The reverse proxy server is the middle connection point at the edge of the network. It receives the initial HTTP connection request, just like the actual endpoint.

　　It is essentially the traffic police of your network. The reverse agent acts as a gateway between the user and your application source server. When doing this, it handles all strategic management and traffic routes.

　　The reverse proxy runs through the following ways:

　　Receive user connection requests

　　Complete a TCP three -way handshake and terminate the initial connection

　　Connect the source server and forward the original request

　　Reverse proxy and positive proxy

　　In contrast, forwarding the proxy server is also located on the edge of your network, but adjust the traffic from the preset strategy in the shared network. In addition, it disguise the IP address of the client and prevent malicious passing traffic.

　　The forward agent is usually used by large organizations (such as universities and enterprises) internally, in order to::

　　Stop employees from accessing some websites

　　Monitor employees online activities

　　Prevent malicious traffic from reaching the source server

　　Improve user experience by cached external site content

　　How does CDN use reverse proxy

　　The content delivery network (CDN) is deployed on the edge of your network, using reverse proxy technology to process and spread traffic. The benefits of them include:

　　Content cache

　　The reverse proxy is placed in several geographical scattered positions, compressed and cached the mirror version of the website page in these positions. This helps the fast content delivery based on the geographical location of the client, helps to reduce the loading time of the page and improve your user experience.

　　Flow cleaning

　　The reverse proxy is located in front of the back -end server, which is very suitable to clean up before all the transmitted application flows are sent to the back -end server.

　　This provides:

　　DDOS relief -The traffic is distributed in the grid of the reverse proxy server during the DDOS attack to reduce its overall impact.

　　Web application security -reverse proxy is the ideal location of the web application firewall to clear the malicious packet (including bad robots and hackers).

　　IP mask

　　When passing the flow of the reverse proxy server, the connection is first terminated by the agent, and then reopen through the back -end server. From the perspective of your user, their requests are resolved through proxy IP.

　　Therefore, the IP address of your source server is blocked. This makes it more difficult for an attacker to obtain access to access and launch a refusal service attack directly on the IP.

　　Load balancing

　　Since the reverse proxy server is a gateway between the user and the application source server, they can determine where the HTTP session routes are. For applications using multiple back -end servers, this means that reverse proxy can effectively allocate loads, thereby improving the overall user experience and helping to ensure high availability.