Double proxy setup

Bjorksten (jimb@austin.ibm.com)
Thu, 6 Mar 1997 14:50:23 -0600


General question about setting up double proxies:

My ISP has a proxy (the outer proxy) using port 1080 and I have a small
two machine network (say A and B) at home with a proxy (apache1.2b7)
running on machine A (the inner proxy) using port 80. Machine A is
running PPP to my ISP.

Machine A's browser is pointing to the outer proxy.

The inner proxy is pointing to the outer proxy.
Machine B's browser is pointing to the inner proxy.

Most things work great.
Both home machines can surf the world just fine.

Both home machines can surf machine A just fine
(which baffles me because the browsers are ultimately directed to the
outer proxy and that machine can NOT surf my home machine A - see below)

Some things don't work:
machines at my ISP can NOT surf my home machine A - even using its IP address.
(Is this because machine A forwards everything to the outer proxy??)

machine A can't surf machine B (B is running httpd).
(Again is this because machine A forwards everything to the outer proxy??)

My objective is to have all machines within the outer proxy able to
surf all other machines in the world (that is, machines beyond the
outer proxy, machines between the proxies and machines inside the inner
proxy). Seems reasonable.

The only (partial) solution I've been able to think of is to run TWO httpd
daemons on Machine A, like so:
port 80 - httpd with proxy off, so ISP machines can surf A (and machine B too???)
port X - httpd with proxy pointing to outer proxy, so B can surf out.

Still this doesn't cover an ISP machine surfing machine B (I think?? If it
does, how do I set that up??). And doesn't cover how machine B would surf
machine A (because B would point to A's proxy - but that seems to work OK now).

Is there a better solution??
Is there a ONE httpd solution??
Is there a standard solution??

Alternatively/additionally, where can I look for documentation about
recommended configurations for multiple proxies?

Many thanks in advance,
Andy Bjorksten
Phone: (512) 838-7704 Tie-line: 678-7704
email: jimb@austin.ibm.com VM PROFS: JIMB AT AUSVM6