Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

-1
votes
1answer
1k views

Squid forward cache to HAProxy load balancer

I have a farm of Squid proxies set up behind an HAProxy load balancer. I would like to cache data that is returned from the Squid proxies, the architecture I am considering would look something like ...
3
votes
2answers
11k views

Squid throws error, The requested URL could not be retrieved

Sometimes I am getting the following error The requested URL could not be retrieved While trying to retrieve the URL: http://groups.google.com/ The following error was encountered: Unable to ...
0
votes
1answer
1k views

Squid proxy keberos active directory authenticate

I'm using ubuntu server 14.04 with a Windows 2008 Server which has Active directory and the DNS role setup for this task. I've setup the domain correctly as far as I can make out with Pbis-open with ...
1
vote
2answers
3k views

iptables block client ip internet access and keep LAN access

With the increase of appliances having network access and the potential for hacking, I want to block specific ip address from accessing the internet, but allow LAN access. For instance, I use a ...
0
votes
0answers
11 views

Squid SSL Bump and EV certificates

I have a Squid proxy, with SSL-bump enabled, and ssl_crtd running. I have then pushed a group policy so the CA root certificate has a "Certificate Policy" with a specific OID x, and then added this ...
4
votes
1answer
2k views

Squid SSL transparent proxy - SSL_connect:error in SSLv2/v3 read server hello A

I am trying to setup a SSL proxy for one of my internal servers to visit https://www.googleapis.com using Squid, to make my Rails application on that server to reach googleapis.com via the proxy. I ...
1
vote
1answer
4k views

Squid SSL bump with parent proxy

Does SSL bumping work with parent proxy? squid and pf are set up like this: squid.conf: http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on ...
0
votes
1answer
42 views

Need help squid/firewalld on CentOS 7 as dns, ftp, http, https transparent proxy

I have installed squid v3.3.8 on CentOS 7 that has two interfaces as follows: internal interface: ens32 external interface: ens33 > masquerade is enabled here First of all, I ...
8
votes
1answer
4k views

Squid3 not caching larger files

I try to use squid to cache rpm packages fetched from a yum repository. With the following configuration, it works well for a small rpms, but it would not cache larger ones like openjdk. From the log ...
0
votes
2answers
1k views

Diasable Cache on Squid Proxy

I have Squid Proxy setup on a windows server with 4 ip addresses available on it. In the config file, squid listens to 4 different ports and assigns an outgoing ip address from the 4 available, ...
1
vote
2answers
8k views

How To Enable URL Filtering With Just Squid & C-ICAP

Before I posted this question, I read several set up guides online, the squid docs, c-icap docus, and also the ICAP RFC (3507). Unfortunately, the documentation for SQUID and C-ICAP does not provide ...
0
votes
0answers
21 views

403 Forbidden Tunnel in ATS - Apache Traffic Server log

I have a remap.config file map https://www.somesite.com/ https://www.internalsite.com/ and I also have CONFIG proxy.config.http.connect_ports STRING 443 in records.config However, I'm still ...
-1
votes
1answer
582 views

How to block videos by title on youtube using Squid?

For example,i want to block videos that contain the word "cat" in the title. I also do not want the blocked videos appearing in: -Recommended Channels tab -Recommended/related videos -Search ...
0
votes
0answers
4 views

What is the difference between the client and server counters in Squid?

We have a Squid instance running at the company, and I understand I can get a lot of metrics out of Squid by using the Squidclient. For instance if I run: squidclient -h localhost -p xxxx ...
0
votes
1answer
1k views

How do I configure Squid Proxy located at a different location to route internet traffic?

