Date: Tue, 8 Nov 1994 10:27:51 +0100
Message-Id: <199411080850.AA07365@Woozle.GeNUA.DE>
From: Bernhard Schneck <Bernhard.Schneck@genua.de>
To: Multiple recipients of list <www-proxy@www0.cern.ch>
Subject: Re: Chaining proxies, was Re: Handbook On Running A WWW Service
In message <9411072154.AA27061@neon>you write:
>
> > Client: NCSA Mosaic for the X Window System/2.4 libwww/2.12 modified
> > via proxy gateway CERN-HTTPD/3.0 via proxy gateway CERN-HTTPD/3.0
>
> These are from people running double firewalls.
Well, I'm not really using a double firewall, but still use two httpds:
- an internal caching server, serving all private documents of the site
and forwarding non-local requests to the rest of the world. All
internal browsers proxy to this box.
- an external server with all public documents of the site.
- the TIS plug-gw on the firewall, connecting the internal server to
the external server (but not in the opposite direction).
This may get easier now with the new TIS http proxy, but I havn't
evaluated it. The nice approach is that there is a very good
separation between private and public documents ...
\Bernhard.