Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

0
votes
0answers
3 views

Squid log has many repeated entries

I'm running Squid as a transparent proxy on my home router, a machine running IPFire. I noticed Squid was maxing out the CPU and causing poor network performance, so I looked at the log. I'm seeing ...
0
votes
0answers
9 views

squid force disconnect open connections on reload acl

I try to make a admin website, which control access to the internet. When I allow access on this site to a client ip, the site write this ip in a acl file and reload squid. This works fine - access is ...
0
votes
0answers
16 views

Can I used squid proxy, set-up in vCloud Air, in AWS instances?

I have a squid proxy set-up in vCloud Air, which I now wish to use in AWS EC2 instances. I was thinking to create a security group using those proxy details and spin up an EC2 instance using that ...
0
votes
0answers
19 views

Squid for Windows - Basic Authorization but denied access after username and password is entered

Im using squid Version 3.5.20 built with Cygwin with installer 1.3.5.20 Diladele Im no expert and have tried for many days now to get this to work with no success and its probably just a silly error. ...
10
votes
3answers
65 views

Best practice for proxying package repositories

I have a collection of CentOS servers in my corporate network. For security reasons, most servers do not have general outbound internet access unless it is a core functional requirement for the server....
-1
votes
0answers
12 views

Global Adblock using CSS and squid [closed]

I'm currently using squid as a transparent caching proxy with ACL's to provide a global Adblock for my network. Right now the ads get blocked just fine but it leaves the placeholder behind. I was ...
0
votes
0answers
20 views

Transparent Proxy on External Server (not on client network) [closed]

I am trying to setup a transparent proxy that is not on the same network as the client. I am using centOS7 with squid as the proxy, squids transparent proxy seems to only work on the same network as ...
0
votes
1answer
16 views

Squid caching issues

I'd like to create a cron job that will delete our squid cache and restart it. The reason I'm doing this is because when I upload a new build javascript code to our webserver, when I browse our app in ...
2
votes
0answers
42 views

Squid3 WCCPv2 with ASA not working

So I have begun the awful adventure of getting Squid 3.3.8 working with my Cisco ASA 5520 (9.1(5)). I think the problem is that the traffic is getting to the squid box but it is either not getting to ...
0
votes
0answers
14 views

Configure Squid to pass througt SSL traffic for specific hosts instead of intercepting it

I'm currenty using squid on a pfSense box to intercept SSL which works well. The problem now is that WhatsApp Web will not work throught this proxy because it does not hold up to the Handshake ...
0
votes
0answers
15 views

how to fix proxy squid on virtualmin (ubuntu 16,04)?

Can someone tell me what should I do to fix on "this must be done before squid can run"? I don't know this error. for more detail, I like you visit my /etc/squid3/squid.conf file: pastebin.com/...
0
votes
1answer
54 views

let's encrypt certificates vs squid transparent proxies

I have an issue with setting up a transparent Squid proxy on a pfsense firewall. I created a CA for HTTPS MITM, installed it in my browser and it works with most websites. However sites like ...
0
votes
0answers
5 views

squidguard overloads /var/tmp with cache file and runs out of space

I am running squid 2.7 & squidguard 1.5-1 debian wheezy. I have noticed so many times, my box runs out of the space just because of /var/tmp eats up all of the space creating chunks of files like ...
0
votes
1answer
83 views

pfsense(2.3.1_5) Squid transparent proxy redirects internally hosted sites from http to https

I'm having an issue with Squid's transparent proxy on my pfSense firewall. My company hosts an internal git server at the following address (for example purposes) http://git.gitserver.com/. From our ...
1
vote
0answers
66 views

Squid reverse proxy with multiple SSL-certificates via SNI

Does squid Proxy Server offer the possibility to supply multiple SSL certificates to it? I have a server with various virtual machines running Apache web servers for different customers. As an ...
0
votes
0answers
8 views

selinux with nfs share how to allow different processes to write

We have a server with an NFS share for all storage stuff. Many processes should have read/write access to this share. For example: squid httpd ejabberd other self written For this question I used ...
0
votes
1answer
92 views

How to properly setup squid3 as HTTPS proxy?

