If you put the caching proxy server outside of your Firewall, then your
Firewall continues to take the hit for all of the traffic done through
the cache. Since the idea of the cache is to minimize bandwidth
utilization, that might not be that bad. But if you have a high volume
site, you might want to use the cache to reduce the load on your
Firewall as well as your bandwidth, in which case, putting it inside
makes the most sense. Of course the volume of traffic created from your
DMZ equipment vs. the volume created by your internal site needs to be
calculated to see what value their is in the cache being in your DMZ.
*
Cheers,
Russ
R.C. Consulting, Inc. - NT/Internet Security Consulting
mailto:Russ .
Cooper @
RC .
on .
ca <-- *note the new address*
|
|
