Reverse proxy recommendation

[David Robillard]

On Sat, 2008-05-31 at 10:26 -0400, Thomas Mullins wrote:
> Hello,
>
> We have three internal web servers that we make accessible to the
> internet.  Right now we simply use pf and port redirection.  Works
> great.
>
> But, we would like to tighten up security.  I know you can do this with
> squid, apache and a few others.  Could someone please make a
> recommendation on what solutions they have used or seen in the past?
>
> Thanks
> Shane

You may want to check the www/varnish port. From the ports description:

This is the Varnish high-performance HTTP accelerator.

Documentation and additional information about Varnish is available on
<URL:http://varnish.projects.linpro.no/>.

Technical questions about Varnish and this release should be addressed
to <varnish-dev at projects.linpro.no>.

Questions about commercial support and services related to Varnish
should be addressed to <varnish at linpro.no>.

WWW: http://www.varnish-cache.org/

And from wikipedia: http://en.wikipedia.org/wiki/Varnish_cache

I've never used it myself, but looks interesting since it's been
created by Poul-Henning Kamp which is a major FreeBSD developer.

HTH,

David
-- 
David Robillard
UNIX systems administrator & Oracle DBA
CISSP, RHCE & Sun Certified Security Administrator
Montreal: +1 514 966 0122