If you connect to a web application through a proxy the proxy still hits the web servers or memcache (obviously).  I'm trying to figure out if there is a way to map out the internal servers based on information sent back and forth between the browser and the web application.  I know it can be done as I have seen it before I just don't recall the method.