Robust and secure reverse proxy server solution. A securing and accelerating reverse proxy with the best price-to-performance ratio, IQProxy offers fast RAM/DISK cache, URL rewrite, GZip compression and SSL offloading as well as load-balancing with smart failover and sticky sessions. Downloadable for Win32/64, IQProxy comes 30-day trial and moneyback guarantee.

Solid Reasons to Choose ServeTrue (formerly known as Fastream) Reverse IQProxy Server to Secure & Accelerate Your Web Site and Share & Accelerate LAN Connection.

Key features:

- Web server load-balancing with smart failover using preferred HTTP(S) ping period and real-time server checks: Never let web server issues get your site down

- SSL offloading with SNI (Server Name Indication) support for multiple SSL certificates on a single port

- Web servers can be assigned based on URL Rules with respect to client country/continent

- RAM/DISK caching; cache can serve stale file when assigned servers fail. Many options to speed up performance--up to 10X!

- URL & header rewrites: Central point to manage all your URLs and request/response headers for SEO friendly sites!

- Local/NTLM Authentication on URL rule basis; affordable SSL VPN!

- Persistent (sticky) sessions for better consistency

- Configurable GZip compression: Reduce HTML/CSS/JS bandwidth and loading time up to 70%!

- Extensive W3C screen and file logging and real-time monitoring lets you see pattern of your visitors!

- Bandwidth throttling--per socket or URL Rule!

- Anti-hotlinking for blocking bandwidth leeching referers

- Request size/timeout/total-time limits

- Optional "X-Client-Country" header added to request

- Separate client and web server connection timeouts

- "Server" response header could be removed

- Customizable 401/403/503 error pages

- Works on all Windows virtual machines and utilizes the industry standard OpenSSL library

- Built-in DNS cache for domain firewall and country filter

- Runs on Windows 2000/XP/2003/Vista/2008/7 as NT service with extremely little resources such as 1GHz CPU, 800*600 VGA (local/remote), 256MB RAM

- Comes bundled with free remote GUI for administration that could also be downloaded and installed seperately

Secure Sockets Layer and its version 3.1 incarnation called Transport Layer Security (TLS) is the industry standard for secure transmission on the web. With the ultimate latest open source OpenSSL library version 1.0.0 that IQProxy utilizes, it is capable of supporting the highest grade of security level possible for commercial use: 256-bits! This is so high that it used to be impossible to imagine on the web in the '90s. IQ Reverse Proxy supports the new SNI (Server Name Indication) protocol for serving multiple certificates (Enterprise edition only) on single IP/port--also with intermediate certificates.

DDoS attacks have been on the rise for more than a decade. In our approach as solution to the problem, there are distinct settings for each client IPs number of accesses to each specific valid URL and any 404 page. There is also a definable period for resetting those (in minutes). So if an attacker writes a tool such as the one we have here (in-house) which uses randomly created URLs to exhaust the proxy server, it is easily caught with the 404 limit and disconnected before the header is read.

IQ Proxy Server Reverse Proxy Enterprise edition can block at NDIS level against SYN attacks as well.

With the built-in URL translater, all the absolute hyperlinks are converted on-the-fly with tens of Mbps speed (with just two CPU-cores) and then cached for future Gbps+ serving!

IQ Reverse Proxy features a 3Gbps (giga bits per second) RAM cache and unlimited size disk cache as well. This performance level could be achieved with only a 32/64-bit single core 1.6GHZ CPU! You can limit the maximum cache object size and the total capacity for both caches. Cache contents can be viewed using the remote GUI and be emptied.

Cache can handle more than 50,000 files and with the new indexing it never slows down.

IQ Reverse Proxy cache does not forward all the same many requests to web server, serves from single outgoing socket download to clients. For example when the reverse proxy service is just started and you have 2,000 clients requesting the home page of your web server. In the previous versions it was forwarding all of them by by-passing cache as it is not yet written to cache since they were arriving too quickly! This bottleneck has now been overcome. You can even define in milliseconds the timeout for new connection to web server farm in case of one client connection -and its download to cache- stalls.

The new cache has now extensive statistics of sizes of RAM/DISK, hit rates, number of files and their current sizes (if the header indicates the full size, then full size is displayed). Besides you can define cache "override web server preferences" types as MIME--as sometimes scripts may return images/xml as well as html on the same server with the same extension.

With IQ Reverse Proxy's built-in anit hot-linking function, you can now control which file extensions could be linked from sites other than yours and even can whitelist sites such as Google images. This way you will be saving bandwidth and a customizable error page will be shown instead of blocked pages.

Using standard regular expressions, you are now in total power to have links such as

/path/index/1/test

to work and be rewritten as

/path/index.aspx?id=1&user=test

using standard regular expressions, with the same format as in Apache mod_rewrite, yet without the hassle.

Similar to load balancing, each URL rule can also be assigned a bandwidth rule (in terms of kilo bytes per second) to be applied for the entire rule domain instead of per socket connection! This enables an admin to limit the total site bandwidth usage or sub parts of the site. This feature is, of course, optional.

