Firewalls
Forward proxy
A server that makes web requests on its users' behalf, and so can allow or refuse them by name and URL.
The client sends the proxy the full URL (GET http://site/path); the proxy decides and fetches it over a
connection of its own, so the site sees the proxy's address. For HTTPS the client only asks for a tunnel,
CONNECT site:443, and the rest is encrypted: the proxy can judge the name, not the path. It is a firewall only
if the network's packet filter lets nothing else out.