All the Proxies!
summary
Explains concrete differences: a half proxy (Cisco Local Director, Squid) only switches ports or TCP segments so custom TCP stacks or video return paths can bypass the device, while a full proxy (F5 BIG‑IP) terminates both client and server stacks allowing content rewrites, HTTP/2 ↔ HTTP/1.1 or IPv4↔IPv6 translation, and TCP optimizations. Describes SSL forward proxy and SSL Orchestrator forging server certs for inspection, and a C3D certificate proxy that forges client certs to decrypt mutual TLS. Notes an F5 lab scan of the top 1M sites for TLS.
AI-written summary · about
chapters (6)
- 0:00Intro
- 0:58Proxy Etymology
- 1:52Guest Intro -Kevin Stewart
- 2:55Proxies in Real Life
- 4:25Proxies in Tech
- 28:45Promos
related talks
03mThe Evolution of Full-Proxy Architectures
23mProxies, Gateways, and Service Mesh. Why Are Words So Confusing?
48mProxies, Gateways, and Service Mesh. Why Are Words so Confusing?
34mHow Many Proxies Do You Need?
30mMaking Kubernetes Networking Ready for Service Providers
28mProxy Service: A New Network Traffic Abstraction in Kubernetes
23mSYN Proxy at Scale with BPF
26mIt Is Always DNS… Even at the Edge: Taming Proxy-Only Lookups With Cilium and eBPF