Employment
Customers
Contact
Search
©
Intranet and Extranet Security and Isolation through Reverse Proxy Servers
Proxy Servers
Proxy Servers and Clients

Defined: A server that sits between a client application, such as a Web browser, and a source web server. It intercepts all requests to the real server to see if it can fulfill the requests itself. If not, it forwards the request to the original source web server.


Proxy servers have two main purposes:

   A.  Improve Performance: Proxy servers can dramatically improve performance for groups of users. This is because it saves the results of all requests for a certain amount of time. Consider the case where both user X and user Y access the World Wide Web through a proxy server. First user X requests a certain Web page, which we'll call Page 1. Sometime later, user Y requests the same page. Instead of forwarding the request to the Web server where Page 1 resides, which can be a time-consuming operation, the proxy server simply returns the Page 1 that it already fetched for user X. Since the proxy server is often on the same network as the user, this is a much faster operation. Real proxy servers support hundreds or thousands of users. The major online services such as CompuServe and America Online, for example, employ an array of proxy servers.

   B.  Filter Requests: Proxy servers can also be used to filter requests. For example, a company might use a proxy server to prevent its employees from accessing a specific set of Web sites.

Web browsing client programs such as Netscape allow client computers to surf the web unencumbered. Any web page that is requested by the client is automatically accessed and retrieved by the client without regard to content or appropriateness. However, this flexibility also provides a means of accessing web sites and pages that might be considered inappropriate for classroom use. A Proxy Server can be used to limit access to some of these undesirable sites.

A Proxy Server is a World Wide Web server that acts as the sole web server for your entire domain or whatever clients you place behind a Firewall, a logical block between your clients and the rest of the Internet. The proxy server usually resides on your firewall and intercepts all web requests coming from clients within the firewall. If the web page request is not on the proxy server's access control list, the request is processed normally and the retrieved web page is sent back to the requesting client. If, however, the requested web page or web site is on the control list, the client instead receives a message indicating that the URL is not accessible or is not valid.Proxy Chain and Content Filtering

Your network must be set up such that clients requesting access control must use the proxy server as their Internet gateway. This can be accomplished through proper router setup, placing all clients requesting access control "behind" the firewall.

A proxy server can also improve your network's performance by functioning as a caching server. Using its cached web pages, the proxy server will serve previously-accessed web pages to requesting clients without requiring outside access to the Internet. Consider a situation where a computer lab of twenty client computers is accessing the web under the direction of an instructor. The instructor directs all twenty students to enter the address (URL) of the web page to be accessed. At the moment all twenty ENTER keys are pressed, twenty separate requests for that same web page are initiated, and twenty separate copies of that same web page are retrieved and returned to the classroom.

Using a proxy server, the same twenty web requests are handled more efficiently. Only the first request to reach the server actually causes that web page to be retrieved, and only if it is not previously stored in the server's cache. When retrieved, that web page is sent back to the requesting client and is also cached on the proxy server's storage medium. The remaining 19 clients that requested that same web page are served instead from the proxy server's cache, thus avoiding unnecessary duplicated requests and delays from cyberspace.

Setting up a proxy server is relatively simple if your server supports proxy operation. However, maintaining the access control list can be a daunting task. While most proxy web servers can accept domain names, individual page names, or wildcard URL specifications, actual identification of inappropriate web sites and pages is like shooting at a moving target. As old, already-documented sites disappear, new ones appear. There are no public clearinghouses, per se, of sites or URLs that contain material that might qualify as "questionable" in the instructional setting. Additionally, the creation of such sites could possibly result in legal challenges. While some vendors market client-based products that will block access to objectionable sites, the updated lists they provide through subscription are designated to work with their product only.

A sampling of web sites that might qualify for access control lists might be obtained from several, public sources. Classified advertising in many popular computer magazines now includes Internet addresses. Internet yellow page listings sometimes contain references to "AO" (Adult Only) material. Usenet newsgroups that specialize in adult topics most likely will contain some references. Cybersurfing is another method of collecting URLs for an access control list. YAHOO can also provide some sources.

Proxy servers are not a cure-all. It is virtually impossible to document all sites and/or web pages that have material that might be considered inappropriate for the instructional setting. Proxy servers will not prevent "questionable" material from being downloaded as an E-mail message or as an attachment to an E-mail message, save for documents that have been reviewed and categorized as a virus-related operating system hazard. They cannot prevent objectionable material from being transmitted and received during a "chat" session. They cannot filter out material that has been placed on a web server behind the firewall and they cannot filter out material based solely on textual content.

Proxy servers can, however, provide a greater level of access control than that which exists with unrestricted browsing clients. Proxy servers can also make the process of accessing web pages more efficient for your agency. However, proxy servers are best used in conjunction with a strong Acceptable Use Policy that addresses what material is and is not appropriate to access, and what the consequences will be if the terms and conditions of the AUP are violated.

Technology deployment environments that we provide support new client/server architecture by assembling advanced open systems technologies, from local area networks and workstations to wide area networks. Services include the acquisition, deployment, disposal and refreshment of hardware and third party software assets. Field technicians are deployed regionally to provide on-site technical services as required; training and education services are also offered to ease transitions from one configuration to another.