反向代理安全风险

Question

Situation:

Consider the site: example.com, hosted at web server A.

A WordPress blog is to be installed on a different web server, B.

In order to route a WordPress installation to a subdirectory on the main site, eg example.com/blog/, we used a reverse proxy.

We have done this a number of times for other clients (SEO reasons) to keep content within the domain. The main reason we never install WordPress in a subdirectory is for security purposes.

Question:

We know that there are some security risks with reverse proxies eg This Original Post - how do we overcome them?

What also would be best practice to reduce security risks when use reverse proxies in this way?

Many thanks.

Answer 1

To be honest I don't consider that the utilisation of a proxy is a security threat.

For the "Same-Origin Policy": it's true, if server B is hacked you can (perhaps) do some mess on server A, but basically if you have a server hacked it's your fault not the proxy one!

On the other hand, I fully understand what Tom Leek wanted to tell, if one website is hacked you don't want the other to have repercussion too. Then to make mylittlesubdomain.mywebsite.com is a solution because you will have no link between server A and B. I though that search engine as google took care of subdomains quite well, many big websites just do the blog.website.com