[Yandex Cloud documentation](../../index.md) > [Yandex Smart Web Security](../index.md) > [Step-by-step guides](index.md) > Domains > Creating a proxy server

# Creating a proxy server

{% note info %}

To create a [proxy server](../concepts/domain-protect.md#proxy), the user must [get](../../iam/operations/roles/grant.md#cloud-or-folder) the [`smart-web-security.admin`](../security/index.md#smart-web-security-admin), [`resource-manager.admin`](../../resource-manager/security/index.md#resource-manager-admin), and [`iam.serviceAccounts.admin`](../../iam/security/index.md#iam-serviceAccounts-admin) roles for the proxy server [folder](../../resource-manager/concepts/resources-hierarchy.md#folder).

{% endnote %}

{% list tabs group=instructions %}

A [proxy server](../concepts/domain-protect.md#proxy) accepts requests from users to your website or web application and forwards them for validation. 

You can add multiple proxy servers, for example, to separate the application's stable version from a version under development.

- Management console {#console}

  1. In the [management console](https://console.yandex.cloud), select the [folder](../../resource-manager/concepts/resources-hierarchy.md#folder).
  1. Navigate to **Smart Web Security**.
  1. In the left-hand panel, select ![domain-protection-icon](../../_assets/smartwebsecurity/domain-protection-icon.svg) **Domain security**.
  1. Click **Create proxy server**.
  1. Enter a name for the proxy server.
  1. Optionally, provide a description.
  1. Optionally, add [labels](../../resource-manager/concepts/labels.md).
  1. Optionally, to save detailed information about operations with requests:

      1. Enable **Log requests**.
      1. Select an existing log group or [create a new one](../../logging/operations/create-group.md).
      1. Optionally, to reduce the stored log data volume, add log discard rules:

          1. Click **Add rule**.
          1. Select **HTTP codes** and, optionally, **HTTP code classes** to discard logs for.
          1. Specify what percentage of logs to discard.
          1. Add more rules to use different discard percentages for different HTTP codes.
  1. Click **Create server**.

To work with the proxy server, a service account with the `monitoring.editor`, `smart-web-security.admin`, `certificate-manager.admin`, `logging.writer` roles will be created.
        
Creating a proxy server can take several minutes. Wait for the server to get the `Active` status. After that, you can add a domain.

{% endlist %}

{% note info %}

The proxy server has an MTU limit of 1,450 bytes for all packets.

{% endnote %}

### Useful links {#see-also}

* [Adding a domain](domain-create.md)