Caching forwarding proxy

Dear reader,
Since Forefront TMG is eol. What must I use as a forwarding proxy to maintain website blocklists etc on windows 2012r2?
best regards,
Ruud Boersma
MCITP Enterprise administrator

Hi,
I don't know why and IMHO the Web Application Proxy in WS 2012 R2 has only very limited functionalities compared with Forefront TMG and UAG!
regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.galileocomputing.de/3276?GPP=MarcGrote

Similar Messages

Mac OS X Server Forward Proxy(Web Caching)...setup a website for the proxy???

My office is a Mac environment with a couple of windows pcs. To save on bandwidth i would like to setup a Mac OS X Snow leopard server with a web caching proxy, forward proxy. I read this link from apple
Server Admin 10.6 Help: Configuring Web Service Proxy Settings
i understand that to set this up i must enable it on my Mac Server and also on the clients(end user) web browser. What i don't understand is this part:
"When setting up a forward proxy, make sure you create and enable a website for the proxy. You might want to disable logging on the proxy site or configure the site to record its access log in a separate file from your other sites’ access logs. The site does not need to be on port 80 but setting up web clients is easier if its browsers use port 80 by default."
Create and enable a website for the proxy??? I don't understand, why do i need a website for web caching? Shouldn't the settings in the web browser direct the http requests to the mac server and it does the rest, what has a website got to do with it and what type of website?How?
Please help, thank you in advance

SL Server

Web forward proxy cache authentication

Greetings
just doing some testing. I enabled forward proxy on my web server. Clients can access the cache and can use proxy services.
How do I setup User based Authentication to access this proxy ? does some magic find my local LDAP or do I need to set something up in httpd.conf ?
insight and flames welcome

It's common for people to use the Apache Commons HttpClient library for these kinds of connections. It provides for both proxy and basic auth.

Forward Proxy

1) Is it possible to configure FMS as a forward proxy server. From my organization there is lot of incoming RTMP traffic from ted.com , amazon.com bbc etc, I want them to be cached locally. If not present it should be fetched from server and cached.
2) If yes, Is it possible to cache irrespective of application name that is requested for.

Bump - me too, love a suggestion from those in the know on this one.

Problem in creating a forward proxy

I want to create a forward proxy .
And the requirement is that whenever browser hits a URL then that request should first go to that proxy, I want to add a header to this request then the modified request should go back to browser through which it will reach the remote server.
I tried to implement this through running a port on which I will read the request coming from browser .But I do not know how will I send the modified request back to the browser.
I have written the following code:
Java Code:
import java.io.*;
import java.net.*;
public class ProxyApp {
    public static void main(String a[]) throws IOException , Exception
        ServerSocket proxySocket = new ServerSocket(7456);
        System.out.println("Socket created at port number.....7456.");
        System.out.println("waiting for browser to connect......");
        Socket browserSocket    = proxySocket.accept();
        System.out.println("request received from browser......");
        OutputStream browserOutputStream    = browserSocket.getOutputStream();
        InputStream browserInputStream      = browserSocket.getInputStream();
        byte[]       b = new byte[1];
        StringBuffer buf = new StringBuffer();
        String       s ;
        for ( ; ; ) {
            int len ;
            len = browserInputStream.read(b, 0, 1);
            if ( len == -1 ) {
                break ;
            s = new String( b );
            buf.append( s );
            if ( b[0] != '\n' ) {
                continue ;
            break ;
        String bufferedData = buf.toString();
        System.out.println("browser requested......"+bufferedData);
        int start, end ;
        start = bufferedData.indexOf( ' ' ) + 1;
        while ( bufferedData.charAt(start) == ' ' ) {
            start++ ;
        end   = bufferedData.indexOf( ' ', start );
        String urlString = bufferedData.substring( start, end );
        System.out.println("browser requested..urlString...."+urlString);
         /*******************reading from server********************************/
        URL url = new URL(urlString);
        URLConnection connection = url.openConnection();
        connection.setDoOutput(true);
        OutputStream remoteOutputStream = connection.getOutputStream();
        System.out.println("sent to remote......"+bufferedData);
        remoteOutputStream.write(bufferedData.getBytes());
        remoteOutputStream.flush();
        remoteOutputStream.close();
        System.out.println("Data written to remote server...");
        InputStream remoteInputStream   = connection.getInputStream();
        byte[]       b1 = new byte[1];
        StringBuffer buf1 = new StringBuffer();
        String       s1 ;
        for ( ; ; ) {
            int len ;
            len = remoteInputStream.read(b1, 0, 1);
            if ( len == -1 ) {
                break ;
            s1 = new String( b1 );
            buf1.append( s1 );
            if ( b1[0] != '\n' ) {
                continue ;
            break ;
        String bufferedData1 = buf1.toString();
        System.out.println("Data read from remote server...bufferedData1..."+bufferedData1);
        browserOutputStream.write(bufferedData1.getBytes());
        browserOutputStream.flush();
        browserOutputStream.close();
        System.out.println("Data written to browser...");
        System.out.println("**************END********************");
}But while getting the input stream from url connection I get Socket Exception.
Please tell me what is wrong...
Please help me out!
Edited by: 967629 on Oct 25, 2012 4:48 AM

I want to create a forward proxy .
And the requirement is that whenever browser hits a URL then that request should first go to that proxy, I want to add a header to this request then the modified request should go back to browser through which it will reach the remote server.
I tried to implement this through running a port on which I will read the request coming from browser .But I do not know how will I send the modified request back to the browser.
I have written the following code:
Java Code:
import java.io.*;
import java.net.*;
public class ProxyApp {
    public static void main(String a[]) throws IOException , Exception
        ServerSocket proxySocket = new ServerSocket(7456);
        System.out.println("Socket created at port number.....7456.");
        System.out.println("waiting for browser to connect......");
        Socket browserSocket    = proxySocket.accept();
        System.out.println("request received from browser......");
        OutputStream browserOutputStream    = browserSocket.getOutputStream();
        InputStream browserInputStream      = browserSocket.getInputStream();
        byte[]       b = new byte[1];
        StringBuffer buf = new StringBuffer();
        String       s ;
        for ( ; ; ) {
            int len ;
            len = browserInputStream.read(b, 0, 1);
            if ( len == -1 ) {
                break ;
            s = new String( b );
            buf.append( s );
            if ( b[0] != '\n' ) {
                continue ;
            break ;
        String bufferedData = buf.toString();
        System.out.println("browser requested......"+bufferedData);
        int start, end ;
        start = bufferedData.indexOf( ' ' ) + 1;
        while ( bufferedData.charAt(start) == ' ' ) {
            start++ ;
        end   = bufferedData.indexOf( ' ', start );
        String urlString = bufferedData.substring( start, end );
        System.out.println("browser requested..urlString...."+urlString);
         /*******************reading from server********************************/
        URL url = new URL(urlString);
        URLConnection connection = url.openConnection();
        connection.setDoOutput(true);
        OutputStream remoteOutputStream = connection.getOutputStream();
        System.out.println("sent to remote......"+bufferedData);
        remoteOutputStream.write(bufferedData.getBytes());
        remoteOutputStream.flush();
        remoteOutputStream.close();
        System.out.println("Data written to remote server...");
        InputStream remoteInputStream   = connection.getInputStream();
        byte[]       b1 = new byte[1];
        StringBuffer buf1 = new StringBuffer();
        String       s1 ;
        for ( ; ; ) {
            int len ;
            len = remoteInputStream.read(b1, 0, 1);
            if ( len == -1 ) {
                break ;
            s1 = new String( b1 );
            buf1.append( s1 );
            if ( b1[0] != '\n' ) {
                continue ;
            break ;
        String bufferedData1 = buf1.toString();
        System.out.println("Data read from remote server...bufferedData1..."+bufferedData1);
        browserOutputStream.write(bufferedData1.getBytes());
        browserOutputStream.flush();
        browserOutputStream.close();
        System.out.println("Data written to browser...");
        System.out.println("**************END********************");
}But while getting the input stream from url connection I get Socket Exception.
Please tell me what is wrong...
Please help me out!
Edited by: 967629 on Oct 25, 2012 4:48 AM

How to use cache on Proxy service in OSB

Hi all,
I need to use cache on proxy service. I am new to OSB, I have searched for this on net but unable to find.
Please come up with some docs or links going through which I can achieve this.
Thanks,
Phani.

i assume you already checked the result caching feature which can be used on the business service?
http://docs.oracle.com/cd/E14571_01/doc.1111/e15867/configuringandusingservices.htm#OSBAG170

Apache 2.2 21 forward Proxy 2 way SSL for weblogic server as a client

Hi All,
Currently, i am trying to implement a forward SSL proxy. The client will hit my apache server which in return will hit a IIS Server.
scenarios 1
client(weblogic)--*2 way SSL*Apache(forward proxy)*2 way SSL*-- IIS
If i were to implement 1 way ssl, i am able to see the content of the website.
client(weblogic) --- Apache(forward proxy) --- IIS
If i were to launch the web browser from the client machine (with the client certificate imported in the browser), i am able to view the content in the IIS. But if i were to simulate the connection from weblogic server, it just give me end of file exception (response contain no data) on the logs.
Below is my configuration
Listen 8080
<VirtualHost default:8080>
ServerName serverA
ErrorLog "logs/ssl_error_log"
CustomLog "logs/ssl_access_log" common
SSLProxyEngine On
SSLProxyMachineCertificateFile /certificate/servercert.cer
SSLProxyCACertificateFile /certificate/rootCA.cer
SSLProxyVerify require
SSLProxyVerifyDepth 10
ProxyRequests On
ProxyVia On
AllowConnect 12345
<Proxy *>
Order allow,deny
Allow from all
</Proxy>
</VirtualHost>
For 2 way SSL, will the client forward their client certificate to my apache proxy server and apache will on the client behalf forward the client certificate to the IIS server for authenication?
Or the SSL authenication still happen between the client (weblogic) and the end server (IIS) bypassing the proxy server.
Please help.

It is a domain wide setting. Can you not create a new domain? I do not think that you can handle it from web.xml. I have never seen such thing in web.xml.

Forward Proxy Authentication SAP Webservice Framework HELP!

Hi,
i have built as WS Client using the SAP Standalone Proxy. The client will utilize a forward proxy to access my Webservice. Unfortunately the documentation does only give information how to set the proxy address and port:
port._setProperty"javax.xml.rpc.http.proxyhost","proxy");
port._setProperty("javax.xml.rpc.http.proxyport","8080");
The is no hint how to set a proxy user and password? Does anybody know the answer to my question here?
Cheers,
Heiko

Hi Heiko,
Get SecurityProtocol as described <a href="http://help.sap.com/saphelp_nw04/helpdata/en/ab/c955e2e2d24a888127f211f2d5043f/frameset.htm">here</a> .
Use methid <i>public void addHeader(String key, String value)</i> to add HTTP header:
String authString = "username" + ":" + "password";
String auth = "Basic " + new sun.misc.BASE64Encoder().encode(authString.getBytes());
securityProtocol.addHeader("Proxy-Authorization", auth);
Best regards, Maksim Rashchynski.

Push Forward Proxy info within DHCP

Hello,
Is it possible to "push" Forward proxy info to clients using DHCP (with some option)?
Regards
Kostas

Kostas B wrote:
Hello,
Is it possible to "push" Forward proxy info to clients using DHCP (with some option)?
Regards
Kostas
It is possible to use my DHCP Option Code Utility to create the required DHCP option codes for advertising a proxy server. See http://en.wikipedia.org/wiki/WebProxy_AutodiscoveryProtocol
As per the above article, there are two methods for a client to 'discover' a proxy server, one is via a DHCP option code, as per your query, the other is via a standard URL formed based on the clients domain name, e.g. http://wpad.example.com/wpad.dat
Unfortunately, it is my impression that while it is possible to set a Mac OS X Server to provide both the DHCP option code, and to host a suitable file at the address specified via the DNS method, I don't believe any version of Mac OS X as a client will use either of these methods.
You can manually configure a Mac OS X client to look for the DNS address and then the wpad file in System Preferences -> Network -> Advanced… -> Proxies -> Automatic Proxy Configuration , you could in theory use Managed Preferences via Workgroup Manager as well. However both these methods cause problems for laptops since when out of the office they are unlikely to be able to access your proxy server, or want to.
So, these two methods on a Mac OS X Server may work with Windows clients (if Windows still supports these methods), but as far as I am aware are useless for Mac OS X clients.
For the benefit of others, a typical reason for using a proxy server, is to monitor network traffic especially web-browsing. An alternate approach that should work for Macs, would be to have a device in-between the LAN and the Internet so all web-browsing has to go through it regardless. This should therefore not need the Macs to be specifically configured.
As we all know, historically Apple has not addressed the needs of the Enterprise market and this could be considered an example of that.
For the benefit of everyone, here is an example DHCP option code as you would add it to your bootpd.plist file at /etc/bootpd.plist
<code><key>dhcpoption252</key>
<data>
aHR0cDovL3dwYWQuZXhhbXBsZS5jb20vd3BhZC5kYXQ=
</data>
The above uses the example, URL of http://wpad.example.com/wpad.dat obviously you need to use my utility to create a value that matches your domain and to have a web-server on your LAN that can host that file. The file then tells the client how to access the proxy server, again see the above wiki article and also this one http://en.wikipedia.org/wiki/Proxy_auto-config which tells you how to write the wpad.dat (aka. proxy.pac) file.
Update: I notice Mac OS X 10.6 now has a "Auto Proxy Discover" option, as Apple do not provide any real documentation for this level of detail, only they know for sure what this does. However it does sound like it might implement the DHCP and DNS methods of auto-discovery. This option was not present in Mac OS X 10.5. If this is what it does you do not need to turn on and fill in the "Automatic Proxy Configuration" option.

Adding Forward Proxy Blocked Hosts

We're using a 2008 XServe with OS X Server 10.5.2 running Apache 2.2.8.
Running DNS, wiki, blogs, groups all working fine.
We're trying to add a lot of Blocked Hosts to our Forward Proxy service with no luck. We have tried to add using comma separated and carriage return text files by dragging onto the Blocked Host Windows and manually copy/paste into the /etc/apache2/httpd.conf file after setting the correct permissions.
In all cases restarting the Web Service results in an error 100002 cannot start Web Service. We can restore functionality by deleting the entries in httpd.conf and killing the httpd processes before restarting the Web Service.
When we add a few manually the service works fine.
How can we add large numbers of blocked hosts without manually entering one at a time? Is there a size limit on httpd for apache?

Hi Antonio,
You brought up a good point, I neglected to mention the firewall. We are currently using a PIX 501 as the firewall/router but we would prefer not to use that as the traffic we are trying to block is internal (e.g.: discourage people from browsing sites they shouldn't be).
Also we may want to add hundreds of domains/IPs; right now were trying to do this using catchall keywords (mostly adult sites) but this is a cat-and-mouse game. I'd much rather be able to drag and drop a text file unless there is some limitation.

Lion server forward proxy

Hi,
is there an easy way to setup Lion server on a mac mini with the internal Apache web server as forward proxy? Bearing in mind that mac mini only has one ethernet port (I guess virtual ethernet port can be used if two interfaces are necessary)?
looking further ahaed - is there any benefit in running a proxy setup with enhanced content filtering capabilities or is the parental control through profile manager sufficient to fulfill that task?
best
-H

Apache's forward proxy doesn't require multiple interfaces, so that's not an issue, but IIRC you can't do this via the GUI. That means you're down to editing Apache's configuration files directly, in which case you can do anything that Apache can normally do.
As for the filtering, that's up to you - you'll need to decide on the amount of filtering paranoia you want to implement, and whether Parental Control provides sufficient coverage, whether you want to roll your own, or subscribe to a commercial solution.

Long time until Forward Proxy shows new content

Dear all,
I have a BorderManager server setup with version 3.9 SP2 and on the server we have HTTP Proxy server / Forward Proxy setup for a webserver somewhere in out network.
When we refresh the content on the webserver (flash content) it takes a very long time before this new content is show on the client side of the HTTP Proxy Server / Forward Proxy.
How can I tune the performance for this proxy?
Your suggestions are very much appreciated.
Rgds,
Zeger

On 12/09/2009 10:36 PM, zegerw wrote:
>
> Dear all,
>
> I have a BorderManager server setup with version 3.9 SP2 and on the
> server we have HTTP Proxy server / Forward Proxy setup for a webserver
> somewhere in out network.
>
> When we refresh the content on the webserver (flash content) it takes a
> very long time before this new content is show on the client side of the
> HTTP Proxy Server / Forward Proxy.
>
> How can I tune the performance for this proxy?
>
> Your suggestions are very much appreciated.
>
> Rgds,
> Zeger
>
>
What you have to do is to properly configure your webserver and use the
appropriate http headers. BM just will follow whatever the webserver
tells him to do.

