Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 7056
  • Last Modified:

How to setup a Squid Reverse Proxy

Hello,

I have a website (windows IIS) that is very busy and I wanted to setup an SQUID Reverse proxy to offload some of the traffic. I wanted to know what are the best practices, and how to setup it up on a Linux (CentOS)?

Thanks in advance,

Patrick B.
 
0
blueglacier
Asked:
blueglacier
  • 3
  • 2
2 Solutions
 
TintinCommented:
Firstly, my recommendation would be to *NOT* use squid as a reverse proxy.  I had a very large client using Squid as a reverse proxy for around 10 websites and the limitations around SSL and redirections/rewriting became apparent very early on.

Using Apache in reverse proxy mode is much more efficient and SSL management is so much easier than you can do in squid.
0
 
ravenplCommented:
Tintin: I'm suprised with Your experience. On the other side of the world, I know popular portals that are accelerated(and protected) by squid farms - works fine.
http://sial.org/howto/squid/#s3.2 # for one host
http://www.option-c.com/xwiki/Squid_Reverse_Proxy # for host based
0
 
TintinCommented:
If you have a very basic and straight forward reverse proxy environment, then squid will be just fine.  However, once you start getting into more complex requirements such as rewrite/redirections, SSL bridging, URL/HTML URL mapping etc, then Apache is far superior.

The current stable release of squid is 2.6, and its SSL support is limited compared to Apache.
0
A proven path to a career in data science

At Springboard, we know how to get you a job in data science. With Springboard’s Data Science Career Track, you’ll master data science  with a curriculum built by industry experts. You’ll work on real projects, and get 1-on-1 mentorship from a data scientist.

 
blueglacierAuthor Commented:
Tintin that sounds interesting.  So instead of setting up  squid, I would replace it with Apache.  Is this what you are suggesting?

 [internet]--[Firewall]--[Apache(as reverse proxy)]--[IIS(wtih ASP.NET Application]

Also, the only problems you found is with SSL right. So only the part that handles payment procesing will be affected?

Do you have any examples/docs on this setup.

Thanks,

Patrick
PS: Thanks for the feedback Ravenpl I am checking those links today.
0
 
TintinCommented:
My preference is for Apache, but Squid is still OK if you don't have complex rules as described in my previous posts.  Additionally, squid will probably be a bit better if the main thing you want to use it for is a reverse proxy cache, although the mod_cache Apache module was vastly improved in Apache 2.2

For info on Reverse Proxy Apache tutorial, see:

http://www.serverwatch.com/tutorials/article.php/3290851

Note that this is for Apache 2.0.  There are some improvements/enhancements in Apache 2.2, but it all depends on your exact requirements.  If you have just a very straight forward environment, then the details in this tutorial will be just fine.

0
 
blueglacierAuthor Commented:
Thanks for the help.

Patrick
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now