[squid-users] advice for proxy architecture

Hello to all,

Here is my squid architecture :
I am using Squid Version 2.5.STABLE7 and Samba 3.0.9 on Red Hat ES3.0.
I've got two internal proxies on which are performed the NLTM authentication of
the users. There are configured to forward request to some remote proxies (in
other sites of the company), or to two redundant external proxies used for
internet access.

I am studying how to optimise my proxy architecture, and am looking for advices.

Based on your own experience, is it better to keep the architecture 1 :

Client <--> internal proxies <--> FW <--> External proxies <--> Internet

or the architecture 2

Client <--> internal proxies <--> FW <--> Internet

Do find some particular advantages to have additionnal external proxies (in term
of performances, security, ......)

or do you think that having only two internal proxies for all trafic (remote
site, internet traffic) is sufficient and not risky ?

Thanks by advance for your help.

Lionel
Received on Fri Jan 14 2005 - 03:49:42 MST