Questions tagged [squid]
Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.
445
questions with no upvoted or accepted answers
0
votes
0
answers
106
views
How to use one proxy address in browser to communication with multiple docker containers
I create one image which include vpn client and squid as proxy service. Due to restricted for the VPN client,multiple vpn client can't connect different datacenter(customers) at the same time within ...
- 9
0
votes
0
answers
37
views
An HTTP cache that will fall back to last successful response on failures
Is there an HTTP caching layer that I could use in front of my website that can be configured to fall back to return the last successful response (200 - 399 status) from the cache, if it encounters a ...
- 229
0
votes
0
answers
397
views
Terminate ssl but only for a specific domain in Squid
I'd like Squid server to act as an ssl terminator but only for a specific website I own say http://www.example.com. All other request will be via http, no need for SSL termination.
I chatted to the ...
- 181
0
votes
0
answers
2k
views
Issues with Reverse DNS Lookup for HTTPS on Squid Logging
I am having issue with reverse dns lookups with squid, I am using wccp redirecting https connections to a squid proxy server. I am also using squidguard for content filter. When the https traffic ...
0
votes
1
answer
3k
views
squid Access Denied. for http but not https, dispite removing http_access deny CONNECT !SSL_ports
I have the following config file.Comments and blank lines removed. Lines starting #> are the ones I removed to get normal http to work. But it is still blocked.
acl localnet src 172.16.0.0/12 #...
- 149
0
votes
1
answer
2k
views
squid proxy on ubuntu refuses connections
I have just installed squid on my Ubuntu server. However when I try to connect, I receive connection refused messages from my local computer (In the firewalls I have added permits for my local IP)
...
- 205
0
votes
0
answers
3k
views
HAproxy as a reverse proxy - no load balancing
I want to configure HA Proxy to act only as a reverse proxy it's being implemented to replace Squid.
At the moment I have it working, where a request comes to the physical firewall on port 80, that ...
0
votes
1
answer
1k
views
Maximum connected devices - Squid Proxy Server
I'm using Squid like this:
acl whiteList src 111.111.111.111
http_access allow whiteList
http_access deny all
And I want to limit the number of maximum connected devices. Not maximum number of ...
- 101
0
votes
1
answer
289
views
Squid log rotation and sarg report creation errors
1) My Squid usually was creating 2 files: access.log and cache.log .
Some days ago it started creating many files like:
access.log.1
access.log.2 ... until access.log.9
cache.log.1 ... until ...
0
votes
1
answer
86
views
i want that squid client cannot change or view the proxy setting in the browser
now i have a server in our domain.i will configure some of users on our domain and remaining some users will not be configured on domain.so i used squid proxy server for them and apply policies with ...
- 1
0
votes
0
answers
107
views
Squid configuration on RHEL 6 for HTTPS
We have many client servers and a master server. In between them, there is a server (say server A) where squid is installed to act as proxy and firewall.
Clients and Server A are in one network, the ...
- 3
0
votes
1
answer
3k
views
squid block domain transparent
How to block domain with transparent on Debian Squid?
http_port 3128 transparent
but I still have to set the manual proxy on the browser.
NB: I'm using Debian Wheezy with squid 2.7
0
votes
1
answer
95
views
How orgineze two port for squid server
I have squid server installed on centos 6.x. Squid server authenticates users by LDAP server on port 3128. Can I open other one port for Squid server without any authenticating. How?
0
votes
1
answer
38
views
How to forward HTTPS trafic from a GW server to VPS squid CONNECT server?
Here is what am seeking after:
i have 2 hosts x.x.x.1, x.x.x.2 and gateway y.y.y.y and external VPS squid server z.z.z.z
host x.x.x.1 for example send request to https://website.example
i have website....
- 401
0
votes
0
answers
387
views
how-to force internet traffic go via a proxy
Could you please advise me on the following:
infra-server has no internet connectivity. proxy-server has internet connectivity
When I do from the infra-server
infra-server#export http_proxy=http://...
- 147
0
votes
1
answer
514
views
squidclient Monitoring without CONNECT method
I have some squid servers, which I monitor with the squidclient mgr:5min command.
I would like to monitor http service time with;
squidclient mgr:5min | grep "client_http.all_median_svc_time"
...
0
votes
2
answers
320
views
Put a server or two behind a proxy
A little background on why I'm asking this question. We've been recently getting DDoS and other attacks on our Direct Access servers, and when these attacks come in, it dramatically slows down the ...