I am trying to setup squid3 as an HTTPS proxy using the tutorial given here. I have properly setup the proxy settings in my browser and when I try to hit HTTP web sites, I am able to connect ...
0
votes
0answers
17 views

How to force persisten connection squid

How do I make a persistent connection in squid, I'm using ubuntu 12 with squid 3.1.19, this is the request I do OPTIONS http://cmsprod.imusica.com.br/index.php HTTP/1.1 and response: HTTP/1.0 200 ...
0
votes
0answers
57 views

Squid proxy behind Haproxy

In my configuration, I use Haproxy mainly for reverse proxy. I installed Squid Proxy in my private lan and I can access it from external with port 3128. But I use the basic authentification ncsa and ...
0
votes
0answers
35 views

Squid 3.5.19 (Ubuntu Server 16.04 LTS) in communication OWA 2010

I have a problem with my new Squid (V. 3.5.19) on Ubuntu Server 16.04 LTS (self compiled with SSL support) and my Exchange 2010. When somebody log in to the owa access the user can't use an ...
0
votes
0answers
14 views

Squid With Multiple IP

I have a problem with my SQUID. I have multiple IP on the host machine and let us just call them 111.222.333.100 and 111.222.320.34 Everyone can connect to the Proxy as long as he got the correct ...
1
vote
0answers
20 views

On multiple request to Squid, send a single request to a backend and queue other requests on miss

I would like to protect a backend server by having Squid send a single request to a the server when there is a cache miss for a resource. During the fetching, other requests should be put on hold ...
0
votes
1answer
25 views

Squid3 TCP_MISS/200

I have squid3-3.4.8 on Debian installed. Some gif's are with HIT in /var/log/squid3/access.log, but many of then are MISS. Here are logs: 1465154641.561 243 10.10.70.71 TCP_MISS/200 356 GET http:/...
0
votes
2answers
37 views

Setting Squid3 server

I had cureently installed squid3-3.4.8 on Debian with following script #!/bin/bash # add Debian Wheezy backports repository cat <<EOF> /etc/apt/sources.list.d/wheezy-backports.list deb http:...
6
votes
2answers
246 views

Can Squid be used as “TLS termination proxy” to encrypt TCP connections using client certificates?

Abstract I need an encrypted TCP connection from multiple clients to a single port over the internet. Can this be realized with Squid? Concrete situation We use a monitoring and client management ...
0
votes
0answers
24 views

Squid SSL Bump and EV certificates

I have a Squid proxy, with SSL-bump enabled, and ssl_crtd running. I have then pushed a group policy so the CA root certificate has a "Certificate Policy" with a specific OID x, and then added this ...
0
votes
1answer
138 views

Need help squid/firewalld on CentOS 7 as dns, ftp, http, https transparent proxy

I have installed squid v3.3.8 on CentOS 7 that has two interfaces as follows: internal interface: ens32 external interface: ens33 > masquerade is enabled here First of all, I ...
0
votes
0answers
42 views

403 Forbidden Tunnel in ATS - Apache Traffic Server log

I have a remap.config file map https://www.somesite.com/ https://www.internalsite.com/ and I also have CONFIG proxy.config.http.connect_ports STRING 443 in records.config However, I'm still ...
0
votes
0answers
7 views

What is the difference between the client and server counters in Squid?

We have a Squid instance running at the company, and I understand I can get a lot of metrics out of Squid by using the Squidclient. For instance if I run: squidclient -h localhost -p xxxx ...
0
votes
1answer
50 views

Listener Protocol for ELB in front of Squid Proxy

We have two Squid proxy servers for High availability. We want to use Amazon ELB in front of these Squid proxy servers. When we use Load Balancer Protocol as TCP and port 8080, Instance Protocol TCP ...
0
votes
0answers
70 views

Can haproxy perform ssl termination for forwarding to (squid) proxy servers?

I understand that haproxy can perform ssl termination for load balancing web servers, but is it possible to perform ssl termination when load balancing squid proxy servers? My scenario is that I have ...
1
vote
1answer
73 views

How to forward HTTPS traffic through squid transparently?

