Questions tagged [squid]
Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.
1,399
questions
4
votes
3
answers
30k
views
Squid makes Internet slow
I have configure squid proxy in our network on ubuntu server. All the traffic being divert to proxy server by Mikrotik router. After I configure squid proxy I changed /etc/squid3/squid.conf as
...
- 273
4
votes
1
answer
9k
views
SARG reports for Squid filling up the disk, how to purge them?
I am running Squid 3 on Ubuntu 10.04, with SARG for reports. It's mostly working quite well, but I'm running into problems with the server becoming totally full with the SARG reports.
I created this ...
- 383
4
votes
1
answer
1k
views
iptables refuses connections to squid port on CentOS 5.5
I installed squid on a fresh CentOS 5.5 and added this rule for iptables:
-A RH-Firewall-1-INPUT -m state --state NEW,ESTABLISHED,RELATED -m tcp -p tcp --dport 8080 -j ACCEPT
Using this HOWOT: http:/...
- 143
4
votes
1
answer
6k
views
squid proxy - using ipv6 for outgoing traffic instead of ipv4
When I am connecting via squid proxy to internet, getting ipv6 address instead of ipv4. The proxy is configured for both ipv4 and ipv6. Why it is preferring ipv6 ?Could anyone please advise what to ...
- 43
4
votes
2
answers
79k
views
How to properly setup squid3 as HTTPS proxy?
I am trying to setup squid3 as an HTTPS proxy using the tutorial given here. I have properly setup the proxy settings in my browser and when I try to hit HTTP web sites, I am able to connect ...
- 233
4
votes
1
answer
938
views
Running pfSense server after load balancer, dhcp?
I got the following situation:
Two wan, load balanced by a hardware load balancing router
Wifi network (can be up to twenty AP's)
And I need the following:
Need a captive portal where clients can ...
- 183
4
votes
1
answer
2k
views
Caching large amounts of data
We need to cache all psd/zip files from our amazone S3 storage. The amount of the cache between 150-200 Gb (we need to store files at least 2 month). Now we use transparent proxy squid without any ...
- 7,313
4
votes
2
answers
1k
views
SELinux & ncsa_auth in Squid
I'm trying to enable SELinux on a CentOS 5.5 server with Squid 3.1.12 that handles authentication via ncsa_auth.
When I turn off SElinux everything works fine, but when I enable it, Squid crashes on ...
- 18.1k
4
votes
1
answer
6k
views
Squid reverse proxy with optional SSL
I'm trying to set up squid as a load-balancing reverse-proxy, and I'm having a bit of trouble with the SSL. One of the site's applications checks to see if a site is loaded over SSL, and behaves ...
- 15.2k
4
votes
3
answers
15k
views
Transparent Proxy with Squid / iptables
I'm trying to force one PC to use a remote transparent squid proxy by re-routing all outgoing packets headed for port 80 to the squid proxy, although I'm having some difficulty with the exact iptables ...
- 2,741
4
votes
1
answer
11k
views
Transparent HTTP/HTTPS domain filtering proxy [closed]
I want to set up a transparent HTTP/HTTPS proxy to filter outbound requests based on destination hostname (domain). The proxy itself should be non-intrusive and just forward traffic, not decrypt/...
- 422
4
votes
1
answer
10k
views
How to setup an TCP/IP proxy with traffic interception, for MS SQL traffic in this case
I would like to setup an MS SQL proxy server.
It should forward all requests 1:1 and make it possible to log them, and modify some of the requests or answers according to some replacement rules I ...
- 1,964
4
votes
2
answers
28k
views
Squid throws error, The requested URL could not be retrieved
Sometimes I am getting the following error
The requested URL could not be retrieved
While trying to retrieve the URL: http://groups.google.com/
The following error was encountered:
Unable to ...
- 2,174
4
votes
1
answer
6k
views
How to Cache SSL Data with Squid
What I want to do:
My goal here is to cache data being transmitted over SSL with Squid - not just data transmitted over Http. Users should not be bothered with SSL certificate errors on every Https ...
- 169
4
votes
1
answer
6k
views
Squid with php or perl "url_rewrite_program" on windows
I want to redirect all my http proxy traffic to a perl or php script.
I have a working squid setup, and have this in my squid.conf
url_rewrite_program "c:\\squid\\redirect.pl"
But when I start ...
- 143
4
votes
3
answers
4k
views
Squid use eth1 outgoing ip change
I've set up squid as an http proxy and I've multi nic cards, by default it uses eth1 ip for outgoing; I want it to use eth1:1 ip for outgoing. Any clue?
