Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

0
votes
0answers
25 views

Need help squid/firewalld on CentOS 7 as dns, ftp, http, https transparent proxy

I have installed squid v3.3.8 on CentOS 7 that has two interfaces as follows: internal interface: ens32 external interface: ens33 > masquerade is enabled here First of all, I ...
0
votes
0answers
16 views

403 Forbidden Tunnel in ATS - Apache Traffic Server log

I have a remap.config file map https://www.somesite.com/ https://www.internalsite.com/ and I also have CONFIG proxy.config.http.connect_ports STRING 443 in records.config However, I'm still ...
0
votes
0answers
4 views

What is the difference between the client and server counters in Squid?

We have a Squid instance running at the company, and I understand I can get a lot of metrics out of Squid by using the Squidclient. For instance if I run: squidclient -h localhost -p xxxx ...
-1
votes
0answers
8 views

Squid sibling only-if-cached error

I configured Squid as a transparent proxy. In my network topology, I used 2 squid to make a coordinating caching system. The relationship between 2 Squid proxy is Sibling ( Squid A <-> Squid B ). ...
0
votes
0answers
9 views

Listener Protocol for ELB in front of Squid Proxy

We have two Squid proxy servers for High availability. We want to use Amazon ELB in front of these Squid proxy servers. When we use Load Balancer Protocol as TCP and port 8080, Instance Protocol TCP ...
0
votes
0answers
30 views

Can haproxy perform ssl termination for forwarding to (squid) proxy servers?

I understand that haproxy can perform ssl termination for load balancing web servers, but is it possible to perform ssl termination when load balancing squid proxy servers? My scenario is that I have ...
1
vote
1answer
34 views

How to forward HTTPS traffic through squid transparently?

I want to redirect all HTTP and HTTPS traffic to squid acting as a transparent proxy. This traffic will then be blocked or authorized (in bulk) during certain hours. Specifically I do not want to ...
0
votes
0answers
30 views

HAProxy with multiple squid backend proxies

I have HAProxy with a bunch of squid proxies in the backend fqdn:port. Using the method here: Authenticated proxies on HAProxy load balancer I can send authentication for the proxies but I can only ...
1
vote
2answers
31 views

How to calculate ulimit -n (file descriptors) for a dedicated squid server

I have a production squid server that was having some issues serving content and reporting that it was out of file descriptors. I was successfully able to increase it from 1024 (default) to 4096 and ...
0
votes
0answers
21 views

squid forward proxy with SSL offload

What I need is similar to Forward proxy for webservices with SSL client certs. Tactically, it is similar to SSL offload, but for a forward proxy and not a reverse proxy. I have an application (that ...
1
vote
1answer
30 views

Squid3 doesnt serve youtube content from cache [closed]

I am trying to cache a youtube video (served from .googlevideo.com/) on squid proxy and want to ensure that when I access youtube video/audio from the same url again, it will be served from squid ...
0
votes
0answers
9 views

Differentiate response of Squid reverse proxy server and a web server behind the Squid

When we do a GET method request on a browser that is configured to use a proxy, can we tell from the response headers(Chrome Dev Tools) that the response came from a Squid proxy server and not the ...
3
votes
1answer
88 views

Squid proxy - Find urls that are consuming the most bandwidth

I have squid proxy setup on my home network (squid is running on Ubuntu server, 14.04). Right now our home internet usage is about 2TB per month. I would like to find out which sites/urls/domains are ...
0
votes
0answers
8 views

Squid no persistent connection with method OPTIONS

Hi all I have a problem I am using squid 3.1.19, the problem is that the use of the OPTIONS method does not create a persistent connection connectio:Keep - alive if not it returns me a connection: ...
0
votes
0answers
15 views

Is Sonicwall SSL Decryption and Inspection the same function as Using a Transparent Proxy and Swapping out the Certificate with Squid 3?

I was wondering if Sonicwall SSL Decryption and Inspection is the same function, mainly; swap out the issued SSL certificate and decrypt traffic while issuing a local SSL certificate to the calling ...
0
votes
0answers
34 views

Redirect locally generated HTTPS traffic through external proxy

I have a configuration like this: Internet | Public Zone | Private Zone IP x.x.x.x |<--- Forward Proxy / WebCache | <--- Linux Server (RedHat) ...
0
votes
2answers
96 views

Routing your Internet through openvpn and Squid Proxy

I am trying to setup a proxy to filter the internet traffic. In order to do so have arrived at the following combination Client -> Openvpn -> squidproxy -> internet Squid proxy and openvpn have been ...
0
votes
1answer
30 views

Squid and internet sharing proxy without configurations on the part of end users

We have several PCs all connected to a switch; What I need from Squid is to share the internet between everyone and at the same time gives me control over what PC can access to internet (password ...
2
votes
0answers
26 views

Forbid reviving dead peers in Squid

How, I'm using Squid v3.3.8 and I need to create HTTP rotating proxy server to send all requests through set of predefined proxies (I'm automatically updating squid config to update set of working ...
1
vote
0answers
14 views

Squid only loads half page

I have configured Squid on a VPS on DigitalOCean. I somehow got it to accept my requests but there is a new issue now. Whenever I try to load page using it than it only loads half of the page, what I ...
0
votes
0answers
22 views

Squid3 Access Denied error

I have set up a VPS on DigitalOCean and installed squid3. Here is the tail of the /etc/squid3/squid.conf file: acl myhost src 1.2.3.4 # 1.2.3.4 is replaced by my ip at whatismyipaddress.com ...
2
votes
1answer
46 views

Squid cache_peer round-robin algorithm not working as expected

I have number of peer-to-peer HTTP proxies and I need to distribute my requests among them evenly, so I added multiple cache_peer directives and set round-robin as peer selection algorithm. This is my ...
0
votes
1answer
36 views

Squid on a different host than gateway

I have Squid running on a dedicated VM. It has ip 192.168.1.5. The server running squid has only one NIC. The internet connection is connected to another (physical) server with two nics. The internal ...
1
vote
1answer
70 views

Azure ARM VM creation with Network Security Groups

I have a network with enabled Network Security Groups where I deny Outbound Port 80 and 443. All Outbound traffic is managed through a Squid Proxy. Now, I want to create a new Virtual Machine in this ...
0
votes
0answers
19 views

Squid multiple rules in an ACL to redirect certian traffic

We are part of a larger domain in which we manage a section of this domain. what I want to be able to do is setup a sort of filter "all sites heading to the over-all domain that aren't in our IP ...
1
vote
0answers
84 views

Squid takes a long time to get a response for HTTP requests, never hit neighbor cache

I am trying to install Squid in a sibling model by following these instructions. But when the client executes HTTP request it takes a long time to get response from the server. System model: ...
1
vote
0answers
12 views

Squid3 ACL using Linux credentials

I'm running Squid3 on my Ubuntu 14.04.3 server and have an ACL rule that only allows the 127.0.0.1 ip, ie local users. I access this through a ssh tunnel. However, I would like to tighten the ACL ...
0
votes
0answers
18 views

WCCP to Remote Cache Engine - Any limitations?

I am attempting to WCCP to a remote (cloud hosted) cache engine from an ASR 1900 series router that is performing NAT. According to my reading (which was mostly done on ASAs) the WCCP cache engine ...
0
votes
1answer
60 views

Squid - Forward Port 80 to SquidServer:3128

I have a -squid ProxyServer (Hostname: SquidProxy - 10.160.54.1 SM /16) -and a Client (Client1 10.160.55.1 SM /16) At the Client i have configured the proxy in /etc/sysconfig/proxy with the ...
0
votes
0answers
24 views

Bind the ip adresses with the hosts using socat command

I have squid proxy installed in my server, and I want to bind the ip adresses with the hosts I want to connect to them. How can I do it with socat command? Example : prox_IP : 1.1.1.1 proxy_port : ...
0
votes
0answers
42 views

How to configure Squid 3.4 to only handle IPv6 outgoing connections

When you configure Squid3.1 with tcp_outgoing_address to any IPv6 address, then the proxy server will only connect to IPv6 enabled sites. It won't fallback to IPv4. This is good for testing IPv6 ...
-1
votes
1answer
23 views

Redirect certain HTTPS url with squid

When passing all http and https traffic through squid3, is it possible if a user requests http://www.example.com I could redirect to a different url? Would this only be possible for HTTP or HTTPS ...
0
votes
0answers
52 views

Squid refuses to cache everything

Squid seems to randomly decide what to cache. http://1.vgc.no/drfront/images/2016/03/14/c=508,28,442,442;w=316;h=316;268506.jpg <- Is a perfect example of a file that doesn't get cached. It's on ...
0
votes
0answers
54 views

Firewalld blocking Squid

I have a serious problem here with Squid and Firewalld in Fedora 23. When I activate firewalld, I can not access the proxy I created, it returns a "Connection refused by the proxy server", but when I ...
0
votes
0answers
27 views

How can I enforce network time quotas? Or page request limits?

I would like to enforce network time quotas, i.e. limit users to a given amount of network time per day (but without using fixed time ranges like with the iptables time module). Or alternatively limit ...
0
votes
0answers
13 views

Double DNS resolution at Squid proxy

I wanted to check if anyone faced this scenario or not. Any input if someone can share greatly appreciated. Following is scenario:- I have set of workstations are accessing internet directly but for ...
0
votes
0answers
28 views

squid Failed to select source for '[null_entry]'

I created a proxy server using squid on Centos 6. It works fine with http but I can't open https websites. Squid listens to 443 port and the log file shows this error: 2016/03/04 12:50:46| Failed to ...
0
votes
1answer
85 views

images not displaying with squid proxy page

We are using a Red Hat 6 squid server to redirect HTTP request for custom notifications. Squid provides several built in splash pages however we are using a slightly customized one taken from a built ...
0
votes
0answers
10 views

IIS rejecting HTTP/1.0?

I have found an issue with some old proxy servers in our environment, is it possible that some webservers will only accept HTTP/1.1 requests? We have a very old squid server, and doing a wireshark on ...
1
vote
3answers
214 views

CentOS7 Kerberos Auth: Improper format of Kerberos configuration file;

I'm working on setting up a Squid 4.0 explicit proxy for group based AD authentication against a Active Directory domain (Server 2012 R2) with SSL bumping on a minimal CentOS 7 (64b) install. The ...
0
votes
1answer
30 views

Can squid block an access to the specific IP-address which is resolved with a domain name?

I have a .pac file like below. if (dnsDomainIs(host, ".example.com")) { hostip = dnsResolve(host); if (isInNet(hostip, "202.0.0.0", "255.255.255.0")) { return "DIRECT"; } } Now ...
2
votes
1answer
91 views

Integrating squid with active directory

I am trying to integrate squid as a web proxy for my users in active directory. I have followed the tutorial in the squid site in here. When i run the command : msktutil -c -b "CN=Administrator" -s ...
0
votes
1answer
19 views

Squid3 don't open port externally

I've just installed squid3, set acl's to the local ip addresses I want to be able to use it and also filtered port 3128 in iptables. Is it possible I can close this port completely on the external ...
0
votes
0answers
54 views

solutions to filter traffic with group based rules

I have a 25 computer network with 1 pfsense box (with squid installed) and 1 openLDAP server configured & working , 70% of the network is wired the rest is password protected wireless. Right now ...
-1
votes
1answer
13 views

squid never_direct to certain domain and computer [closed]

I need configuration squid proxy server to redirect one ip (one user) to parent proxy, also certain domain. My configuration at now : acl vkdomain dstdomain vkontakte\.ru vk\.ru vk\.com \.vk\.com ...
0
votes
3answers
34 views

how to dynamically route requests

I have this network, red - 3 computers with internet connection - every computer has its own different connection to internet (over VPN) blue - proxy server, squid green - computers in my local ...
0
votes
1answer
39 views

Squid reverse proxy: maintenance mode

Currently I am trying to configure my squid (3.1) reverse proxy to always display a static webpage when the one and only backend webserver is under maintenance. There is no need for an automatic ...
1
vote
2answers
152 views

Trouble getting transparent Squid forwarding proxy working with ssl

I have an environment consisting of four servers networked together. One server acts as the server, and the other three act as clients for running automated tests and Linux benchmarking using ...
0
votes
0answers
90 views

Websocket (Secure) behind transparent proxy - possible workarounds

I need some help with making ws / wss connections possible behind a transparent proxy. It is obvious that websockets are not supported by Squid (or older Bluecoat proxies) in transparent mode. ...
0
votes
0answers
11 views

Proxy only certain domain

I use squid as a proxy only without caching anything.How can i proxy only domains in a whitelist.Any other request should be forwarded directly (i.e skip the squid proxy ) not blocked. never_direct ...