Re: [squid-users] advice for proxy architecture

On 14.01 11:49, lderuaz@free.fr wrote:
> Here is my squid architecture :
> I am using Squid Version 2.5.STABLE7 and Samba 3.0.9 on Red Hat ES3.0.
> I've got two internal proxies on which are performed the NLTM
> authentication of the users. There are configured to forward request to
> some remote proxies (in other sites of the company), or to two redundant
> external proxies used for internet access.
>
> I am studying how to optimise my proxy architecture, and am looking for
> advices.
>
> Based on your own experience, is it better to keep the architecture 1 :
>
> Client <--> internal proxies <--> FW <--> External proxies <--> Internet
>
> or the architecture 2
>
> Client <--> internal proxies <--> FW <--> Internet

the second one is easier and you won't get any benefit of the external
proxy.

> Do find some particular advantages to have additionnal external proxies
> (in term of performances, security, ......)

no.

> or do you think that having only two internal proxies for all trafic (remote
> site, internet traffic) is sufficient and not risky ?

yes.

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Christian Science Programming: "Let God Debug It!".