Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I try to install a proxy server on my network, using squid. My network architecture is something like this: ISP <- server 1 - or router - (with static IP and CoovaChilli on it) <- LAN.

At first, I would like to install my squid on a different machine than server 1. My question is: Do I need to put my proxy server between server 1 and LAN, like here:

ISP <- server 1 - or router - (with static IP and CoovaChilli on it) <- proxy server 2 <- LAN,

or is ok to put server 2 in LAN?

Thanks in advance!

share|improve this question
Since when has 'proxy' been an acronym? – womble Mar 26 '12 at 8:24
@womble Thanks for correction. Already done!:) – artaxerxe Mar 26 '12 at 8:31
up vote 2 down vote accepted

Yes, it's OK, but you'll have to setup properly the routes on your router/server 1, so that all outgoing traffic is blocked, except for traffic coming from your proxy server.

That way, your users will have to go through the proxy to leave your LAN and access the Internet.

If you don't do that, your users will be able to access the wide wild web without traversing the proxy by simply disabling their proxy settings.

Also, don't forget to properly route/block incoming traffic, but you most likely already know that.

Another way to go at it is to put your router and LAN in two separate nets, and have the proxy server direct all requests to your router :

ISP <- Router/SRV 1 in Subnet 1 <-> proxy (2 interfaces, Subnet 1 and Subnet 2) <-> LAN in Subnet2

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.