Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

5
votes
1answer
6k views

Can nginx listen on port 80, but send upstream to backend using SSL on 443?

For PCI compliance, my application is forced to use a secure/encrypted connection between the reverse proxy server and backend app server, whereas the connection coming into the reverse proxy is on ...
11
votes
1answer
24k views

How to prevent squid from caching and just filter?

I have set a proxy server on my network. I only want to filter the web traffic. So, I have Squid as a proxy and Qlproxy as the filter : http://www.quintolabs.com/qlicap_info.php My server have only ...
2
votes
2answers
5k views

Squid Proxy Server: limit total bandwidth

We have a marvellous squid proxy with dansguardian for filetering and they both work just great. Is there any easy way to limit the total bandwidth usage? I'd like to set the max amount of squid users ...
6
votes
2answers
14k views

How can I cache YouTube videos with Squid Cache?

we're using the Squid cache in our company. Is there any way we can cache YouTube videos? cheers :)
11
votes
3answers
12k views

How can I prevent squid from being detected?

I've set up a proxy server on AWS in the US in order to allow me to browse the american internet from the UK, however I would like to hide this so that the reverse end cannot detect I am using squid. ...
3
votes
1answer
2k views

Squid and Active Directory authentication

I want to integrate a Squid proxy with an Active Directory domain, so that the following is achieved: I can grant/deny access to web sites based on user accounts and/or groups. Domain users don't ...
1
vote
3answers
4k views

How to block Skype using Squid?

Is there a way to block Skype using Squid?
0
votes
1answer
565 views

Squid configuration for proxy server

I have a server with 10 ip's that I want to give access to some friends via authentication but I'm stuck on squid's config file. Let's say I have these ip's available on my server: 212.77.23.10 212....
15
votes
3answers
40k views

Getting Squid to authenticate with kerberos and Windows 2008/2003/7/XP

This is something I setup recently and was quite a big pain. My environment was getting squid to authenticate a Windows 7 client against a Windows 2008 Server invisibly. NTLM is not really an option,...
9
votes
5answers
5k views

Squid or Other HTTP Caches with SSD Cache Store?

I'm contemplating setting up a squid (or possibly varnish) cache on a system with SSD drives. The obvious benefit is that these systems have great READ speeds and I expect my hit ratios to be fairly ...
3
votes
2answers
1k views

active directory + squid planning for a large network with over than 7000 users

We have about 1600 active nodes and 6000 students in our network and we have a great Cisco backbone, we have 8 faculties (they have sites and wireless access points) and 10 centers like hospital. We ...
1
vote
3answers
3k views

Integration of Active Directory, Squid and traffic shaper (like MikroTik)

We have a large network in our university with about 10000 users. We have an AD and wants to use a Squid server for caching and NTLM authentication. We have 40 Mbit/s Internet too, we are going to ...
14
votes
2answers
4k views

The Story of secure user-authentication in squid

once upon a time, there was a beautiful warm virtual-jungle in south america, and a squid server lived there. here is an perceptual image of the network: <the Internet> ...
4
votes
2answers
6k views

maximum number of connections Squid

I have a Squid proxy server that controls all internet traffic for my network. I need a way to stop users from downloading big files (say >50MB) in my network. I banned some famous ports (e.g. ...
2
votes
1answer
19k views

How to configure PFSense firewall with external transparent Squid proxy?

I am using PFSense 2.0 and trying to get transparent proxy to work. As the internal Squid won't work with loadbalancing and dual-wan (and it seems Squid doesn't work at all on the latest build), I ...
2
votes
1answer
3k views

IPTABLES: routing VPN users through transparent Squid

I'm hoping someone can help me out - I've been tearing my hair out over this! I have pptpd and squid set up. I want give these users access to the internet, but would like to send http traffic ...
1
vote
1answer
5k views

Multiple SSL certificates with Squid reverse proxy

I have been upgrading my network from using an apache reverse proxy (Not quite powerful enough) to a Squid proxy configured just for reverse use. My squid proxy is on a CentOS 6 VM, and currently ...
1
vote
1answer
7k views

Limiting bandwidth dynamically in Squid

In fact my problem is with users who download large files from internet in my network. I have a Squid cache/proxy server in my network that is placed between my network and the Internet. I thought ...
0
votes
1answer
1k views

How do I configure Squid Proxy located at a different location to route internet traffic?

