401 Class 13: Reconstructing a Cloud Attack with Splunk - nataliabdallah/codefellows-ops-reading-notes GitHub Wiki

Home | README.md | Portfolio | |

Reading

What is a reverse proxy?

A reverse proxy is a proxy for a server instead of for a client. You probably have a proxy in place if you get internet from a major company like AT&T or Spectrum or Google Fiber etc. A proxy acts like a common room where everyone gather vs. allowing websites (servers) to access directly into your room.

image

A reverse proxy is the same thing but for the website. The website has its own living room everyone is invited to, but no one accesses their room with their IP address. Instead people connect to the IP address of the reverse Proxy

image

What are the benefits of a forward proxy?

  1. Load Balancing: it distribute incoming traffic evenly among the website's servers that it has to prevent overloading one server.
  2. Protection from attacks because the server's IP address isn't being disclosed, instead the reverse proxy's server IP is being disclosed.
  3. Global Server Load Balancing (GSLB): Big companies have servers all around the world, and the reverse proxy will direct clients to the closest servers in their area to make things smoother, faster, and controlled
  4. caching: the reverse proxy can cache content. Meaning it can temporarily save the connection that isn't so direct and required several servers to communicate before the connection was established. So it's like making a road, where there was no road before.
  5. SSL Encryption: a reverse proxy can decrypt all incoming requests and encrypt all outgoing responses, freeing up resources on the servers themselves, so the server doesn't have to do the encrypting/decrypting.

Explain the differences between a forward and a reverse proxy?

A forward proxy is one that the client uses and does the same thing as a reverse proxy except it's on the client's end.

A reverse proxy is one for the server/website companies and does the same thing as a forward proxy, except it's on the server's side.

Explain to your manager why your organization might benefit from implementing a reverse proxy?

a reverse proxy would add that layer of security to the company's servers that we've been stressing about. It would also increase the performance of the servers because the reverse proxy would be in charge of SSL encryption. And you would comply with several countries all at once because the reverse proxy will send the client to the server in their local area.

Bookmark and Review

A Conversation About REST API Operationalize Ransomware Detections Quickly and Easily with Splunk