures and their fixes
| Symptom | Likely cause | What to check |
|---|---|---|
| Nginx will not start or reload | Syntax error, duplicate listener or invalid certificate configuration. | Run nginx -t; inspect which process owns ports 80 and 443 with ss -ltnp. |
| Apache will not start | Its old port is still occupied, the new address is invalid, or a virtual-host binding was not changed. | Run the Apache configuration test and confirm every Listen and VirtualHost uses the available backend endpoint. |
| Nginx returns 502 or 503 | Apache is stopped, listening on a different address or port, blocked by local policy, or refusing the request. | Compare proxy_pass with Apache’s listener, verify the Apache service state, and inspect both error logs. |
| The wrong website appears | Nginx’s server_name, Apache’s ServerName/ServerAlias, or default virtual-host order is inconsistent. |
Send a request with the intended hostname and review the selected server block and Apache virtual-host mapping. |
| HTTPS redirects loop or generates HTTP links | The application does not trust the forwarded HTTPS scheme. | Confirm Nginx sends X-Forwarded-Proto $scheme and configure the application or Apache to trust it only from Nginx. |
| Client addresses are all identical | Logs are recording the Nginx peer address instead of the forwarded client value. | Pass and consume X-Real-IP or X-Forwarded-For under a restricted trust policy. |
| Direct requests reach Apache | Apache is bound to a public interface or firewall rules permit the backend port. | Bind to loopback or a protected private address and close the backend port to untrusted networks. |
| Only one hostname works | A certificate, Nginx server block or Apache alias covers one name but not the others. | Check every DNS name against both Nginx server_name entries, certificate names and Apache aliases. |
Choosing the edge server
| Design | Advantages | Trade-offs |
|---|---|---|
| Nginx edge with Apache backend | Separates public and application roles, centralizes TLS and edge routing, and preserves Apache virtual-host behavior. | Adds a proxy hop and requires consistent forwarded-header and logging policy. |
| Apache-only edge | One daemon and one configuration family; no proxy hop between the client and Apache. | Does not provide the Nginx edge layer, and any Nginx-specific routing or TLS policy is unavailable. |
| Nginx-only edge | One public daemon and a simple request path when Apache features are unnecessary. | Applications or sites that depend on Apache modules or its virtual-host behavior may need migration work. |
Running both is justified when you need Nginx’s public edge while retaining Apache compatibility for existing sites or modules. It is not a performance promise: no throughput or latency advantage should be assumed without measurements for your workload.
Recommended Free Tools
Operational checklist
- Record the backend address and port and keep it consistent in Apache and every Nginx
proxy_pass. - Keep public firewall rules limited to the ports Nginx actually serves.
- Renew and test certificates at the Nginx edge before they expire.
- Run both syntax tests before every reload.
- After configuration changes, verify listeners with
ss -ltnpand make one request per hostname. - Retain logs from Nginx and Apache long enough to trace a request across both layers.
- Review which components trust forwarded headers whenever the network layout changes.
Frequently Asked Questions
Can Nginx and Apache both listen on port 80?
Not on the same IP address. One process must own the public listener. Put Nginx on port 80 and move Apache to a private port such as 127.0.0.1:8080, then proxy requests to it.
What port should Apache use behind Nginx?
Any free, protected port works. 127.0.0.1:8080 is a common choice, but the important requirements are that Apache’s Listen and VirtualHost directives match it and Nginx’s proxy_pass points to the same address.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
Can Apache remain on port 443 behind Nginx?
Not if Nginx also owns the public 443 listener on the same address. Apache can use HTTPS on a different private port for re-encryption, with a separate upstream certificate, while Nginx terminates the client TLS session.
Do I need Apache’s mod_proxy for this setup?
No. Nginx is the reverse proxy in this design. Apache’s mod_proxy is needed only if Apache must forward requests to another service. Do not enable ProxyRequests unless you intentionally operate a secured forward proxy.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsHow do I keep the real client IP in Apache logs?
Forward X-Real-IP and X-Forwarded-For from Nginx, then configure Apache or the application to trust those headers only from Nginx’s known address. Otherwise clients could forge their apparent address.
Why does Nginx return a 502 error?
Usually Apache is stopped, listening on a different address or port, blocked by local policy, or refusing the request. Compare proxy_pass with Apache’s actual listener, inspect service status and read both error logs.
Why am I seeing the wrong Apache virtual host?
Check that Nginx’s server_name, the forwarded Host header, and Apache’s ServerName and ServerAlias values all contain the requested hostname. Also check default virtual-host ordering.
Why does HTTPS keep redirecting or produce HTTP links?
Nginx must send X-Forwarded-Proto $scheme, and Apache or the application must trust that value from Nginx. Without it, the backend may believe every request is plain HTTP.
Should Apache be bound to 127.0.0.1 or a private network address?
Loopback is simplest and prevents external connections on the backend port. Use a private interface only when another host must reach Apache, and then firewall that address so only Nginx can connect.
How do I verify that the two services are separated correctly?
Run nginx -t and the supported Apache configuration test, reload safely, and inspect listeners with ss -ltnp. Nginx should own public 80 and 443; Apache should own only its private backend endpoint.
The Bottom Line
Run Nginx as the only public listener on ports 80 and 443, bind Apache to a private address such as 127.0.0.1:8080, and connect the two with Nginx proxy_pass. Keep hostnames and virtual hosts synchronized, forward client and scheme headers under a strict trust policy, validate both configurations before reloads, and use listener and two-layer log checks whenever a request fails.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