I have a Linux box (Ubuntu 9.10) at a different location. I installed squid proxy and tried using that IP and port (opened 3128 at that location) in Firefox. I can't get it to work. My current ...
3
votes
2answers
5k views

reverse proxy on PFsense, squid or otherwise

I've been trying to get this to work for days now and its not working. After bashing my head against the desk enough times, I've decided to man up and ask. I'm desperately trying to set up a reverse ...
3
votes
1answer
1k views

Encrypt client connection with squid forward proxy using SSL

I'm setting up a Squid forward proxy and I'm wondering if I could configure Squid in such a way that the connection from my web browser to squid is https regardless of whether the connection from ...
2
votes
2answers
3k views

maximum number of squid proxy connections

What is the maximum number of connections squid can support at a time? There are 5000 users in a campus so how many squid proxy systems will I need?
1
vote
1answer
1k views

Is there a way i can see why Squid (Proxy Server) determines why a resources should be a MISS?

I'm using Fiddler/FireBug to debug some of our live server web content. We're getting a lot of :- X-Cache: MISS from X-Cache-Lookup: MISS from :8080 Via: 1.1 :8080 (squid/2.7.STABE3) I thought i ...
1
vote
3answers
12k views

Remove X-Forwarded-For header in Squid 3.0

Some months ago I was working with Squid 3.0 and managed to get rid of the X-Forwarded-For header completely. Now I am trying to do the same thing but I do not seem to hit the nail. I have tried ...
1
vote
1answer
6k views

HTTPS is not working in transparent proxy with Squid

I am using Squid proxy 3.1, all systems in the LAN connects to the internet through proxy. Direct connection is blocked using the iptables from the gateway server. There are some devices which does ...
1
vote
2answers
2k views

Squid client purge utility

I've been using the purge utility ie. squidclient -m PURGE http://www.mysite.com/ The above command will purge that exact link but it leaves everything else under it in the cache. (eghttp://www....
1
vote
2answers
943 views

Squid proxy refusing to revalidate cache when Vary header present

squid.conf cache_effective_user squid http_access allow all # Squid normally listens to port 3128 http_port 3128 accel defaultsite=localhost no-vhost ignore-cc cache_peer localhost parent 80 0 no-...
1
vote
1answer
402 views

Caching large amounts of data

We need to cache all psd/zip files from our amazone S3 storage. The amount of the cache between 150-200 Gb (we need to store files at least 2 month). Now we use transparent proxy squid without any ...
1
vote
2answers
2k views

squid: can't connect to peer with tcp_outgoing_address

I encountered the problem with configuration of two squid servers. I have the following scheme - The main idea is to download all files from rackspace and amazon through parent squid and store all ...
0
votes
1answer
1k views

Using squid to anonymize HTTP traffic

I'm trying to set up a SQUID server on Ubuntu to anonymize all HTTP traffic. The goal is to hide the source IP make all the requests appear to be generated from the SQUID porxy. I tried with the ...
0
votes
1answer
541 views

Squid Session User Authentication

I installed Squid Transparent with Session External helper [1]. Then I created a PHP login page and user can login with his UserName, Password. But the problem is that when user login via his correct ...
0
votes
1answer
2k views

winbind and squid problem

I've have squid configured with auth in the AD via winbind now I have wired problems with authorisation I found in the logs interesting string kinit succeeded but ads_sasl_spnego_krb5_bind failed: ...
0
votes
1answer
445 views

Block HTTPS traffic to only selected sites

The Squid at my office is currently set up as a transparent proxy. I tried to block sites like facebook.com and twitter.com and was successful because just typing in those domains do not default to ...
0
votes
1answer
109 views

I want to proxy only HTTP but I'm not sure what to do with HTTPS traffic

I have a DNS server that resolves all traffic to my Squid server that will proxy all HTTP traffic transparently (it must be transparent or it will drop a invalid url error) which works great. The ...
0
votes
2answers
2k views

iptables for transparent NAT

I'm trying to transparently route traffic of one Xen VM through another, like so: ------- 192.168.250.4 192.168.250.3 --------- | VM1 | <-----------------bridged----------------...
0
votes
1answer
427 views

Squid Regular Expression Folder Range

I am building a squid reverse proxy. to balance between 2 servers with different files. Server 1 contains 500 folders ranging from 000 - 499. Server 2 had 500 folders ranging from 500 - 999. I'm ...