Re: understanding reverse proxy using squid



query.cdac@xxxxxxxxx wrote:
I am just visualizing how a reverse proxy works.
Squid, a open source tool can be configured to work
as a reverse proxy.

Actually a reverse proxy lies inbetween the Internet and the Web
server. When a request from a client comes in , the request first goes
to the proxy server. The proxy server will look in its cache for the
requested page,if it is there in the cache, it will send the requested
page to the client or it will forward the request to the original web
server.
In such a scenario, the proxy server listens at port 80 and the web
server listens at some other port other than normal port 80.

The proxy server listens at port 80, yes. But the web server can also listen at port 80...on a different IP address. E.g., if your reverse proxy was at 192.168.1.1 port 80, then your web server could be at 192.168.1.2 port 80. The only reason you'd need to have the web server listening on a different port is if it and the proxy are trying to listen on the same IP address.

[snip]
My confusing is regarding the how the web browsers will know that it
has to first contact the proxy server instead of the web server.
One way that can be done which I am thinking is, when I get a
registered ip address for my web server , instead of assigning the ip
address to the web server , I will assign it to the proxy server. The
proxy server is configured in such that any request that comes to it ,
it will forward it to the web server if the request is not available
in its own cache . In that case , the web server will have a private
ip address.

That's about the only way to do it. Clients have to see the IP address of the reverse proxy in order for it to work.
.



Relevant Pages

  • RE: Proxy Server in SBS 2000
    ... sites through port 443. ... If you install ISA 2000 on the SBS 2000 server, ... Connections->LAN Settings, tick the Use proxy server for your LAN, and then ... Is ISA 2000 installed on the SBS Server? ...
    (microsoft.public.windows.server.sbs)
  • Re: bypassing employers proxy to surf anonymously
    ... port 443, so it's harder to distinguish from an https server. ... Also, in case you're not aware, a proxy server on the other side ... Download FREE whitepaper on how a managed service can ...
    (Pen-Test)
  • Re: proxy does not work with secure sites
    ... > coonected to port 80 i get this excpetion some times.. ... It must open a socket to the target server ... the proxy should simply forward ... >>> not serving the request.. ...
    (microsoft.public.win32.programmer.networks)
  • Re: ISA Server Problems, please help
    ... Based on the rules you have listed, SecureNAT clients should only be allowed ... The All access rule for SBS Internet Users ... Web Proxy and/or Firewall Client ... > header to the publishing server instead of the actual one. ...
    (microsoft.public.windows.server.sbs)
  • Re: bypassing employers proxy to surf anonymously
    ... When using SSH through the local proxy, it might be an idea to run the ... port 443, so it's harder to distinguish from an https server. ... Also, in case you're not aware, a proxy server on the other side ... Another method of tunneling would be through DNS. ...
    (Pen-Test)