Difference Between a DMZ Server & a Reverse Proxy
Difference Between a DMZ Server & a Reverse Proxy
Both DMZ and reverse proxy servers protect Web servers from attackers. DMZ in computer security is an area between the organization's local network and the outside world. Similarly, a reverse proxy server is a proxy server placed at the Web server end instead of the client end, and it intervenes between the Internet users and the Web servers.
Architecture
DMZ is separate from the internal network and placed between the internal network and the Internet. Some setups have only one firewall between the DMZ and the Internet, while others add another firewall between the DMZ and internal network.
Reverse proxy server can be placed in the internal network or in the DMZ to provide an additional security layer.
Operation
DMZ provides security by keeping the Web server and email servers out of the internal network.
On the other hand, reverse proxy servers provide security by masking internal network addresses and showing the users only one IP address. The proxy server handles the internal URL mapping, which the outside users are unaware of. Therefore, Internet users have direct access to web servers in the DMZ. On the other hand, users never have access to the Web servers when you implement reverse proxy.
Performance
Reverse proxy servers can also be used for caching purposes. Caching keeps some static website content such as Javascripts, Cascading Style Sheets and Images on the proxy servers. This way, it does not need to fetch this information from the original servers every time. However,
DMZ only separates Web servers that youdefine from the internal network and does not add any additional value in terms of performance.
Regulations
Government regulations for the credit card industry requires that Internet users do not have direct access to the cardholder information, which cannot be fulfilled by implementing DMZ alone. A reverse proxy server, however, fulfills this requirement by creating a bubble around the data servers and blocking direct access to sensitive data.
0 Response to "Difference Between a DMZ Server & a Reverse Proxy"
Post a Comment