Open Source Security: Reverse Proxies

In this video, Shawn Powers covers various open-source tools that can be used to boost server security. He’ll demonstrate each step of setting up a web server using Nginx to install a reverse proxy server. Although powerful, there are advantages and limitations to what a reverse proxy can do; one of the latter is the lack of application-level security.

Reverse proxy servers can be powerful tools for boosting server-level security, but they aren’t a panacea. Application-level security is an area where proxy servers don’t play a security role. Shawn will discuss how reverse proxies work, what advantages they can provide, and what risks they permit. In this video, he’ll use Nginx to install a reverse proxy server and walk viewers through each step in the process. Although Nginx is the vehicle of choice here, it’s not the only reverse proxy tool. Multiple other options are available in both open source and commercial configurations, such as Apache and Microsoft. Regardless of which tool is selected, Shawn will walk through some of the high-level advantages of reverse proxies that all sysadmins can leverage.

Start learning with CBT Nuggets:

[siluverukirankumar]

Good thing about this video is explaining with practical example

[Agnubis]

Really well explained, was very helpful. I just started to work in a sysops role and I think this is the basics of our infrastructure, so happy to finally understand better how it works!

[MrSulaimangd]

Great Video, can you do a series about HAproxy, and how to configure it for Apache and NGINX, thanks for the valuable knowledge.

[MaheshM-zzki]

Gr8
This is just a opinion. CBT nuggets should make a video series on open source tools and how to deploy them.

[Binary]

Where does Frederick get his DNS-records for blue, green and purple at home? I can't imagine the ISP or some other public DNS has the DNS-records for those pointing to the IP where the reverse proxy is. So does he use static records in hosts file or something?

[clarkkentgwapo]

How to point our multiple domain name in 1public ip? How we register in domain hosting? Can we use 1pub ip to link diffrent domain name?

[xanderthunder]

Great Video! Awesome style of teaching! Keep up the good work, +1 sub

[ThisCanNotBTheFuture]

If "blue", "purple", and "green" all resolve to the same IP address and port on the nginx proxy, then how does the proxy differentiate between the three requests?

[pcbuildfrance]

OK so this is all clear and easy from local network... but you have started this video with external access from internet through router. How does it work from outide ? How does it differentiates all those local servers when accessing from internet through single IP

[mactech]

great tutorial but I've got it working but NATed ports in front of firewall causing issues with particular open source software ie guacamole too hard to explain but data coming in through nat'ed port but not sure getting back out

[petertremblay]

Thank this is a very good explanation but how to do it with https?

[silentknight]

is this possible for external IPs? For example, ive got 2 VPS. One of them is the proxy server the other is a gaming server. Can I use this method to funnel/route clients through the proxy to my gaming server?

[skymantech]

great video on reverse proxy. thank you for posting this video.

[carlosafrias]

Amazing work!!! You cleared it all for me in just 25 minutes! Congrats keep up the good work!!

[lanceeilers]

good job, well explained love it !!!!

[ahmadpak]

Can you please do a video for https too.
I am having a issue that my proxy server stops responding after running ok for few hours. I can still ping the proxy and the other web servers but cannot access them through the websitename till I restart the proxy server

[cdoublejj]

How does it protect against DDOS if it's BEHIND the firewall? Your firewall wall would just flop over from all the requests and load

[julio]

Thanks! A proposed topic. Could you please explain how to reverse proxy extranet wss requests to intranet servers that are using http and not https?

[smokingaces]

This video was very helpful. Is it possible we can get an updated version of this video?

[oneplusonetwo]

souds alot like SNI, whats the difference?