I have a Linux box (Ubuntu 9.10) at a different location. I installed squid proxy and tried using that IP and port (opened 3128 at that location) in Firefox. I can't get it to work. My current ...
3
votes
1answer
1k views

Macs behind a proxy, using squid for SSL and HTTP traffic

There appears to be an NTLM bug in OSX in how authentication is handled with our corporate proxy. On several Macs (and iDevices) Safari, iTunes, Software Updates, AppStore etc all crash when they ...
2
votes
1answer
241 views

iPad's Safari does not remember server proxy configuration

I block all direct internet traffic of my company's network. Everybody now must use a proxy, but in all iPads, I can not solve this trouble: iPad works, but can not save proxy authentication then ...
-1
votes
0answers
10 views

Squid sibling only-if-cached error

I configured Squid as a transparent proxy. In my network topology, I used 2 squid to make a coordinating caching system. The relationship between 2 Squid proxy is Sibling ( Squid A <-> Squid B ). ...
0
votes
1answer
1k views

Allow Google apps and block consumer Google accounts using squid proxy

In my organisation, I am trying to allow the Google apps account and block consumer Google accounts using squid proxy. According to this link, Google says we can do it using following steps: 1. ...
4
votes
2answers
4k views

Squid HTTPS Tunnelling using CONNECT very slow

I use squid on my network to cache content. I launch chrome with a command line switch that tells it to use the proxy. For the most part this works great as squid caches a large amount of content ...
0
votes
0answers
9 views

Listener Protocol for ELB in front of Squid Proxy

We have two Squid proxy servers for High availability. We want to use Amazon ELB in front of these Squid proxy servers. When we use Load Balancer Protocol as TCP and port 8080, Instance Protocol TCP ...
0
votes
1answer
2k views

Linux webfilter with LDAP SSO authentication

I'm looking for a self-made linux proxy/webfilter server and stumbled upon several products. (squidguard, dansguardian, ..) I found Privoxy the most appealing. Now I went searching on the internet for ...
0
votes
0answers
36 views

Can haproxy perform ssl termination for forwarding to (squid) proxy servers?

I understand that haproxy can perform ssl termination for load balancing web servers, but is it possible to perform ssl termination when load balancing squid proxy servers? My scenario is that I have ...
1
vote
1answer
4k views

How do I tunnel an HTTPS proxy through a virtual machine (VMWare)

I have a personal setup at home using VMWare Workstation. I also have a set of Virtual Private Machines that run Squid, and therefore provide me HTTPS proxy tunnels. Using Proxifier, I can tunnel all ...
0
votes
2answers
3k views

Squid3 'The proxy server is refusing connections'

Whenever I try to connect to my Squid3 Proxy server, I get the 'Proxy server is refusing connections' error. Here's my config: #Recommended minimum configuration: acl manager proto cache_object ...
0
votes
1answer
7k views

Squid: what does TCP_MISS/504 mean?

I use squid to set up a proxy but the access.log shows thant the status is TCP_MISS/504 thanks
2
votes
1answer
1k views

Encrypt client connection with squid forward proxy using SSL

I'm setting up a Squid forward proxy and I'm wondering if I could configure Squid in such a way that the connection from my web browser to squid is https regardless of whether the connection from ...
4
votes
1answer
1k views

Squid 3.2 - Proper configuration for random outbound IP with a single user authentication?

I'm attempting to use AclRandom for Squid 3.2 and I think I'm a bit confused on the proper method for this. Here is my configuration: http_port 3128 auth_param basic program ...
0
votes
0answers
21 views

squid forward proxy with SSL offload

What I need is similar to Forward proxy for webservices with SSL client certs. Tactically, it is similar to SSL offload, but for a forward proxy and not a reverse proxy. I have an application (that ...
1
vote
1answer
2k views

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s ...
0
votes
2answers
5k views

TCP port numbers reused and TCP Retransmission

Facing issues due to TCP Port Reuse and Retransmission for HTTP traffic. My deployment is as follows: I have a squid proxy installed on a unix machine which is sending handling http requests ...
3
votes
1answer
1k views

Limit number of simultaneous connections squid makes to a single server

Note: I am asking about outbound concurrent connection limits, not inbound, which is sufficiently covered on existing questions Modern browsers typically open a large number of simultaneous ...
1
vote
2answers
33 views

How to calculate ulimit -n (file descriptors) for a dedicated squid server

I have a production squid server that was having some issues serving content and reporting that it was out of file descriptors. I was successfully able to increase it from 1024 (default) to 4096 and ...
1
vote
1answer
35 views

How to forward HTTPS traffic through squid transparently?

