Views

InformationTechnology:Web:Proxy

Contents

Navigation



Related categories

Portal · Tools · Flash · Java ·


About this page

We apologize for the little information we provide, this page is still under construction. Please stay tuned.

Image:Construction_worker.gif

Web proxy resources



Reverse Proxies



Web-content filtering

Squid is a caching Web proxy supporting, among other protocols, HTTP/HTTPS and FTP.Through content-caching,i.e. serving data locally, Squid allows reduction of bandwidth and faster download speeds with frequently-used content.
The SquidGuard URL redirector works with Squid for blocking unwanted web contenths through use of blacklists.
Compared to SquidGuard, DansGuardian, a web-content filter working with Squid, allows blocking and filtering the actual content of pages based on phrase matching, PICS and URL filtering, beside "standard" filtering based on a banned-site list. While the "standard" web filters such as Cyber Patrol, squidGuard and Net Nanny rely on large bad-site lists. By contrast, content-filtering checks every accessed page for 'bad' subjects it if it's not suitable. More information on installing and configuring DansGuardian is available here. DansGuardian features as companion tools:
DansGuardian is included in the SOHO-grade SmoothWall Express open-source network firewall.
Privoxy, another content-filtering is a non-caching web proxy with content-filtering capabilities like web-page rewrite, HTTP-cookie management, access control, and ad/banners/pop-up removal.

URL rewriting with Apache

  • The mod_rewrite module - a beginner's guide to URL gewriting [1]
  • The mod_rewrite Cheat Sheet [2]
  • Apache 1.3 URL Rewriting Guide [3]
  • Apache 2.0 URL Rewriting Guide [4]


Microsoft RSProxy applet

Many web applications running on Microsoft IIS server take advantage of the functionality offered by the Microsoft RSProxy applet - namely remote execution of scripts using a Microsoft proprietary mechanism. Incidentally the Cisco Call Manager web-based administration interface is heavily using the RSProxy mechanism. As a result of the RSProxy mechanism the remote-proxying with Apache of the Cisco CCM interface does not work properly.

References:
  • Using Remote Scripting [5]
  • Remote Scripting [6]


Reverse proxying a Tomcat server - mod_jk and the AJP protocol

Tomcat does not have the rich set of web-server-specific functions one can find in Apache, nor it has the advanced security mechanisms and URL filtering facilities that Apache has. The Apache Java Protocol (AJP) allows an Apache server to act as a front-end for a Tomcat server, using an AJP-specific reverse-proxying mechanism implemented by mod_jk using the concept of AJP workers However, it has been noticed that firewalls might disconnect the AJP tunnel between Apache and Tomcat due to inactivity timeouts. To send keep-alives the interval is being controlled by sysctl parameter "net.ipv4.tcp_keepalive_time" in /etc/sysctl.conf On the mod_jk configuration side add "worker.apg.socket_keepalive=1" and "worker.apg.connection_pool_timeout=30" to the worker configuration Once done modifying /etc/sysctl.conf issue the following two commands to commit and activate changes:
# /sbin/sysctl .p
# /sbin/sysctl -w net.ipv4.route.flush=1
Also, it has been noticed that cookie path problems might arise if the URL mount point on APache side is different of the one on Tomcat side. To solve the cookie issue it is recommended to set an "empty" cookie path on Tomcat side.

References:
  • Tomcat Connector configuration [7]
  • Tomcat connector - Sharing JSessions (setting an empty cookie path) [8]
  • Fine-Tuning Your Linux Server [9]
  • Connecting Apache's Web Server to Multiple Instances of Tomcat [10]


Other resources

  • Pound reverse proxy and load-balancer - example setup for OpenACS, tutorial and overview
  • Delegate - multiplatform Open Source ALG or proxy server [11]
  • The mod_line_edit - general-purpose (no proxy) filter for text documents [12]
  • Free (as in freedom) proxy servers on internet [13]
  • Slashdot's Software Setup - based on Apache and Pound-powered reverse-proxying and load-balancing