4.7 Setting the reverse proxy
Whenever a client cannot directly connect to the Internet, client requests are sent to the Web server via another server called a proxy server. The proxy server is usually installed at a connection point between the clients and the Internet. A proxy server that is installed at a connection point between the Internet and the Web server is called a reverse proxy. The reverse proxy processes requests received from clients on behalf of the Web server.
The following figure shows the difference between a normal proxy server and a reverse proxy.
|
|
You can use the reverse proxy for following operations:
-
You can prevent direct access to contents.
When important information is maintained in the Web server (such as database of credit card numbers), set the reverse proxy and the Web server on different machines, protect the Web server from invalid access and prevent the information leakage.
-
You can integrate a highly loaded SSL process in the proxy server.
If you use the reverse proxy and perform the SSL processing on another machine, you can distribute the load on the Web server.
-
You can divide the load on the Web server without affecting the client.
Even if you divide the Web server, since the proxy server acts as an alternative, the client can access with the same interface as prior to the division.
- Organization of this section