How to configure reverse proxy

How to configure reverse proxy

Overview

A proxy server is an intermediary server that forwards requests for content from multiple clients to different servers across the Internet. A reverse proxy server is a type of proxy server that typically sits behind the firewall in a private network and directs client requests to the appropriate backend server. A reverse proxy provides an additional level of abstraction and control to ensure the smooth flow of network traffic between clients and servers.

Benefits of SafeSquid Reverse Proxy

Web acceleration
SafeSquid Reverse proxies can compress inbound and outbound data, as well as cache commonly requested content, both of which speed up the flow of traffic between clients and servers. They can also perform additional tasks such as SSL encryption to take load off of your web servers, thereby boosting their performance.
SSL Termination
Here the reverse proxy handles incoming HTTPS connections, decrypting the requests and passing unencrypted requests on to the web servers. This has several benefits:
Removes the need to install certificates on many back-end web servers.
Provides a single point of configuration and management for SSL/TLS
Takes the processing load of encrypting/decrypting HTTPS traffic away from web servers.
Makes testing and intercepting HTTP requests to individual web servers easier.
Security and anonymity 
By intercepting requests headed for your back-end servers, a reverse proxy server protects their identities and acts as an additional defence against security attacks. It also ensures that multiple servers can be accessed from a single record locater or URL regardless of the structure of your local area network.
Authentication
You can use SafeSquid reverse proxy to provide a single point of authentication for all HTTP and HTTPS requests.
Caching
The SafeSquid reverse proxy can also act as a cache. You can either have a dumb cache that simply expires after a set period, or better still a cache that respects Cache-Control and Expires headers. This can considerably reduce the load on the back-end servers.
Setup the SafeSquid in reverse proxy mode. A reverse proxy by itself appears to the client just like an ordinary website No special configuration on the client is necessary. Basically, a reverse proxy is on the website end which will be used to protect and reduce the load on the website
Here in an example, we are using a website which is hosted on apache server, I want to setup the reverse proxy for my website 
Website details:
FQDN: test.safesquid.net
IP: 192.168.27.50
And we are using SafeSquid proxy on 192.168.27.10

Configuration on website

Make DNS entry of your website pointing to proxy IP  
Pointing your website to proxy will make the traffic fetch desired content from proxy server.
On the request of traffic proxy server will fetch content from original site, and response back to the request.
In our example: 
192.168.27.10 is pointing to test.safesquid.net
Configuration on proxy server
Make sure that port 80 is free in proxy server, because it should not be allocated by any other service in the proxy server 
You can verify it by using below command:
netstat -tulnp
Check port 80 is free in proxy server by using netstat command

Here you will see there no service allocated to port 80
Enable forwarding option in  /etc/sysctl.conf file
Replace this line as: net.ipv4.ip_forward=0  to net.ipv4.ip_forward=1
  net.ipv4.ip_forward=1
Then add the Iptables rule to redirect the traffic from 80 to 8080:
 iptables -A PREROUTING -t nat -p tcp --dport 80  -j REDIRECT --to 8080
In proxy block all websites except your website, so that the proxy does not to be an open proxy.
See how to allow single website
Make DNS entry of your website pointing to your website IP
In our example :192.168.27.50 is pointing to test.safesquid.net  

Make DNS entry of website pointing to website IP
Now access your website from client machine without configuring any proxy settings in the browser, check you server logs, it will show that the website is access with proxy IP

In Server logs, view which the website is access with proxy IP



    • Related Articles

    • How To configure Proxy In a Browser

      Overview SafeSquid Proxy Service has a browser based intrinsic WebGUI, that allows users to configure, and manage its various features. To access the Interface, you must configure your web-browser to use the SafeSquid® proxy server. You should be ...

    • Deploy SafeSquid Behind Corporate Proxy

      Overview Use SafeSquid in front of the corporate proxy. A simple configuration in SafeSquid server, will forward all client requests to the forward proxy i.e. Parent Proxy. Example scenarios: Here am using two proxy servers as SafeSquid only My ...

    • Setup transparent proxy on SafeSquid

      Overview Internet is an essential part of most company’s business infrastructure. However, it can be a risky place, but there are ways to minimize risks so your business can thrive. Analysts encourage organizations to deploy a secure web gateway ...

    • How to Setup Configuration Sync in a SafeSquid Proxy Cluster

      Overview The lack of configuration synchronization in proxy clusters presents notable challenges. Inconsistencies across proxy servers without automated sync can lead to errors, system vulnerabilities, and inefficient performance. Each server ...

    • Enforce Yahoo Safe Search On SafeSquid Proxy

      Overview Enforce SafeSearch on Yahoo search results. SafeSquid forcefully enforce the Safe Search on yahoo Search engine. It will not allow you to disable the SafeSearch. When you’re using Yahoo Search at work or at home, SafeSearch can help you ...