Firewall Wizards mailing list archives

Re: Reverse proxy ??


From: "Steven Osman" <sosman () terratron com>
Date: Mon, 1 Nov 1999 03:31:09 -0500

Personally, I use Apache as my reverse proxy.

It is extremely easy to set up and appears to work just fine.  On the other
hand, I haven't used the environment (yet) with complex CGI/applications at
one of the web servers (I have used it to access java servlets, but nothing
fancy), so I can't vouch for any one implementation's ability to correctly
forward all relevant data.

Steven Osman
Terratron Technologies, Inc.

----- Original Message -----
From: Steve Anich <sjanich () mke ab com>
To: <sosman () terratron com>
Cc: <sand232 () yahoo com>; <firewall-wizards () lists nfr net>
Sent: Monday, November 01, 1999 1:47 AM
Subject: Re: Reverse proxy ??


What Reverse Proxy software do you use? MS, Netscape, or????


Thanks,


--steve


Reverse proxy is, as the name suggests, similar to "proxying backwards".

Rather than have a bunch of clients funnel into one proxy server, you
would
actually have a bunch of servers funnel into one proxy server.

Consider an environment where you have 10 web servers handling critical
data.  You can put all these servers behind a firewall, so that your
critical data remains secure.  You then create a reverse proxy server
which
handles all the requests, and depending on the path the request is then
forwarded to one of the actual web servers.  Further, your web servers
don't
need to have routable IP addresses this way -- just one for the proxy.

In this way, your proxy server would:

take requests for http://www/dir1/ and forward the requests to server 1
take requests for http://www/dir2/ and forward them to server 2,
and so on.

The web servers could have very tight access control and handle requests
ONLY from the proxy server.

Other interesting scenarios are possible.  Consider

http://www/ny/ which forwards requests to the NY based-web server.
and
http://www/ca/ which forwards requests to the CA based server.

I've also used reverse proxy to allow several web servers' requests to
be
handled by 1 IP address.

Steven Osman
Terratron Technologies Inc.

----- Original Message -----
From: Sandy Green <sand232 () yahoo com>
To: <firewall-wizards () lists nfr net>
Sent: Thursday, October 28, 1999 7:27 PM
Subject: Reverse proxy ??


There was a quetion here in this list about MS Proxy
server with one or two NIC cards. In that context it
was highlighted that with one NIC card "reverse
proxy" will not be possible.

But can someone explain as to what is reverse proxy ?






=====

__________________________________________________
Do You Yahoo!?
Bid and sell for free at http://auctions.yahoo.com



--
Steve Anich
Rockwell Automation
Group: Electronic Commerce/Information Security
Email: sjanich () mke ab com
Voice: 414.382.2650, Fax: 414.382.0465
AIM:   steveanich  , Y!M: sjanich
O-



Current thread: