89
Chapter 11
Security Options
Configuring SOCKS firewall integration
SOCKS is commonly used as a network firewall that allows hosts behind a SOCKS server to gain full access
to the Internet and prevents unauthorized access from the Internet to hosts inside the firewall.
Figure 11-1. illustrates how Traffic Server integrates into a SOCKS firewall.
Figure 11-1. The Traffic Server inside a firewall using a SOCKS server
When Traffic Server receives a request for content that is not in the cache or is stale, it must request the content
from the origin server. In a SOCKS configuration, instead of accessing the origin server directly, Traffic
Server goes through the SOCKS Server. The SOCKS server authorizes communication between Traffic
Server and the origin server, then relays the data to the origin server. The origin server then sends the content
back to Traffic Server through the SOCKS server. Traffic Server caches the content and sends it to the client.
Setting SOCKS configuration options
To configure your Traffic Server to use a SOCKS firewall, you must:
•
Enable the SOCKS option
•
Specify the IP address of your SOCKS server and the communication port
As an optional configuration step, you can specify the IP addresses of any origin servers that you want Traffic
Server to access directly without going through the SOCKS server.
You can set SOCKS configuration options by using Traffic Manager or by editing configuration files
manually. Both procedures are provided below.
To set SOCKS options from Traffic Manager:
1. Access Traffic Manager from your browser (refer to
Accessing Traffic Manager‚ on page 8
).
2. On the Configure tab, click the Security button.
Clients
Firewall
Internet
SOCKS server
Traffic Server
inside a
firewall
