![]() This servlet handles queries for the user account route information (the server and port number where the user account resides). This is a servlet (also named as Nginx Lookup Extension or NLE) located on the ZCS mailbox server. A high performance HTTP/POP/IMAP proxy server which handles all incoming HTTP/POP/IMAP requests. Zimbra Proxy is designed to provide a HTTP/POP/IMAP reverse proxy that is quick, reliable, and scalable. This approach can work extremely well for web service APIs where the reverse proxy provides a consistent single public facade to an internal distributed component oriented architecture. To an external customer it appears that they are simply navigating a single website, but internally the organisation is maintaining three entirely separate sites. A reverse proxy can rewrite URLs before passing them on to your back-end servers. Sometimes the URL scheme that a legacy application presents is not ideal for discovery or search engine optimisation. This significantly reduces the route lookup time thereby improving the total time required to process the request and boost performance.īecause all HTTP requests are routed through the reverse proxy, it makes an excellent point for logging and auditing. Here the reverse proxy handles incoming HTTPS connections, decrypting the requests and passing unencrypted requests on to the web servers.Ĭurrently we use the memcached module with proxy to achieve caching of upstream routes to mailstores on a per end-client basis. Although in case of ZCS, the authentication is provided by upstream mailstores where the user accounts reside. You can use your reverse proxy to provide a single point of authentication for all HTTP requests. You can place your reverse proxy in an internet facing DMZ, but hide your web servers inside a non-public subnet. There are specialized load balancing products available, but many general purpose reverse proxies also provide load balancing functionality.Ī reverse proxy can hide the topology and characteristics of your back-end servers by removing the need for direct internet access to them. It’s such a common function that load balancing reverse proxies are usually just referred to as ‘load balancers’. The upstream mail server selection can be based on a simple client IP hash or round-robin algorithm. Here the proxy routes incoming HTTP requests to a number of identical mail servers. This is the reverse proxy function that people are most familiar with. It acts as the first entry point for all the HTTP/POP/IMAP traffic and then intelligently routes all kind of static UI requests (HTML/CSS/JS etc) and Dynamic requests (SOAP/REST/IMAP/POP) to the appropriate upstream server. Zimbra Proxy allows mailbox servers to be hidden from public internet by acting as a reverse proxy & also allowing end users to access mail system via single Login URL instead of knowing their mailbox hostnames. Zimbra proxy centralizes access to Mailbox servers Therefore, the subsequent login with the same username will directly be proxied without looking up in NLE.ġ. ![]() To accelerate the speed of route lookup, memcached is introduced, which caches the lookup result. In a typical use case, NZ extract user login information in someway (like account id or user name) and then fetches the route to the upstream mail server or web servers’ address from “Nginx Lookup Extension” (or called NLE for short), and finally proxy the interactions between clients and upstream ZCS servers. It also provides functions like GSSAPI authentication, throttle control, SSL connection with different certificates for different virtual host names etc. Zimbra Proxy is a high-performance proxy server that can be configured as a HTTP/POP/IMAP proxy used to reverse proxy HTTP/POP/IMAP client requests to a set of backend servers. Zimbra Proxy (also referred in this wiki as Nginx-Zimbra or NZ in short) is an important component of ZCS. Overview of proxy and related components What is Zimbra Proxy This article is a Work in Progress, and may be unfinished or missing sections.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |