Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Here is the situation:

We have the following network:

DSL Modem - Switch - User 1, User 2,....

We want it to be:

DSL Modem - Squid Proxy Server - Switch - User 1, User 2,....

The endresult should be, that the endusers can login at their pc, without changing the configuration of their own pc, just as if they are linked directly to the dsl modem (through the switch). Furthermore it should be possible to logg their actions on the server.

Now squid can be configured in many ways, and I am confused which path to choose. Can anyone help me?


share|improve this question

That's running Squid in a transparent proxy setup.

There are a number of good articles,

Basically, you set the machine up with Squid as the network default gateway for your client machines (using DHCP) instead of the DSL modem. You use the server to then route to and from the internet, with Squid transparently proxying the HTTP traffic.

share|improve this answer

If you are on SOHO environnement you should prefere to use the Transparent Proxy method as said EightBitTony, with theLinux Iptable redirect method (redirect all HTTP/S transit to the 3389 port of the squid server.

If you are under Enterprise network (little one or bigger) you should have Cisco or Hp switch who support the WCCP Protocol method, which allow you to place your proxy on another lan than the client network and automatically redirect all traffic on the proxy and if the proxy is down the switch automatically redirect the traffic to the internet.

share|improve this answer

As far as I know WCCP only supports HTTP not HTTPS anyway transparent proxying of HTTPS is not possible. HTTPS is a end-to-end encryption. If you really want to get control of the HTTP/s traffic a transparent proxy is not the best choice. Better setup a normal proxy, denie traffic from all hosts to the internet except the proxy and configure the Browser with your proxy server settings in this case you can proxy HTTPS and maybe denie HTTPS traffic to specific sites.


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.