HTTP protocol as defined in RFC2616 -which IQP complies to- defines a mechanism for compression support negotiation between client and server. Compression saves bandwidth and speeds up web object load times. GZip is the most prevalent format and it is implicitly supported by IQP. You can configure IQP to get content directly w/o compression from the web server (which would not hurt the LAN as bandwidth is plenty there) and compress on the fly. This could even be done at a configurable ratio with respect to object MIME type! This way the proxy does not get exhausted trying to compress MP3s and AVIs which was already compressed.

Another usage would be to let the web server compress and use the proxy just for tunneling. This would be ok if the load on web servers are not too high and on proxy is indeed high. There are minimum and maximum object sizes to compress settings which prevents the proxy to bog its RAM with big objects such as videos in case they are configured to be compressed.

IQ Reverse Proxy continuously polls the servers every 15 seconds in the LAN with HTTP(S). Ping times are also used for determining which server is tired and which ones are to be given priority in assignment of client requests. This way problematic hosts are automatically suspended for a definable period of time so that the clients are not shown error pages. After that period ends, the servers are taken into service automatically once again without an admin command! This enables if the proxy admin is different than web server admin and a web server in the farm is taken offline for maintenance, then the proxy admin needs to do absolutely nothing to take the server online once it is fixed.

One other interesting feature is the dynamic discovery: if a request was unable to be answered by a specific target server then other servers are automatically polled for that request--no need to upset clients for a server being down!

For each URL, in the first time a client visited, a web server assigned. This is because the server and client could be conducting a transaction such as an e-commerce one and if during the transaction we redirect to another server in the farm, it would fail. To assure session persistence, IQ Reverse Proxy optionally creates cookies in browser end to "tie" the client to a specific server for that URL. This is the best way for session persistence compared to other methods.

Again, if the server for some reason goes offline, then another server is replaced.

IQ Reverse Proxy features a firewall that can filter and pass with respect to IP addresses, DNS records of clients and even client countries! If your site is getting an attack from a specific country, you can just block them all? Or you can say you only want to accept incoming requests from your home country and nowhere else. Reverse DNS enables you to block with respect to client ISP. For example you can forward all of comcast.net and block the rest.

With the advent of IQ Reverse Proxy Enterprise edition, now it is possible to block at NDIS level against SYN attacks. This is implicitly made when end users select "NDIS" as firewalling mode--so easy and secure!

If you are running your site on dynamic IP instead of a static one, and if you desire a domain name, then you are out-of-luck with static DNS servers as it takes days to update a record with them. To overcome this problem, ServeTrue partnered with three great dynamic DNS providers and we even integrated our custom dynamic DNS client that runs in the same service (even when you are not logged in) that detects and updates your IP address every 5 mins. So even if you disconnect and reconnect again, no worries for it. You can have as many DNS domains as you desire.

One cool feature of IQ Proxy Server is the ability to remotely control the server with a GUI controller. This enables you to control servers on the other side of the globe fast and securely. The protocol is XML over HTTP so no firewall complainings at all!

So you want to pass-protect a part of your site and also want to do it in the gate of the servers? This is very easy with IQP. All you need to do is to select the URL-rule, click a button, and enter user information!

IQ Reverse Proxy supports basic, digest, NTLM and HTML in a selectable fashion. You can configure your IQP setup to connect to NTLM-domain controllers so that you can use your existing ActiveDirectory database. Even HTML-auth can connect to NTLM database!

By supporting the W3C Extended Log format, which is by far the most flexible log format on the entire Internet, IQ Reverse Proxy lets you log every aspect of client communication and the matched server. These include but not limited to client referrer and cookie as well as IP address and server IP/port.

With IQ Reverse Proxy three kinds of errors pages could be shown: 401 for authentication failure and 403 for blocked, 404 target server not found. For these, wouldn't you want to be able to assign custom pages with your company logo in it? What about a custom "sorry" message for 404? All is possible so why not?

IQ Proxy Server runs on any NT-based 32/64-bit Windows system such as Windows 2000/XP/2003/Vista/2008/7. Since Windows is the easiest to use and the most ubiquitous platform, this compatibility enables IQ Proxy Server to be installed on the largest possible system base. If you have IIS or Apache on your server, you can install IQP on the same Windows -virtual- machine provided that your usage needs are not too high. IQ Proxy Server uses configurable space of hard drive space for log and cache file storage. For serious business usage, we recommend server versions of Windows such as 2000, 2003 or 2008 (Web Services Edition could be favored instead of Enterprise Edition to cut costs.)

Soft-Go is not responsible for the content of ServeTrue Reverse IQProxy publisher's description. We encourage you to determine whether this product or your intended use is legal. We do not encourage or condone the use of any software in violation of applicable laws.

Any form of support or technical problems regarding ServeTrue Reverse IQProxy must be addressed to its developer/publisher. Please be aware that we do NOT provide ServeTrue Reverse IQProxy cracks, serial numbers, registration codes or any forms of pirated software downloads.