Reverse Proxy Vs Proxy
Help DNS vs Reverse Proxy.Best way to have easy access for internal services? Set up your split-brain DNS to point www.whatever.com to your reverse proxy. Set your reverse proxy as normal. Set your reverse proxy so only your internal network is allowed to use that site.
SRX is currently capable of Server Side Proxy (Reverse Proxy) while Standalone currently supports Serverside Proxy and in IDP5.0 we will do both ‐ Server (Reverse) and Client (Forward) side Proxy.b. One simple way to differentiate between Reverse and Forward proxy using Internet for basis would be:i. Forward = proxying outbound i.e. “locally” initiated SSL session to the Internet targets.
E.g.Internal Client points their web browser to proxy the HTTPS session of the IDP directly so the IDPcan terminate the connection, inspect it for attacks (both directions) and initiate the connectionon the clients’ behalf out to the internet.ii. Reverse = proxying inbound i.e. “externally” initiated SSL sessions from the Internet to localserver.
Forward Proxy Vs Reverse Proxy
Requires server private keys installed on the sensor. External user on the internet istrying to access a corporate web server.
They initiate the HTTPS connection to the webserver,the IPS which has the webservers private key will intercept the traffic, inspect it for attacks, andif no attacks are present, it will forward it onto the destination web server.Note that today only the data center SRX can support reverse proxy. Please keep in contact with your SE's regarding future support of Forward SSL proxy on all SRX platforms.