View source for How to configure reverse proxy


= Overview =

A proxy server is a intermediary server that forwards requests for content from multiple clients to different servers across the Internet. A reverse proxy server is a type of proxy server that typically sits behind the firewall in a private network and directs client requests to the appropriate backend server. A reverse proxy provides an additional level of abstraction and control to ensure the smooth flow of network traffic between clients and servers.

= Benefits of SafeSquid Reverse Proxy =

*'''Web acceleration''' 

SafeSquid Reverse proxies can compress inbound and outbound data, as well as cache commonly requested content, both of which speed up the flow of traffic between clients and servers. They can also perform additional tasks such as SSL encryption to take load off of your web servers, thereby boosting their performance.

*'''SSL Termination''' 

Here the reverse proxy handles incoming HTTPS connections, decrypting the requests and passing unencrypted requests on to the web servers. This has several benefits:

#Removes the need to install certificates on many back end web servers. 
#Provides a single point of configuration and management for SSL/TLS 
#Takes the processing load of encrypting/decrypting HTTPS traffic away from web servers. 
#Makes testing and intercepting HTTP requests to individual web servers easier. 

*'''Security and anonymity&nbsp;''' 

By intercepting requests headed for your back end servers, a reverse proxy server protects their identities and acts as an additional defense against security attacks. It also ensures that multiple servers can be accessed from a single record locater or URL regardless of the structure of your local area network.

*'''Authentication''' 

You can use SafeSquid reverse proxy to provide a single point of authentication for all HTTP and HTTPS requests.

*'''Caching''' 

The SafeSquid reverse proxy can also act as a cache. You can either have a dumb cache that simply expires after a set period, or better still a cache that respects Cache-Control and Expires headers. This can considerably reduce the load on the back-end servers.

Setup the SafeSquid in reverse proxy mode. A reverse proxy by it self appears to the client just like an ordinary website&nbsp;No special configuration on the client is necessary. Basically, a reverse proxy is on the website&nbsp;end which will be used to protect and reduce the load on the website

Here in an example we are using a website which is hosted on apache server, i want to setup the reverse proxy for my website&nbsp;

'''<u>Website&nbsp;details&nbsp;:</u>'''

*FQDN: test.safesquid.net 
*IP: 192.168.27.50 

And we are using '''SafeSquid proxy''' on 192.168.27.10

== Configuration on website ==

Make DNS entry of your website pointing to proxy ip &nbsp;

Pointing your website to proxy will make the traffic fetch desired content from proxy server.

On the request of traffic proxy server will fetch content from original site, and response back to the request..

<u>'''In our example&nbsp;:&nbsp;'''</u>

192.168.27.10 is pointing to test.safesquid.net

&nbsp;

== Configuration on proxy server ==

Make sure that port 80 &nbsp;is free in proxy server, because it should not allocated by any other service in the proxy server&nbsp;

You can verify it by using below command&nbsp;:

{| width="237" cellspacing="1" cellpadding="1" border="1"
|-
| &nbsp; <span style="font-size:medium">'''&nbsp;&nbsp;<code>netstat -tulnp</code>'''</span>
|}

{| style="width: 843px" cellspacing="1" cellpadding="1" border="0"
|-
| style="width: 833px" | <code>[[File:Netstat.jpg|center|Netstat.jpg|link=]]</code>
|}

Here you will see there no service allocated to port 80

Enable forwarding option in &nbsp;'''/etc/sysctl.conf''' file

Replace this line&nbsp;as&nbsp;:&nbsp;'''net.ipv4.ip_forward=0&nbsp; to&nbsp;net.ipv4.ip_forward=1'''

{| width="238" cellspacing="1" cellpadding="1" border="1"
|-
| '''&nbsp;&nbsp; net.ipv4.ip_forward=1'''
|}

Then add the Iptables rule to redirect the traffic from 80 to 8080&nbsp;:

{| width="649" cellspacing="1" cellpadding="1" border="1"
|-
| style="width: 625px" | &nbsp;&nbsp;'''<code>iptables -A PREROUTING -t nat -p tcp --dport 80 &nbsp;-j REDIRECT --to 8080</code>'''
|}

In proxy block all websites except your website, so that the proxy does not to be an&nbsp;open proxy.

See [[Block_Or_Allow_Single_Website|how to allow single website]]

Make DNS entry of your website pointing to your website IP

In our example&nbsp;:'''192.168.27.50''' is pointing to '''test.safesquid.net&nbsp;&nbsp;'''

{| style="width: 824px" cellspacing="1" cellpadding="1" border="0"
|-
| style="width: 814px" | [[File:Dnsofwebsite.jpg|center|Dnsofwebsite.jpg|link=]]
|}

Now access your website from client machine without configuring any proxy settings in the browser, Check you server logs, it will show that the website is access with proxy IP

{| width="890" cellspacing="1" cellpadding="1" border="0"
|-
| [[File:Logline.jpg|center|Logline.jpg|link=]]
|}

{{Seo|keywords=reverse proxy,secure web server|description=Configure your Secure Web Gateway to act as a Reverse proxy}}

[[Category:How To]]