What Is a Reverse Proxy in a Network?
A proxy server acts as a substitute for another computer. A forward proxy server takes requests from a protected client and presents it to the target server on its behalf. A reverse proxy server protects a server by handling incoming requests and replying to them as if it were the server.
Other People Are Reading
-
Server Protection
-
Companies and institutions running a private local area network (LAN) need to protect their network and the computers connected to it. Networks are usually connected to the Internet. This is a security weak spot. Internet traffic runs in two directions -- a request goes out and a response comes back. Incoming traffic in response to a request is less suspicious that an unsolicited incoming connection. The best security protection is to block all incoming connections that are not responses to outgoing requests. Companies requiring incoming requests, like Web hosts, cannot block all incoming connections. They need to use a reverse proxy server to cater to this incoming traffic without reducing security protection.
Purpose
-
Rather than blocking the incoming requests, the reverse proxy deals with them itself. This strategy gives much stronger security than a firewall. A firewall checks the packet structure for suspicious sources of connections. The reverse proxy prevents the connection getting anywhere near the target server. This removes any possibility of a virus or spyware getting on the server.
-
Method
-
When an incoming request arrives at the proxy server, the proxy reads the requirements, and then contacts the server so it can gather enough information to form a response. The incoming request never reaches the server, although the client is unaware of this and thinks it is communicating with the target server.
Other Functions
-
Once a company has installed a proxy server, it has the option of adding on other capabilities. The server behind the proxy may not have enough capacity to deal with demand. The company needs to install a group of servers, which is called a cluster. External clients still have one point of contact, with one Web address and one IP address. This service is called "load balancing." As the proxy has to fetch data from the server to formulate responses, it can be programmed to retain copies of the most frequently requested data. This relieves the work load on the original server and improves response times. This method is called "caching."
-
References
- Photo Credit Thinkstock Images/Comstock/Getty Images
