SQUID PROXY SERVER
A proxy server is a system or router that provides a gateway between users and the internet.
Therefore, it helps prevent cyber attackers from entering a private network. It is a server, referred to as
an “intermediary” because it goes between end-users and the web pages they visit online.
When a computer connects to the internet, it uses an IP address. This is similar to your home’s street
address, telling incoming data where to go and marking outgoing data with a return address for other
devices to authenticate. A proxy server is essentially a computer on the internet that has an IP address
of its own.
Proxy Servers and Network Security
Proxies provide a valuable layer of security for your computer. They can be set up as web filters or
firewalls, protecting your computer from internet threats like malware.
This extra security is also valuable when coupled with a secure web gateway or other email security
products. This way, you can filter traffic according to its level of safety or how much traffic your
network—or individual computers—can handle.
How to use a proxy? Some people use proxies for personal purposes, such as hiding their location while
watching movies online, for example. For a company, however, they can be used to accomplish several
key tasks such as:
• Improve security
• Secure employees’ internet activity from people trying to snoop on them
• Balance internet traffic to prevent crashes
• Control the websites employees and staff access in the office
• Save bandwidth by caching files or compressing incoming traffic
Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces
bandwidth and improves response times by caching and reusing frequently-requested web
pages. Squid has extensive access controls and makes a great server accelerator. It runs on
most available operating systems, including Windows and is licensed under the GNU GPL.
Making the most of your Internet Connection
Squid is used by hundreds of Internet Providers world-wide to provide their users with the best
possible web access. Squid optimises the data flow between client and server to improve
performance and caches frequently-used content to save bandwidth. Squid can also route
content requests to servers in a wide variety of ways to build cache server hierarchies which
optimise network throughput.
Benefits of a Proxy Server
Proxies come with several benefits that can give your business an advantage:
1. Enhanced security:
Can act like a firewall between your systems and the internet. Without them, hackers have easy access to your IP
address, which they can use to infiltrate your computer or network.
2. Private browsing, watching, listening, and shopping:
Use different proxies to help you avoid getting inundated with unwanted ads or the collection of IP-specific data.
With a proxy, site browsing is well-protected and impossible to track.
3. Access to location-specific content:
You can designate a proxy server with an address associated with another country. You can, in effect, make it look
like you are in that country and gain full access to all the content computers in that country are allowed to interact
with. For example, the technology can allow you to open location-restricted websites by using local IP addresses of
the location you want to appear to be in.
4. Prevent employees from browsing inappropriate or distracting sites:
You can use it to block access to websites that run contrary to your organization’s principles. Also, you can block sites
that typically end up distracting employees from important tasks. Some organizations block social media sites like
Facebook and others to remove time-wasting temptations.
Forward Proxy
A forward proxy sits in front of clients and is used to get data to groups of users within an internal network.
When a request is sent, the proxy server examines it to decide whether it should proceed with making a
connection.
A forward proxy is best suited for internal networks that need a single point of entry. It provides IP address
security for those in the network and allows for straightforward administrative control. However, a forward
proxy may limit an organization’s ability to cater to the needs of individual end-users.
Transparent Proxy
A transparent proxy can give users an experience identical to what they would have if they were using their
home computer. In that way, it is “transparent.” They can also be “forced” on users, meaning they are connected
without knowing it.
Transparent proxies are well-suited for companies that want to make use of a proxy without making employees
aware they are using one. It carries the advantage of providing a seamless user experience. On the other hand,
transparent proxies are more susceptible to certain security threats, such as SYN-flood denial-of-service attacks.
SSL Proxy
A secure sockets layer (SSL) proxy provides decryption between the client and the server. As the data is encrypted in
both directions, the proxy hides its existence from both the client and the server.
These proxies are best suited for organizations that need enhanced protection against threats that the SSL protocol
reveals and stops. Because Google prefers servers that use SSL, an SSL proxy, when used in connection with a
website, may help its search engine ranking. On the downside, content encrypted on an SSL proxy cannot be
cached, so when visiting websites multiple times, you may experience slower performance than you would
otherwise.
Reverse Proxy
Unlike a forward proxy, which sits in front of clients, a reverse proxy is positioned in front of web servers and
forwards requests from a browser to the web servers. It works by intercepting requests from the user at the
network edge of the web server. It then sends the requests to and receives replies from the origin server.
Reverse proxies are a strong option for popular websites that need to balance the load of many incoming requests.
They can help an organization reduce bandwidth load because they act like another web server managing incoming
requests. The downside is reverse proxies can potentially expose the HTTP server architecture if an attacker is able
to penetrate it. This means network administrators may have to beef up or reposition their firewall if they are using
a reverse proxy.
