0
votes
2answers
53 views

nginx reverse proxy or squid forward proxy (transparent)?

I have to implement a proxy server in front of a running production server to route and secure the production-server. On the production server multiple node.js applications listening on different ...
0
votes
0answers
126 views

nginx proxypass squid

I'm trying to run squid server behind nginx. my sample configuration : location ~* ^/get/(.*) { proxy_pass http://ip:3128; proxy_set_header Host evenstatichostnamefortest.com; ...
1
vote
1answer
219 views

How to force outgoing requests from webserver/PHP through squid proxy on same machine?

I have a Debian Squeeze VPS configured as an nginx web server. For security reasons I have blocked all outgoing connections except those to the Debian update servers (this stops bad scripts from ...
2
votes
3answers
420 views

Access internally hosted IIS with Windows authentication from Internet

I have .NET web application running on IIS behind the firewall. Application is using Windows authentication (NTLM) to authenticate users. I need to make this application accessible from Internet so ...
0
votes
0answers
147 views

FreeRadius with either Nginx or Squid

I am looking to use FreeRadius with either Nginx or Squid to auth users access to my proxy server however i do not want users to have a username and password i want to setup my proxy server so that it ...
0
votes
2answers
349 views

How to direct reverse proxy requests using wildcard vhosts

I'm interested in running a reverse proxy with 2-3 virtual machines behind it. Each internal server will run multiple virtual hosts, and rather than manually configuring each individual vhost on the ...
3
votes
1answer
3k views

Can nginx listen on port 80, but send upstream to backend using SSL on 443?

For PCI compliance, my application is forced to use a secure/encrypted connection between the reverse proxy server and backend app server, whereas the connection coming into the reverse proxy is on ...
0
votes
2answers
227 views

Using an upstream proxy only for certain URLs

I'm configuring a transparent proxy for my home, and I want certain URLs to go through an upstream proxy. I'm currently using Squid, but I'm open to other suggestions. I've looked at Squid's ...
1
vote
1answer
571 views

Lightest IP geolocation technology for static site?

I run a site that is behind a Squid reverse proxy which delivers most of the content cached (including html, not only images, etc.). I need to show a different content for our users located in the US. ...
1
vote
2answers
509 views

nginx using up ip_conntrack a lot faster than squid .. why?

I'm working on scaling up a front-end proxy server, and up until yesterday I was using Squid as the reverse-proxy (even though basically nothing was being cached, i.e. Squid was proxying only). Today ...
1
vote
1answer
646 views

faster ( squid + apache httpd + apache tomcat )

We have a production setup where we have Squid in the front(caching images, js, css, etc) Apache httpd in the middle(prefork + mod_rewrite + mod_jk/AJP + mod_deflate + mod_php(few php pages)) ...
0
votes
1answer
178 views

Extending/modifying proxy functionality (concerning the cookie header)?

a few months ago I wrote a proxy in python that modifies certain request. It added a cookie header towards the requested webpage and removed that header on the way back. However I lost this code due ...
2
votes
1answer
2k views

Multi-threaded alternative to tinyproxy?

Are there any free, light-weight, single-process (e.g. multi-threaded, asyncore) HTTP forward proxy software? Tinyproxy works great, but it uses multiple processes like (Apache's) prefork. HAProxy ...
2
votes
3answers
936 views

How do you cache web pages with a personalized header using caching reverse proxy such as Squid, Varnish, or Nginx

Pretty much every page of my website is dynamically generated. However they don't change that frequently (kinda similar to a forum page). So I'd like to cache them using a caching reverse proxy such ...
4
votes
7answers
2k views

Scaling large file downloads?

We currently deliver large (1GB+) files via a single Apache server, but our Apache server is extremely disk-IO-bound and we need to scale. My first idea was to simply duplicate this Apache server, ...