0
votes
1
answer
665
views
Squid - Whitelist a perticular Git Repo
This is how my proxy_whitelist.config file looks like;
.ubuntu.com
.redhat.com
It is working fine.
I need to allow my users access to a perticular Git Repo.
I tried the following
.github.com/...
- 109
0
votes
0
answers
58
views
Enigmatic iptables behavior
I configured two virtual machines both running Debian Wheezy in order to use them as server and client systems within the same NAT network. They are both able to reach each other, as ping shows.
...
- 41
0
votes
1
answer
2k
views
What are the possible causes of a curl protocol error?
I'm getting the following error with curl:
# curl -vvvv https://192.168.99.100:8501/ui
* Trying 192.168.99.100...
* Connected to 192.168.99.100 (192.168.99.100) port 8501 (#0)
* WARNING: using IP ...
- 2,739
0
votes
1
answer
902
views
Amazon EC2 VPC with two external IPs? maybe using NAT?
I am a little new the Amazon EC2 and to networking, so I apologize in advance if this is a stupid question.
I want to create a VPC in EC2 with two subnets: public for the web application instance, ...
- 463
0
votes
1
answer
1k
views
Outlook SMTP issues under squid server
I have configured squid from source code and running as transparent proxy server everything is working fine browsing FTP caching.
Email client from Thunderbird are able to connect SMTP server but ...
- 272
0
votes
1
answer
408
views
Squid Transparent Caching
I want to know that Is it necessary to have two interfaces for Squid Transparent Caching Sever,
1 for LAN users
2 for Internet Connectivity (In a mapped scenario)?
In case if it Yes,please tell me ...
0
votes
0
answers
76
views
Can I used squid proxy, set-up in vCloud Air, in AWS instances?
I have a squid proxy set-up in vCloud Air, which I now wish to use in AWS EC2 instances. I was thinking to create a security group using those proxy details and spin up an EC2 instance using that ...
- 101
0
votes
2
answers
302
views
Setting Squid3 server
I had cureently installed squid3-3.4.8 on Debian with following script
#!/bin/bash
# add Debian Wheezy backports repository
cat <<EOF> /etc/apt/sources.list.d/wheezy-backports.list
deb http:...
0
votes
1
answer
398
views
What is the difference between the client and server counters in Squid?
We have a Squid instance running at the company, and I understand I can get a lot of metrics out of Squid by using the Squidclient.
For instance if I run:
squidclient -h localhost -p xxxx ...
- 243
0
votes
1
answer
199
views
Squid on a different host than gateway
I have Squid running on a dedicated VM. It has ip 192.168.1.5. The server running squid has only one NIC. The internet connection is connected to another (physical) server with two nics. The internal ...
- 101
0
votes
0
answers
131
views
How can I enforce network time quotas? Or page request limits?
I would like to enforce network time quotas, i.e. limit users to a given amount of network time per day (but without using fixed time ranges like with the iptables time module). Or alternatively limit ...
- 129
0
votes
3
answers
58
views
how to dynamically route requests
I have this network,
red - 3 computers with internet connection - every computer has its own different connection to internet (over VPN)
blue - proxy server, squid
green - computers in my local ...
- 113
0
votes
1
answer
2k
views
accessing another subnet behind proxy
I have squid proxy with dansguardian with ip x.x.1.125 and all computer have this ip as their gateway. Now I need them to access an application on x.x.othernetwork.41 ip. But when I turn on ip ...
- 1
0
votes
1
answer
2k
views
Squid Proxy: 400 Bad Request when "%25" (Percent Sign) in URL
I have a squid proxy that works well except for this issue:
If a URL has a %25 inside of it (the percent sign), we get a 400 Bad Request and Bad Request is displayed to the web browser.
Example URL:
...
- 101
0
votes
0
answers
116
views
Cache domain GET requests using Squid
I'm trying to cache requests to remote package repository, so I can access it without internet connection. All calls are via http GET to remote repo.
iptables entry to redirect requests to proxy
...
- 185
0
votes
4
answers
1k
views
Squid kerberos authentication no popup
I configured squid to use kerberos authentication but when I'm trying to use proxy with browser i don't get popup in browser with ask for user and password - just access denied cos of no ...
- 169
0
votes
1
answer
891
views
Squid and delay pools: rep_mime_type, https
I'm struggling with squid delay pools. The documentation I found is very poor and on internet there is contradictory and possibly surpassed information.
First question:
acl aclname url_regex -i \....
