Networking Forums

Networking Forums > Computer Networking > Linux Networking > Need all traffic to and from my web application servers to go througha proxy

Reply
Thread Tools Display Modes

Need all traffic to and from my web application servers to go througha proxy

 
 
PhxVyper
Guest
Posts: n/a

 
      04-16-2008, 06:06 AM
Hello,

There is a proxy server that I need to have all of my web servers'
HTTP (specifically port 80 and 443) traffic to go through (both
inbound and outbound). How do I go about doing this?

I have a mixture of Linux and Windows web servers that need to use the
proxy. All of them are in different networks (different hosts).

When any person makes the http request to a web page for one of these
web servers' domains, I need the request to go through the proxy. The
proxy will pass the request to the web server. The web server will
generate the response and send the response to the proxy and the proxy
will pass the response on to the end user.

Thanks in advance!
 
Reply With Quote
 
 
 
 
David Schwartz
Guest
Posts: n/a

 
      04-18-2008, 02:21 AM
On Apr 15, 11:06 pm, PhxVyper <chad.hor...@gmail.com> wrote:

> There is a proxy server that I need to have all of my web servers'
> HTTP (specifically port 80 and 443) traffic to go through (both
> inbound and outbound). How do I go about doing this?


Very simple:

1) You set up a proxy machine. You can use squid for this but other
programs are available as well. (This is usually called an 'inverse
proxy' because the proxy is on the server end rather than the client.)

2) You configure the proxy to refer requests to your server(s).

3) If necessary for security, you configure your servers to not accept
requests from sources other than the proxies.

4) Rather than advertising the address of the server to the public,
you advertise the address of the proxy. So if the web server handles
'www.example.com', you make 'www.example.com' resolve to the IP
address of the proxy.

5) You fix any problems this causes the web server. For example, if it
advertises its own host name or IP address (say in links on the
pages), it needs to be changed to advertise the proxy. Logging, host-
based authentication, or IP source based authentication, blacklisting,
or rate-limiting may break as all connections are seen to come from
the proxy's address.

This assumes you want a non-transparent proxy, which is generally
simpler to setup and doesn't require any special network layout.

> I have a mixture of Linux and Windows web servers that need to use the
> proxy. All of them are in different networks (different hosts).
>
> When any person makes the http request to a web page for one of these
> web servers' domains, I need the request to go through the proxy. The
> proxy will pass the request to the web server. The web server will
> generate the response and send the response to the proxy and the proxy
> will pass the response on to the end user.


Squid can do this.

DS
 
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Reading traffic control dropped data in an application Washington Ratso Linux Networking 1 03-25-2011 10:14 AM
NetDecision Traffic Grapher (MRTG/PRTG type application) NetMechanica Home Networking 0 02-07-2008 07:19 AM
NetDecision Traffic Grapher (MRTG/PRTG type application) advanced.net.worker@gmail.com Broadband 4 02-05-2008 02:19 PM
Load balancing application servers Mike Spike Windows Networking 2 05-24-2007 01:26 PM
Two subnets, two servers, one application to be shared on both Joe Windows Networking 4 10-03-2005 03:58 PM



1 2 3 4 5 6 7 8 9 10 11