Secure Computing SSL Scanner Manuel d'utilisateur télécharger pdf (Page 16)

Web Server Acceleration Example

Internet

Users

Web Servers

Blue Coat

Server Accelerator

With SSL

100s of HTTPS

Connections Terminate

At Accelerator

Intranet

Firewall

Core Router

Web Server Cluster

www.example.com

Server

Load

Balancer

Figure 13 – Web Server Acceleration Example

Figure 13 shows a typical conﬁguration in a web server (content provider) application, in this case for www.example.com.

Blue Coat ProxySG appliances front-end the example.com web server farm and ofﬂoad the origin servers from both object

delivery and SSL session processing. Object requests (for both HTTP and HTTPS) are directed to the ProxySG appliance

through a Layer 4 switch. For cleartext HTTP requests, the appliance immediately delivers the objects stored in cache to the

client. The appliance also retrieves objects not in cache from the origin server, caches them for future delivery, and delivers

them to the client.

For SSL-encrypted HTTPS requests, the ProxySG appliance performs full SSL processing, from setting up the SSL session

to encrypting all the outbound data. The Blue Coat appliance processes all the SSL requests, and the origin server is not

burdened with this processing. Requests that the ProxySG does not cache, such as stock quotes, and bank account balances,

are sent to the origin server for retrieval. The appliance retrieves this information and, without caching it, encrypts the data

and sends it on to the requesting browser. The appliance can also implement policy on any intercepted trafﬁc. Note that the

channel between the Blue Coat ProxySG and the origin server can be conﬁgured for either SSL or cleartext trafﬁc.

Technology Primer: Secure Sockets Layer (SSL)

1 2 ... 11 12 13 14 15 16 17 18 19 20 21 22

Pas de commentaire

Secure Computing SSL Scanner Manuel d'utilisateur Page 16