Sample Cloud Spend MCP Server

🚀 Configuring an HTTPS Reverse Proxy Server on an EC2 Instance with Nginx

This document provides a detailed guide on how to configure a secure HTTPS-based reverse proxy server using Nginx on an Amazon Elastic Compute Cloud (Amazon EC2) instance. By doing so, front-end clients will be able to access back-end services via the secure HTTPS protocol.

📚 Article Structure

1. 📦 Install Nginx

   • Use apt-get to install Nginx.
   • Verify the correctness of the Nginx configuration.
   • Reload the Nginx configuration.

2. 🌐 Obtain the Public Hostname of the EC2 Instance

   • Use the curl command to get the public DNS name of the instance.

3. 📄 Create an Nginx Configuration File

   • Configure the paths for the SSL certificate and key.
   • Set the SSL protocols and cipher suites.
   • Configure reverse proxy rules to forward requests to a service running on the local port 8000.

4. 🚀 Start the Nginx Service

5. 🔗 Access the Reverse Proxy Server via HTTPS

   • Update the MCP client configuration to use the new HTTPS URL.
   • Connect to the reverse proxy server using different methods (e.g., mcp_sse_client.py or LangGraph Agent).

📋 Detailed Step-by-Step Instructions

📦 Install Nginx

1. Open a terminal and run the following command to install Nginx:

   sudo apt-get install nginx
   

2. Verify that Nginx is installed correctly:

   sudo nginx -t
   

3. Reload the Nginx configuration to apply the changes:

   sudo systemctl reload nginx
   

🌐 Obtain the Public Hostname of the EC2 Instance

1. Use the curl command to get the public DNS name of the instance:

   TOKEN=$(curl -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-seconds: 21600") && curl -H "X-aws-ec2-metadata-token: $TOKEN" -s http://169.254.169.254/latest/meta-data/public-hostname
   

📄 Create an Nginx Configuration File

1. Open a terminal and run the following command to create a new Nginx configuration file:

   sudo nano /etc/nginx/conf.d/ec2.conf
   

2. Paste the following content into the file (remember to replace the placeholders):

   server {
   	listen 80;
   	server_name YOUR_EC2_HOSTNAME;
   
   	# Redirect HTTP to HTTPS
   	return 301 https://$host$request_uri;
   }
   
   server {
       listen 443 ssl;
       server_name YOUR_EC2_HOSTNAME;
   
       # SSL certificate and key paths
       ssl_certificate     /etc/ssl/certs/cert.pem;
       ssl_certificate_key /etc/ssl/privatekey/privkey.pem; 
   
       # Set SSL protocols and cipher suites
       ssl_protocols       TLSv1.2 TLSv1.3;
       ssl_ciphers         HIGH:!aNULL:!MD5;
   
       location / {
           # Reverse proxy to a local service (e.g., port 8000)
           proxy_pass http://127.0.0.1:8000;
           proxy_set_header Host $host;
           proxy_set_header X-Real-IP $remote_addr;
           proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
           proxy_set_header X-Forwarded-Proto https;
       }
   }
   

3. Save and exit the editor.

🚀 Start the Nginx Service

1. Test the correctness of the Nginx configuration:

   sudo nginx -t
   

2. If the configuration is correct, reload Nginx to apply the changes:

   sudo systemctl reload nginx
   

3. Ensure that the Nginx service is running:

   sudo systemctl status nginx
   

🔗 Access the Reverse Proxy Server via HTTPS

1. Update the configuration of all MCP clients to use the new HTTPS URL.

2. Connect to the reverse proxy server using mcp_sse_client.py:

   python mcp_sse_client.py --url https://YOUR_EC2_HOSTNAME:443
   

3. Connect to the reverse proxy server using LangGraph Agent:

   export MCP_SERVER_URL=https://YOUR_EC2_HOSTNAME:443
   

⚠️ Important Note

• Ensure that the paths for the SSL certificate and key are correct.
• Regularly update the SSL certificate to ensure security.
• Monitor the status of the Nginx service to ensure its normal operation.

By following the above steps, you can successfully configure a secure HTTPS reverse proxy server on an EC2 instance.