Mac Mini as forward proxy server

I realize there are other questions out there regarding this issue, but I hadn't noticed anyone else looking to solve the same problem as I am, thus the new question. Apologies if it is viewed as redundant.
I'd like to set up my 2011 Mac Mini Server (running Mountain Lion) as a forward proxy. Most items I see on the web regarding this seem to want to use the forward proxy to filter websites and ports, I want to do just the opposite. I want to use the proxy server to bypass a restrictive firewall (of which I do not have control) using a high speed unfettered wireless connection. (So, internal NIC = Ethernet, external NIC = WiFi). I'm assuming that Apache can do this, I have limited (read - 0) experience with proxy setup and configuration - but given the right web links with a little context, I'll be OK. Can anyone point me in the right direction? At stake are connections to iCloud, TeamViewer, Google Drive, Windows Azure, submissions to the Apple App Store and Windows Live Marketplace, etc - so many of these connections do not occur on port 80 by default - which is why I need to open up more than just an HTTP proxy. Perhaps a transparent proxy would be a better choice? Thoughts?

From what I understand from your post, this may be easier for you to accomplish using either a VPN tunnel or an SSH tunnel. VPN can be configured using the Server application and is quite easy, SSH can be configured using "Remote Management" (I think) and then you'd just have to set up your client. VPN would tunnel all traffic and SSH would tunnel specific ports.

Servlet forward proxy

Hi all.
I'm trying to build a servlet which will act as a proxy between another system written in C++ and my J2EE applications. A browser client will go through the C++ app. down to my proxy.
Basically I want my proxy servlet to receive a HTTP POST, strip out some header data and re-POST the data to another servlet. The response will the travel the same way back through the proxy up to the C++ app.
The problem is that my proxy servlet and my J2EE applications won't be running on the same machine. Therefore I can't use the nice RequestDispatcher to forward to my other servlets or include them.
So, what to do?
I guess it's possible to collect data from my HttpServletRequest object in the proxy servlet and create a new POST and then write it on an outputStream to my other servlet. But is this the only way?
It's really important that my application receives a POST that looks the same as the one reaching the proxy.
I hope someone can give me a hint.
regards
Fredrik

Have your proxy servlet open a HttpURLConnection to the second servlet and use this connection to do the post.
Should work but I have never done it from a servlet.

Webstart doesn't forward proxy config to an applet?

Hello,
I was trying to get a JNLPAppletLauncher applet (signed) to call home through a web proxy.
Anyway, the suggestion in the unoffical FAQ ( http://lopica.sourceforge.net/faq.html#proxy-settings )
didn't work. For some reason proxyHost and proxyPort aren't forwarded from the Java webstart
control panel settings to the applet.
All the jar files that the applet needed were downloaded via the proxy, but the actual
applet itself didn't have its System properties set.
Presumably it should have, right?
I was able to get it to work though, using the com.sun.java.browser.net solution at
http://www.raditha.com/java/proxy.php .
Thanks
Doug

First, setting str = null causes the first pass
through paint() to crash with a nullPointerException.
Your java console should be showing you that much.
Some browers (e.g. Mozilla) requiring adding the java
console seperately (it should be easy to
find/download with a web search).
Second, your javascript call to the Applet's method
will continue on and attempt to re-load the html page
(resetting everything, including the Applet). To stop
this, add a "return false" after the
call.<input type="submit" value="Calculate"
onclick="submitToApplet(this.form);return
false;">
Thanks a lot-I've made the suggested changes and now I can see something. But still the variable str is not getting the intended assigned value passed from the Javascript.
Changed applet...
public class CalculateApplet1 extends JApplet {
     String str = "else";
     public void test( String arr )
          str = arr;
     public void paint( Graphics g ) {
          if( str.equals( "test" ) )
               g.drawString( "abhi", 25, 25 );
          else
               g.drawString( str, 25, 25 );
}Output-else! For testing purpose, I'm passing a string "test" from Javascript i.e. str should be equal to "test"

Caching forwarding proxy

Similar Messages

Maybe you are looking for