- 373
0
votes
1
answer
625
views
Squid not redirecting SSL as HTTP
I want all my traffic to a specific domain to be sent through a parent proxy, here is my squid conf:
acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src 172.16.0.0/12 ...
- 103
0
votes
0
answers
975
views
Squid GET request returns incorrect content type when using transparent mode
I'm trying to establish the cause of a strange issue with mobile device that goes through a Squid 3.3 proxy on CentOS 7 using transparent mode which is not able to access news content within the Bing ...
- 684
0
votes
0
answers
967
views
Squid proxy unable to use LDAP/S on CentOS 6
I've configured Squid proxy to authenticate against Active Directory. With plain LDAP, everything works as expected. However, when I try to use LDAP/S, I get these error messages:
p11-kit: couldn't ...
- 351
0
votes
1
answer
1k
views
Unable to stop Squid3
When trying to stop squid3 that is running off a docker image jpetazzo/squid-in-a-can, I am unable to stop squid!
root@myserver:/# service squid3 stop
[FAIL] Stopping Squid HTTP Proxy 3.x: squid3[.......
- 1,479
0
votes
0
answers
2k
views
Squid blocks automatic updates - antivirus and java
I have Squid3 configured as a transparent proxy on a linux server.
I am trying to allow automatic updates of windows (currently disabled), java and antivirus programs to pass through.
The automatic ...
- 1
0
votes
0
answers
7k
views
configure NGINX to work with squid
I have squid running on one server(192.168.29.246) with sslbump enabled.
I configured nginx(192.168.29.245) in the other server and i want it to work in front of squid.
However, only the ...
- 101
0
votes
1
answer
931
views
glype proxy script with squid optimising web Delivery
I'm trying to utilize squid : Optimising Web Delivery with Glype® Proxy Script.
include/init.php (Custom browser - set up defaults):
if ( ! isset($_SESSION['custom_browser']) ) {
$_SESSION['...
- 13.4k
0
votes
1
answer
2k
views
Pfsense Squid external ACL with a php script
I want to use a PHP script to allow or deny Squid proxy request ina pfsense installation, so I'm using this configuration for external ACL:
external_acl_type mysqlAuth %SRC /usr/local/bin/php -f /var/...
- 1,322
0
votes
2
answers
508
views
Why squidguard tell me default acl is missing but it isn't?
I have a problem with squidguard when i want to create .db files.
When i do :
squidGuard -c "/etc/squid3/squidGuard.conf" -C all -d
It tell me :
squidGuard: FATAL; default acl not defined in file ...
0
votes
0
answers
1k
views
Squid3 don't caching, always TCP_MISS/200
I have installed Squid3 and now I wont set it to caching WMTS's.
This is valid WMTS service url http://mapy.geoportal.gov.pl/wss/service/WMTS/guest/wmts/ORTO and here is link to image from this ...
- 133
0
votes
0
answers
570
views
Basic ncsa authentication is not workling in squid
I'm using squid-3.3.8-12.el7_0.x86_64 on CentOS 7
I've configured squid for basic authentication, md5 password works, but if fails when I try to use either blowfish or sha password.
Below is the ...
- 702
0
votes
0
answers
1k
views
Maximum number of HTTP request in squid proxy server
I have single Squid 3.4 instance running on Ubuntu Linux server. It is running in forward proxy mode and it is intercepting all HTTPS traffic.
I am currently load testing squid setup. My setup is as ...
- 101
0
votes
2
answers
4k
views
Convert HTTP request to HTTPS through Apache and Squid
We have a service running internally that needs to upload files to S3 and all outgoing traffic currently routes through a Squid server I manage. The service that sends the files only supports HTTP but ...
user265260
0
votes
0
answers
1k
views
LVS + keepalived for load balancing transparent SQUID proxies
I need to load balance a number of SQUID proxies configured in transparent mode. Below is a simple diagram with one LB and SQUID boxes.
----------
| Client |
...
- 1
0
votes
0
answers
355
views
Creating a Remote Desktop Session from within an EC2 server, not to it
Ok, I'm having problems answering this because I can't figure out how to word it. Most questions about "remote desktop" and "ec2" focus on remoting into an ec2 instance, which isn't necessarily what I ...
0
votes
1
answer
4k
views
Allow Google apps and block consumer Google accounts using squid proxy
In my organisation, I am trying to allow the Google apps account and block consumer Google accounts using squid proxy. According to this link, Google says we can do it using following steps:
Route ...
- 101