I want to redirect all HTTP and HTTPS traffic to squid acting as a transparent proxy. This traffic will then be blocked or authorized (in bulk) during certain hours. Specifically I do not want to ...
0
votes
0answers
31 views

HAProxy with multiple squid backend proxies

I have HAProxy with a bunch of squid proxies in the backend fqdn:port. Using the method here: Authenticated proxies on HAProxy load balancer I can send authentication for the proxies but I can only ...
1
vote
2answers
2k views

Working configuration for transparent FTP caching proxy with Squid3 and IPTABLES

Does anyone have Squid3 working to successfully cache FTP requests coming in transparently? Should the proxy still listen on 3128, and I redirect incoming reuests on 21 to 3128?
0
votes
3answers
1k views

Squidanalyzer error

I installed squidanalyzer-5.4.tar.gz, following this tuto http://squidanalyzer.darold.net/install.html and setting as recommandation but when I run http://testserver.com/squidreport I get error below ...
2
votes
3answers
3k views

Squid traffic tunneled through VPN

So what I'm trying to do is have a Squid Proxy run on 1 machine along side a VPN connection. What I want to happen is all traffic running though the Squad Proxy would run though the VPN for its ...
1
vote
1answer
31 views

Squid3 doesnt serve youtube content from cache [closed]

I am trying to cache a youtube video (served from .googlevideo.com/) on squid proxy and want to ensure that when I access youtube video/audio from the same url again, it will be served from squid ...
0
votes
2answers
3k views

Squidguard + LDAP (Active Directory) not working

I've been trying to configure a squid with squidguard and MS AD. I've successfuly linked my squid with my AD so far, but now, I want to link my squidguard with the active directory. I've followed ...
1
vote
1answer
1k views

how to configure squish for squid proxy server

Since this question is related to server, also for ubuntu, so i am little bit confused for where to ask this question. SO i decided to ask this question on serverfault. I am currently using squid ...
1
vote
1answer
1k views

Squid3 CONNECT imap.gmail.com:993 TCP_DENIED:NONE

I have the following configuration under squid.conf. However, when my Blackberry email client attempts to fetch new emails, etc. Squid access log show the following error: imap.gmail.com "CONNECT ...
0
votes
0answers
9 views

Differentiate response of Squid reverse proxy server and a web server behind the Squid

When we do a GET method request on a browser that is configured to use a proxy, can we tell from the response headers(Chrome Dev Tools) that the response came from a Squid proxy server and not the ...
0
votes
1answer
3k views

What “traffic flow” would be right in a transparent “squid + dansguardian” pfsense setup?

my thought (i'm not sure if its right): lan interface traffic comes into port 80 destination port is redirected to 8080 (dans guardian) dansguardian outputs traffic to port 3128 (squid) squid ...
3
votes
1answer
88 views

Squid proxy - Find urls that are consuming the most bandwidth

I have squid proxy setup on my home network (squid is running on Ubuntu server, 14.04). Right now our home internet usage is about 2TB per month. I would like to find out which sites/urls/domains are ...
1
vote
1answer
2k views

squid + pfsense user authentication

I'm having a very strange problem with squid 3 and pfSense. Since I'm using a community created squid3 package for pfSense I'm not willing to rule out the possibility that it's a bug in the pfSense ...
0
votes
1answer
1k views

VPN client blocked through squid server

I have a computer running debian between the local network and the load balancer who connects to the internet. Everything is fine, that computer has a Squid running inside, BUT we have a problem with ...
0
votes
0answers
9 views

Squid no persistent connection with method OPTIONS

Hi all I have a problem I am using squid 3.1.19, the problem is that the use of the OPTIONS method does not create a persistent connection connectio:Keep - alive if not it returns me a connection: ...
0
votes
0answers
16 views

Is Sonicwall SSL Decryption and Inspection the same function as Using a Transparent Proxy and Swapping out the Certificate with Squid 3?

I was wondering if Sonicwall SSL Decryption and Inspection is the same function, mainly; swap out the issued SSL certificate and decrypt traffic while issuing a local SSL certificate to the calling ...
0
votes
0answers
34 views

Redirect locally generated HTTPS traffic through external proxy

I have a configuration like this: Internet | Public Zone | Private Zone IP x.x.x.x |<--- Forward Proxy / WebCache | <--- Linux Server (RedHat) ...