WebSphere Application Server V7.0: Concepts ... - IBM Redbooks

5.2.2 Reverse proxies
The purpose of a reverse proxy is to intercept client requests, retrieve the
requested information from the content servers, and to deliver the content back
to the client. Caching proxies provide an additional layer of security hiding your
servers from the clients. The caching proxy products provided by WebSphere
Application Server V7.0 (namely, the (deprecated) Edge Components Caching
Proxy, the DMZ secure proxy, and the WebSphere proxy server) provide the
capability to store cacheable content in a local cache. Subsequent requests for
the same content can be served out of this cache. This allows faster response
and decreases the load on the servers as well as the internal network.
Edge proxy
The caching proxy as provided with WebSphere Application Server V7.0 with the
Edge Components can be configured as a reverse and as a forwarding proxy. In
this book, it is considered as a reverse proxy only. This proxy server supports the
following protocols: HTTP, HTTPs, FTP and Gopher.
Note: The caching proxy (provided with WebSphere Application Server V7.0
as part of the Edge Components) was declared deprecated in WebSphere
Application Server V6.1. For a current list of deprecated, stabilized, and
removed features in WebSphere Application Server V7.0, see the WebSphere
Information Center article Deprecated, stabilized, and removed features at the
following Web page:
http://publib.boulder.ibm.com/infocenter/wasinfo/v7r0/topic/com.ibm.
websphere.nd.multiplatform.doc/info/ae/ae/rmig_deprecationlist.html
DMZ secure proxy
The DMZ secure proxy server is a new feature of WebSphere Application Server
V7.0. Using it allows you to install proxy servers in the demilitarized zone (DMZ)
at a reduced security risk, compared to installing an application server to host a
proxy server. This is achieved by removing all the features from the application
server that are not required to provide the proxy functionality. For example, there
is no Web container or EJB container in a DMZ secure proxy.
The DMZ secure proxy server supports the following protocols with and without
encryption: HTTP and SIP. To implement a DMZ secure proxy you need to install
the DMZ secure proxy product and create a profile using the secureproxy profile
template.
Note: Do not mix up the DMZ secure proxy with the WebSphere Application
Server Proxy that you can configure in a network deployment manager cell.
Chapter 5. Topologies 135