This course explores the basics of proxying and other related topics. Students will learn the differences between proxy and reverse proxy servers, pros and cons of different types of VPNs and HTTP proxies, how to use, configure and optimize HAProxy and Nginx, security benefits of TLS termination and TLS forwarding, and the basics of service mesh proxies and websockets. Additionally, students will also gain a comprehensive understanding of active-active, active-passive clusters, DDoS mitigation, DDOS mitigation reverse proxy, HTTP tunneling, Envoy proxy architecture, and setting up a Load Balancer with Keepalived. Finally, students will learn how to debug HTTPS traffic, how to horizontally scale streaming with Node Media Server and HAProxy, the risks of timeouts, and how to use the HAProxy Runtime API.
Overview
Syllabus
Proxy vs Reverse Proxy Server Explained.
Proxy vs. Reverse Proxy (Explained by Example).
VPN vs Proxy Explained Pros and Cons.
What is an HTTP Proxy? (Transparent, HTTP and Service Mesh Proxy examples).
Load Balancer vs Reverse Proxy (Explained by Example).
Layer 4 vs Layer 7 Proxying In Details Explained with Examples.
SSL/TLS Termination, TLS Forward Proxy Pros and Cons.
Varnish - HTTP Accelerator Crash Course.
HAProxy Crash Course (TLS 1.3, HTTPS, HTTP/2 and more).
NginX Crash Course (Layer 4 & Layer 7 Proxy, HTTPS, TLS 1.3, HTTP/2 & More).
Fail-over and High-Availability (Explained by Example).
The Bare-Bones of a Service Mesh Proxy.
Scaling and Securing WebSockets with HAProxy.
Sidecar Proxy Pros & Cons (Explained by Example).
Setup Active-Passive Cluster with Keepalived & HAProxy (Two raspberry pis).
Active-Active vs Active-Passive Cluster to Achieve High Availability in Scaling Systems.
What is a DDOS Mitigating Reverse Proxy and is it Worth It? (Commenting on a Security Now Video).
Traefik Crash Course (Without docker).
NginX Crash Course.
Envoy Proxy Crash Course, Architecture, L7 & L4 Proxying, HTTP/2, Enabling TLS 1.2/1.3 and more.
How HTTP Tunneling works, The CONNECT method, Pros & Cons and more.
Envoy Proxy Fixes Two Zero Day vulnerabilities (UDP Proxy, TCP Proxy) - CVE-2020-35470.
Capture, Analyze and Debug HTTPS traffic with MITMProxy.
Load Balance multiple RTMP Servers to Horizontally Scale Streaming (Node Media Server and HAProxy).
How timeouts can make or break your Backend load balancers.
Getting Started with HAProxy Runtime API to Remove Backends for Maintenance Remotely and More.
Can you Max-out the Connections between Load Balancer and Backend Servers?.
Taught by
Hussein Nasser
