Advantages of Transparent Proxy
In the advantages category we have the following :
- Simplified administration – The browser does not need to be configured to talk to a cache.
- Central control – The user cannot change his/her browser to bypass the cache.
Disadvantages of Transparent proxy
- Not Robust – Because transparent proxy relies on stable routed path between the client and the origin server which happens to pass through a “cached path,” it is susceptible to routing changes in the Internet.
In other words, if a connection between a client and a cache is established and a routing change occurs which causes the client to take a path which no longer flows through the “diverting” network device, the session will break and the user will have to reload the page.
If routes in the Internet are flapping, then results will be even more unpredictable. - User control – Transparent proxy takes control away from the user.
Many users have very strong biases about caching and will actually change ISPs to either avoid it or get it.
In Transparent mode, you cannot use authentication method. So forgot Active Directory/LDAP authentication in transparent mode. ( The only way to perform members authentication is to use the HotSpot feature ) - Browser dependency – For successful operation, many transparent Proxys rely on the browser supplying the host name of the origin server in the HTTP request header.
This is required because these caches cannot access the destination IP address of the origin server from the IP address of the packet.
Therefore, upon a cache miss, they cannot determine the origin server address to send the request to.
Some early browsers do not provide this information and therefore will not work properly with these transparent caches, but 90% of today’s browsers satisfy the above.
In the real world, Many network providers have observed that a significant amount of HTTP requests are for non-cacheable content (as much as 35-45%).
The hit rate and performance of the cache is inversely proportional to the amount of non-cacheable content sent to the cache.
Architectures
The main important task is able to understand that you need to change the default gateway used by clients by your DHCP service (or by installing a DHCP server on the appliance) or manually on each workstation.
You can use your DHCP server or you can ask your default gateway to use the Artica proxy Appliance as a gateway too.
Transparent mode implementation
The transparent mode allows you to use a Proxy without need to change browsers settings.
It is useful when force nodes that are unable to set proxy parameters like smartphones, servers, tablets…
Activate the transparent mode.
- On the Proxy Parameters, click on the link “Transparent proxy“.
- Turn to green the Transparent Proxy option and click on Apply
Verify redirects on Windows 7
On a client open your network connection.
- Pay attention of the default gateway and verify the IP address point to the proxy appliance
Verify that your proxy did not have any proxy set in the Internet Explorer Browser settings.
- Surf to the Web.. you should have access to websites.
- On artica type the url https://yourserver:9000/proxy
- You must see requests from the client computer