diff --git a/systemvm/patches/debian/config/etc/apache2/sites-available/default-ssl b/systemvm/patches/debian/config/etc/apache2/sites-available/default-ssl
index 0eea44d0103..5cc236e98a3 100644
--- a/systemvm/patches/debian/config/etc/apache2/sites-available/default-ssl
+++ b/systemvm/patches/debian/config/etc/apache2/sites-available/default-ssl
@@ -168,5 +168,10 @@
 	# MSIE 7 and newer should be able to use keepalive
 	BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
 
+	RewriteEngine Off
+	RewriteCond %{HTTPS} =on
+	RewriteCond %{REQUEST_METHOD} =POST
+	RewriteRule ^/upload/(.*) http://localhost:8210/upload?uuid=$1 [P,L]
+
 </VirtualHost>
 </IfModule>
diff --git a/systemvm/patches/debian/config/etc/init.d/cloud-early-config b/systemvm/patches/debian/config/etc/init.d/cloud-early-config
index 9942f2df0d5..e835a7ec76f 100755
--- a/systemvm/patches/debian/config/etc/init.d/cloud-early-config
+++ b/systemvm/patches/debian/config/etc/init.d/cloud-early-config
@@ -1155,6 +1155,10 @@ setup_secstorage() {
     setup_sshd $ETH0_IP "eth0"
   fi
   setup_apache2 $ETH2_IP
+  a2enmod proxy
+  a2enmod proxy_http
+  [ -f /etc/apache2/sites-available/default-ssl ] && sed -i -e "s/RewriteEngine Off/RewriteEngine On/" /etc/apache2/sites-available/default-ssl
+  service apache2 restart
 
   disable_rpfilter
   enable_fwding 0