There are no special problems with cookies. Request headers Cookieand Set-Cookieare sent directly through the proxy.
If you are concerned about a page that depends on the cookie being cached by the proxy server and served to another user who should not see it, you should indicate this case with the header:
Cache-Control: private
This should be done for any pages protected by a cookie-based login system.
source
share