Network Diagrams


The following diagrams have been made available to help you install CensorNet correctly within your existing network environment. Please also see the FAQ for further help.


Standard Router Mode

This is the classic CensorNet installation. The CensorNet is not only providing a proxy service for web users, it is also acting as the network's firewall, keeping unwanted packets where they belong. In this method, the CensorNet has two IP addresses, one for each network card.

Standard Bridge Mode

This is the most common form of Bridged CensorNet design. Note that we never recommend the use of Bridge Mode unless you have your own firewall to protect your perimeter. Although the CensorNet still has two network cards, connected in a similar fashion to the Basic Router Mode option, it only has one IP address, purely for administration purposes. The firewall shown in the diagram will have an internal address on the same subnet as the rest of the local LAN.


Bridge Mode with Failover

In this diagram, the CensorNet has two network cards, both of which are connected to the switch (don't do this if you only have a hub) and is what some people choose to call a "sideways" proxy. It is up to you to configure your network so that people can't avoid the CensorNet, if that is what you wish. Note that, with both network cards connected to the same switch, you should ensure you have installed the STP patch available from our download site.


Finally, if you only want to use one network interface in this scenario, you can do so. If using just one card, there is no need to use the patch.


CensorNet with IPCop in Bridge Mode


Click to enlarge