proxy server

(redirected from SSL Proxy)
Also found in: Dictionary.

proxy server

Computing a computer that acts as an intermediary between a client machine and a server, caching information to save access time

proxy server

[′präk·sē ‚sər·vər]
(computer science)
Software for caching and filtering Web content to reduce network traffic on intranets, and for increasing security by filtering content and restricting access.

Proxy Server

(software, security)
Microsoft's proxy server and proxy gateway, designed to provide extensible firewall and network security. Proxy Server is part of BackOffice.

proxy server

(programming, World-Wide Web)
A process providing a cache of items available on other servers which are presumably slower or more expensive to access.

This term is used particularly for a World-Wide Web server which accepts URLs with a special prefix. When it receives a request for such a URL, it strips off the prefix and looks for the resulting URL in its local cache. If found, it returns the document immediately, otherwise it fetches it from the remote server, saves a copy in the cache and returns it to the requester. The cache will usually have an expiry algorithm which flushes documents according to their age, size and access history.

Compare proxy gateway.

proxy server

Also called a "proxy," it is a computer system or router that breaks the connection between sender and receiver. Functioning as a relay between client and server, proxy servers help prevent an attacker from invading a private network and are one of several tools used to build a firewall.

The word proxy means "to act on behalf of another," and a proxy server acts on behalf of the user. All requests from clients to the Internet go to the proxy server first. The proxy evaluates the request, and if allowed, re-establishes it on the outbound side to the Internet. Likewise, responses from the Internet go to the proxy server to be evaluated. The proxy then relays the message to the client. Both client and server think they are communicating with one another, but, in fact, are dealing only with the proxy.

Address Translation and Caching
The proxy server is a dual-homed host with two network interfaces and two IP addresses. The IP address on the outbound side of the proxy is the one the Internet sees, and the address of the machine making the request is hidden to the outside world. Proxies are often used in conjunction with network address translation (NAT), which hides all the IP addresses of the client machines on the internal network. Proxy servers may also cache Web pages, so that the next request for that same page can be obtained much faster locally. See NAT and proxy cache.

Other Proxies
Anonymous proxy servers let users surf the Web and keep their IP address private (see anonymous proxy). Although not specifically called a proxy, Internet e-mail (SMTP) is a similar concept because it forwards mail. Messages are not sent directly from client to client without going through the mail server. Likewise, the Internet's Usenet news system (NNTP) forwards messages to neighboring servers. See firewall.

Application Level and Circuit Level
Proxy servers are available for common Internet services; for example, an HTTP proxy is used for Web access; an FTP proxy is used for file transfers. Such proxies are called "application-level" proxies or "application-level gateways," because they are dedicated to a particular application and protocol and are aware of the content of the packets being sent. A generic proxy, called a "circuit-level" proxy, supports multiple applications. For example, SOCKS is IP-based circuit-level proxy server software that supports TCP and UDP applications (see SOCKS).

Forward and Reverse Proxies
In this definition, the proxy servers are used to hide the details of the clients from the servers and are thus known as "forward proxies." However, they can also reside at the website to hide the details of the servers from the clients (see reverse proxy).


A Proxy Server in a LAN
In this LAN server illustration, the proxy server sits between two routers in what is known as a "demilitarized zone." See DMZ.
References in periodicals archive ?
Introducing the Transparent SSL Proxy software solution, tuned and optimized for EZchip TILE -Gx (TM) processor s and featur ing unmatched throughput and SSL handshake performance :
Lunarline's presentation will demonstrate how an end user can use an SSL proxy to decrypt and reverse engineer the HTTP API.
According to the company, Blue Coat's SSL proxy enables companies to stop malware, including viruses and spyware, from infiltrating their networks through encrypted traffic.
Our SSL proxy solution now enables enterprises to gain visibility and control over what has previously been invisible to them and protect against serious business risks.
The Netronome SSL Inspector Appliance is the industry's highest performance transparent SSL proxy and allows security appliances, in both government and enterprise networks to detect threats inside SSL traffic.
The capability also requires a license for Blue Coat's recently introduced SSL proxy option for ProxySG.
With the new version of the SSL Inspector Appliance, the industry's highest-performance transparent SSL proxy now addresses the issues that make these threats possible by offering:
New SSL Proxy Protects Against Encrypted Viruses, Spyware, Phishing and Rogue Applications While Boosting Performance
Netronome is also exhibiting at the RSA conference and will be demonstrating the Netronome SSL Inspector[TM], the industry's highest-performance transparent SSL proxy.
At today's Network Computing quarterly launch at SunNetwork Berlin, Sun unveiled the first multi-architecture blade computing platform, available with UltraSPARC(R), x86, SSL Proxy and content load balancing blades.
Using Blue Coat's SSL proxy, Hynix can gain visibility into SSL encrypted traffic between internal users and external sites.
The Sun Fire B10p SSL Proxy blade server, when combined with the Sun Fire B10n Content Load Balancing blade server, can enable better utilisation from server resources, as well as deliver fast, reliable responses to Web requests at low costs.