- 529
4
votes
2
answers
10k
views
maximum number of connections Squid
I have a Squid proxy server that controls all internet traffic for my network.
I need a way to stop users from downloading big files (say >50MB) in my network. I banned some famous ports (e.g. ...
- 581
4
votes
2
answers
14k
views
How To Enable URL Filtering With Just Squid & C-ICAP
Before I posted this question, I read several set up guides online, the squid docs, c-icap docus, and also the ICAP RFC (3507). Unfortunately, the documentation for SQUID and C-ICAP does not provide ...
- 41
4
votes
1
answer
4k
views
Limit number of simultaneous connections squid makes to a single server
Note: I am asking about outbound concurrent connection limits, not inbound, which is sufficiently covered on existing questions
Modern browsers typically open a large number of simultaneous ...
- 472
4
votes
2
answers
12k
views
Config squid for Windows with basic authorization, but squid still denied access after I input correct username/password
I installed squid-2.7-stable8 for Windows, try to let only authorized user can access the internet. But unfortunately after I entered username/password in client browser, squid still return HTTP 403 ...
- 218
4
votes
1
answer
5k
views
squid: allow only certain youtube videos (solved for FF, not working on IE)
At my job, I'm not the systadmin but a linux programmer. But once in a while the sysadmins (who generally aren't that knowledgeable about linux) ask me for help. Today the sysadmin asked me to allow ...
4
votes
1
answer
5k
views
How can I inspect why Active Directory can't use kerberos and fallsback to NTLM?
I have been trying to get squid running with kerberos auth for a few
days but I'm in some trouble. The problem has been asked and replied
many times on both the squid-users list and on the web, I have ...
- 161
4
votes
5
answers
6k
views
Which version of squid should I choose?
There are 3 squid releases in squid's official website: 2.7, 3.0 and 3.1.
I am confused, which one should I choose?
- 173
4
votes
1
answer
772
views
Need help with ntlm auth in Squid 2.7 and Active Directory group permission
I'm having problems with squid and NTLM auth, I already have ntlm auth (http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ntlm) working so only logged users to the AD can navigate through the ...
- 43
4
votes
1
answer
1k
views
AWS SSM Agent registration call cannot be proxied?
How do I proxy the amazon-ssm-agent -register call?
I want to proxy all the amazon-ssm-agent traffic in a local VM instance through a squid proxy.
When the SSM agent is running, it seems to proxy ...
- 143
4
votes
0
answers
11k
views
Transparent Proxy squid TCP_MISS/503 Error in all pages
I m trying to make a squid proxy server with to work as a transparent proxy server, and i m facing some issues that i m unable to figure out the reasons. The setup i m using is several VLAN's with ...
- 41
4
votes
0
answers
2k
views
Squid Logs NTLM usernames only for certain requests
Currently I have squid 3.2 setup with NTLM authentication and LDAP Group pulls. I also have MySar running to pull the reports.
It seems that the way the logging works is by passing them twice, one to ...
- 41
4
votes
0
answers
3k
views
Squid 3 server not following 301 and 302 redirects?
I've got a Squid3 server set up that's working fine, logging everything, but every time a user visits a website that responds with a 301 or 302 redirect, the request dies and does not redirect the ...
- 183
4
votes
2
answers
5k
views
Why is squid breaking kerberos/NTLM auth?
I'm using squid 2.6.22 (Centos 5 Default) as a proxy. Squid seems to break the authentication process for web pages when they require NTLM or Kerberos Auth.
I tested with sharepoint 2007 and tried all ...
- 128
4
votes
1
answer
3k
views
Macs behind a proxy, using squid for SSL and HTTP traffic
There appears to be an NTLM bug in OSX in how authentication is handled with our corporate proxy. On several Macs (and iDevices) Safari, iTunes, Software Updates, AppStore etc all crash when they ...
jayboston
3
votes
5
answers
6k
views
Squid equivalent for Windows?
We are planning to move some of our Linux services to a Windows platform. What is the equivalent solution on the Microsoft platform to setup a web cache for outgoing traffic?
- 537
3
votes
2
answers
7k
views
Varnish or Squid - Which is Good for web cache in small office?
First, I am not sure if Varnish can be used as web-cache to speedup internet in small offices.
We have an office with 20 systems around and we frequently browse same set of websites.
I setup squid ...
- 1,657
3
votes
4
answers
7k
views
Why does squid reject this multipart-form-data POST from curl?
This fails:
$ curl --trace multipart-fail.log -F "source={}" http://127.0.0.1:3003/jslint
With a squid status 417 error, ERR_INVALID_REQ.
trace of failing curl request
trace of successful curl ...
- 152
3
votes
1
answer
8k
views
Change squid3 access.log
Where lies the config file to change the output of the access.log file?
I want to remove the website the user was browsing and format the time so it's human readable.
- 759
3
votes
5
answers
3k
views
Limit Internet access to White-Listed Sites?
We have need for certain computers to have their Internet access limited to a list of sites, denying access to all others (white-listing).
Some of these sites use HTTPS, so the solution needs to ...
- 311
3
votes
7
answers
23k
views
How to setup equivalent USVIDEO.ORG DNS-Proxy on Linux [closed]
I have a VPS in the USA running Ubuntu. I want to setup something similar to http://www.usvideo.org Basically, USVIDEO is a DNS service that allows Canadians to access American content like Hulu, ...
- 31
3
votes
2
answers
6k
views
Listener Protocol for ELB in front of Squid Proxy
We have two Squid proxy servers for High availability. We want to use Amazon ELB in front of these Squid proxy servers.
When we use Load Balancer Protocol as TCP and port 8080, Instance Protocol TCP ...
- 81
3
votes
2
answers
25k
views
Squid Proxy TCP_Miss all the time, not caching at all
I've install Squid Proxy via sudo apt-get install squidon Ubuntu for a forward proxy
I've not modified any of the default settings in squid.conf apart from http_access deny all to http_access allow ...
- 131
3
votes
2
answers
2k
views
How to make squid send a old cache(maybe stale) to client when website is down
I am using squid as proxy.
But when the website is down and the cache is exceed the max time config in squid.conf,
can I just let squid send the old to client before squid revaliadate it.
If squid can ...
- 173
3
votes
3
answers
2k
views
How do you cache web pages with a personalized header using caching reverse proxy such as Squid, Varnish, or Nginx
Pretty much every page of my website is dynamically generated. However they don't change that frequently (kinda similar to a forum page). So I'd like to cache them using a caching reverse proxy such ...
- 3,130
3
votes
1
answer
2k
views
Why does squid (proxy server) listens on port 48512?
I just installed squid on my ubuntu machine (sudo apt-get install squid3) and after installing it I noticed that it listens on port 48512.
$ netstat -tulpn | grep squid
tcp 0 0 0.0.0.0:...
- 322
3
votes
1
answer
34k
views
How wildcards works in Squid whitelisting configuration?
I'm a developer, not a sysadmin but I have the task to maintain a file which is basically a list of domains to whitelist. This file is used in the Squid caching proxy. The content of the file looks ...
- 179
3
votes
2
answers
2k
views
How to calculate ulimit -n (file descriptors) for a dedicated squid server
I have a production squid server that was having some issues serving content and reporting that it was out of file descriptors. I was successfully able to increase it from 1024 (default) to 4096 and ...
- 206
3
votes
2
answers
8k
views
Centos Squid Proxy Server for Windows Updates
I'm running Centos 7 as my OS and have installed squid to cache windows updates for my company.
Going through the log file, it shows that everything is tcp_miss, including when it's accessing the ...
- 51
3
votes
3
answers
2k
views
BYOD and Google SSL
I run a school network with a BYOD program in place. I have a linux proxy (squid) with content filtering by Mind (fork of dansguardian). Everything works fine over HTTP, the problem is of corse when ...
- 185
3
votes
1
answer
14k
views
Squid selects parent depending on requested URL?
I have a basic squid configuration that connects to the Internet directly, I need a way to use a parent peer depending on the URL.
So for example:
I configure it to use a local proxy that links it ...
- 834
3
votes
4
answers
4k
views
Which hardware router(s) support directing all web traffic through an external proxy server?
I have a SQUID proxy server running on an external machine that I would like all web traffic on my network to go through. My goal is to find a router (hardware) that allows me to specify the default ...
- 51
3
votes
2
answers
6k
views
Squid 3.5: Preventing forwarding loop in intercept mode
I have set up a router and an intercepting HTTP squid proxy on different machines. Clients should use the proxy (without knowledge) in the following way:
Client -> Router (DNATing to proxy server) -> ...
- 422
3
votes
1
answer
13k
views
Squid reverse proxy redirect / rewrite HTTP to HTTPS
My Squid Reverse Proxy only accepts HTTPS requests. What is a short way to redirect/rewrite a HTTP-request to https?
So if the user visits http://foo.server.com he should be automatically redirected ...
- 139
3
votes
1
answer
7k
views
How do I use Squid to redirect an incomig request to another host?
I'm trying to integrate an internal GitLab installation with a Slack incoming webhook but I have a problem, the machine where GitLab can only access other machines in the same network. I have VM which ...
- 1,000