I want to redirect all HTTP and HTTPS traffic to squid acting as a transparent proxy. This traffic will then be blocked or authorized (in bulk) during certain hours. Specifically I do not want to ...
0
votes
0answers
72 views

HAProxy with multiple squid backend proxies

I have HAProxy with a bunch of squid proxies in the backend fqdn:port. Using the method here: Authenticated proxies on HAProxy load balancer I can send authentication for the proxies but I can only ...
2
votes
2answers
60 views

How to calculate ulimit -n (file descriptors) for a dedicated squid server

I have a production squid server that was having some issues serving content and reporting that it was out of file descriptors. I was successfully able to increase it from 1024 (default) to 4096 and ...
0
votes
0answers
31 views

squid forward proxy with SSL offload

What I need is similar to Forward proxy for webservices with SSL client certs. Tactically, it is similar to SSL offload, but for a forward proxy and not a reverse proxy. I have an application (that ...
1
vote
1answer
59 views

Squid3 doesnt serve youtube content from cache [closed]

I am trying to cache a youtube video (served from .googlevideo.com/) on squid proxy and want to ensure that when I access youtube video/audio from the same url again, it will be served from squid ...
0
votes
0answers
9 views

Differentiate response of Squid reverse proxy server and a web server behind the Squid

When we do a GET method request on a browser that is configured to use a proxy, can we tell from the response headers(Chrome Dev Tools) that the response came from a Squid proxy server and not the ...
3
votes
1answer
93 views

Squid proxy - Find urls that are consuming the most bandwidth

I have squid proxy setup on my home network (squid is running on Ubuntu server, 14.04). Right now our home internet usage is about 2TB per month. I would like to find out which sites/urls/domains are ...
0
votes
0answers
18 views

Squid no persistent connection with method OPTIONS

Hi all I have a problem I am using squid 3.1.19, the problem is that the use of the OPTIONS method does not create a persistent connection connectio:Keep - alive if not it returns me a connection: ...
0
votes
0answers
21 views

Is Sonicwall SSL Decryption and Inspection the same function as Using a Transparent Proxy and Swapping out the Certificate with Squid 3?

I was wondering if Sonicwall SSL Decryption and Inspection is the same function, mainly; swap out the issued SSL certificate and decrypt traffic while issuing a local SSL certificate to the calling ...
0
votes
0answers
46 views

Redirect locally generated HTTPS traffic through external proxy

I have a configuration like this: Internet | Public Zone | Private Zone IP x.x.x.x |<--- Forward Proxy / WebCache | <--- Linux Server (RedHat) ...
0
votes
2answers
213 views

Routing your Internet through openvpn and Squid Proxy

I am trying to setup a proxy to filter the internet traffic. In order to do so have arrived at the following combination Client -> Openvpn -> squidproxy -> internet Squid proxy and openvpn have been ...
0
votes
1answer
51 views

Squid and internet sharing proxy without configurations on the part of end users

We have several PCs all connected to a switch; What I need from Squid is to share the internet between everyone and at the same time gives me control over what PC can access to internet (password ...
2
votes
0answers
37 views

Forbid reviving dead peers in Squid

How, I'm using Squid v3.3.8 and I need to create HTTP rotating proxy server to send all requests through set of predefined proxies (I'm automatically updating squid config to update set of working ...
1
vote
0answers
16 views

Squid only loads half page

I have configured Squid on a VPS on DigitalOCean. I somehow got it to accept my requests but there is a new issue now. Whenever I try to load page using it than it only loads half of the page, what I ...
0
votes
0answers
69 views

Squid3 Access Denied error

I have set up a VPS on DigitalOCean and installed squid3. Here is the tail of the /etc/squid3/squid.conf file: acl myhost src 1.2.3.4 # 1.2.3.4 is replaced by my ip at whatismyipaddress.com ...
2
votes
1answer
64 views

Squid cache_peer round-robin algorithm not working as expected

I have number of peer-to-peer HTTP proxies and I need to distribute my requests among them evenly, so I added multiple cache_peer directives and set round-robin as peer selection algorithm. This is my ...
0
votes
1answer
37 views

Squid on a different host than gateway

I have Squid running on a dedicated VM. It has ip 192.168.1.5. The server running squid has only one NIC. The internet connection is connected to another (physical) server with two nics. The internal ...
1
vote
1answer
87 views

Azure ARM VM creation with Network Security Groups

I have a network with enabled Network Security Groups where I deny Outbound Port 80 and 443. All Outbound traffic is managed through a Squid Proxy. Now, I want to create a new Virtual Machine in this ...
0
votes
0answers
25 views

Squid multiple rules in an ACL to redirect certian traffic

We are part of a larger domain in which we manage a section of this domain. what I want to be able to do is setup a sort of filter "all sites heading to the over-all domain that aren't in our IP range"...