Proxy и reverse proxy на собеседовании системного аналитика

Forward proxy

Client-side. Routes outgoing traffic.

Client → Forward Proxy → Internet

Use cases:

• Corporate network — control internet access, log, filter.
• VPN.
• Anonymity.

Reverse proxy

Server-side. Sits in front backend services.

Client → Reverse Proxy → Backend Services

Client thinks proxy is the server. Proxy hides backend topology.

Применения reverse

Load balancing. Distribute traffic между backend instances.

SSL termination. Decrypt HTTPS at proxy. Backends — plain HTTP.

Caching. Cache static / cacheable responses.

Compression. gzip / brotli at proxy.

Security. WAF (Web Application Firewall) — block attacks.

Rate limiting. At edge.

A/B routing. Per cookie / header — different backend.

API gateway — special case reverse proxy с auth / routing logic.

Tools

NGINX. Most popular. Powerful config.

HAProxy. Tcp-level fast. Stable.

Envoy. Modern, dynamic config (used Istio).

Caddy. Auto HTTPS.

Traefik. Cloud-native, k8s-friendly.

Yandex Cloud Load Balancer. Managed alternative.

В РФ: NGINX widely. Yandex services поверх NGINX-style stack.

Связанные темы

• API Gateway и BFF для SA
• Service mesh для SA
• CDN и static content для SA
• Cache strategies для SA
• Подготовка к собесу системного аналитика

FAQ

Это официальная информация?

Нет. Статья основана на документации NGINX / HAProxy / Envoy.

Тренируйте системный анализ — откройте тренажёр с 1500+ вопросами для собесов.