Reverse Proxies
One place for TLS, routing, caching, compression and rate limiting.
3 to work through
-
intermediate
A page is identical for all users except a small personalised header. How do you cache it?
2 min answer -
advanced
A discussion platform puts a caching reverse proxy in front of its application. Anonymous traffic gets much faster; logged-in users see no improvement and occasionally see another user's content. What went wrong?
2 min answer -
advanced
Fastly began a software deployment on 12 May 2021 that ran for nearly a month without incident. On 8 June a customer pushed a valid configuration change and 85% of the network started returning errors. What class of risk does that expose, and what does it mean for deployment safety gates?
3 min answer
5 terms in this topic
Cache Key Completeness
The requirement that a cache key capture every input varying the response - the property whose violation turns a caching bug into a data leak.
patternOrigin Shield
An intermediate caching tier between edge caches and the origin that collapses many simultaneous misses into a single origin fetch - which is what ma…
conceptProxy Buffering
Whether a reverse proxy accumulates a response before forwarding it, which protects the backend from slow clients but breaks streaming.
patternReverse Proxy in Practice
A server that sits in front of origins and terminates, caches, routes and protects — the cheapest place to solve several problems at once.
conceptX-Forwarded-For
The header chain recording original client addresses through a series of proxies — and a value that must never be trusted without knowing the topology.
Neighbouring topics
Networking
General material on the network path underneath an architecture.
TCP/IP
Handshakes, congestion control, head-of-line blocking and connection reuse.
HTTP/1.1, HTTP/2 & HTTP/3
Multiplexing, prioritisation and the transport each is built on.
DNS
Resolution, TTL behaviour, traffic steering and failover latency.
TLS & Certificates
Encryption, integrity, authentication, termination points and expiry.
Layer 4 vs Layer 7
Connection-level versus request-level balancing, and what each unlocks.
Content Delivery Networks
Edge caching, origin offload, spike absorption and dynamic content.
Firewalls & Security Groups
Default-deny, stateful rules, and restricting egress as well as ingress.
NAT & Egress
Outbound-only connectivity, its per-gigabyte cost and its zone binding.
VPC Design
Address planning, peering and the ranges you can never resize.
Subnetting
Tiering, zone binding, and sizing for an address-hungry platform.
Routing & BGP
How traffic finds you, anycast, and route withdrawal as a failure mode.
Service Mesh Networking
Sidecar proxies supplying mTLS, retries and traffic policy.
WebSockets & Realtime
Persistent bidirectional connections and the capacity model they impose.
gRPC Transport
HTTP/2 multiplexing, binary encoding and streaming semantics.
API Gateways
The single entry point, and the business logic that must stay out of it.
Network Performance
Latency floors, bandwidth-delay product, and what no code change fixes.
Private Connectivity
Private endpoints, peering and dedicated links to managed services.
Network Troubleshooting
Flow logs, packet paths, and localising a problem to a hop.