Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

15
votes
3answers
41k views

Getting Squid to authenticate with kerberos and Windows 2008/2003/7/XP

This is something I setup recently and was quite a big pain. My environment was getting squid to authenticate a Windows 7 client against a Windows 2008 Server invisibly. NTLM is not really an option,...
14
votes
2answers
4k views

The Story of secure user-authentication in squid

once upon a time, there was a beautiful warm virtual-jungle in south america, and a squid server lived there. here is an perceptual image of the network: <the Internet> ...
13
votes
5answers
40k views

What is a good SQUID Logs Analyzer? [closed]

Can anyone recommend me a good tool for analyzing squid logs ? I'm currently using SARG. Is there something better? I need to easily see what sites were visited/denied, when and by whom. There is ...
13
votes
2answers
4k views

Varnish versus other reverse proxies

I'm working with an organisation that has deployed Varnish as a caching reverse proxy for all of their web traffic. Their traffic make up is a lot of customer-generated dynamic websites, with the ...
11
votes
3answers
12k views

How can I prevent squid from being detected?

I've set up a proxy server on AWS in the US in order to allow me to browse the american internet from the UK, however I would like to hide this so that the reverse end cannot detect I am using squid. ...
11
votes
1answer
24k views

How to prevent squid from caching and just filter?

I have set a proxy server on my network. I only want to filter the web traffic. So, I have Squid as a proxy and Qlproxy as the filter : http://www.quintolabs.com/qlicap_info.php My server have only ...
11
votes
7answers
4k views

How can I balance incoming web traffic amongst N apache servers?

I am looking to use something like Heartbeat/Squid/Varnish/etc to balance the amount of incoming traffic amongst the internal apache instances. This would have to be software and not hardware as all ...
11
votes
0answers
607 views

Getting Squid and TPROXY with IPv6 working on CentOS 7

I'm having trouble getting TPROXY working with Squid and IPv6 on a CentOS 7 server. I was previously using a generic intercept setup with NAT, but it was limited to IPv4 only. I'm now expanding the ...
10
votes
3answers
78 views

Best practice for proxying package repositories

I have a collection of CentOS servers in my corporate network. For security reasons, most servers do not have general outbound internet access unless it is a core functional requirement for the server....
9
votes
5answers
6k views

Squid or Other HTTP Caches with SSD Cache Store?

I'm contemplating setting up a squid (or possibly varnish) cache on a system with SSD drives. The obvious benefit is that these systems have great READ speeds and I expect my hit ratios to be fairly ...
8
votes
1answer
5k views

Squid3 not caching larger files

I try to use squid to cache rpm packages fetched from a yum repository. With the following configuration, it works well for a small rpms, but it would not cache larger ones like openjdk. From the log ...
6
votes
1answer
6k views

Can nginx listen on port 80, but send upstream to backend using SSL on 443?

For PCI compliance, my application is forced to use a secure/encrypted connection between the reverse proxy server and backend app server, whereas the connection coming into the reverse proxy is on ...
6
votes
1answer
4k views

“apt-get source” cannot find package but “apt-get install” and “apt-get cache” can find it

I'm trying to download the source of a package but when I run root@proxy:~# apt-get source squid3 Reading package lists... Done Building dependency tree Reading state information... Done E: Can not ...
6
votes
2answers
14k views

How can I cache YouTube videos with Squid Cache?

we're using the Squid cache in our company. Is there any way we can cache YouTube videos? cheers :)
6
votes
2answers
7k views

Squid not caching

I am trying to configure Squid as a caching server. I have a LAN where The webserver (apache) is at 192.168.122.11 squid is at 192.168.122.21 and my client is at 192.168.122.22. The problem is, when I ...
6
votes
2answers
252 views

Can Squid be used as “TLS termination proxy” to encrypt TCP connections using client certificates?

Abstract I need an encrypted TCP connection from multiple clients to a single port over the internet. Can this be realized with Squid? Concrete situation We use a monitoring and client management ...
6
votes
1answer
6k views

Limit bandwidth per IP address in Squid

I am having Squid 3.1.18 installed. I want to limit the maximum bandwidth any IP can use to 128 Kbps. Is it possible using squid ? I am not using squid authentication so identifying users and ...
6
votes
1answer
671 views

Squid 3 reloading makes it stop serving requests

So, we use Squid 3 here (3.0.STABLE8-3+lenny4), pretty standard configuration (no dansguardian or similar) + NTLM authentication with LDAP background, circa 1000 users on a busy day, and our acls ...
6
votes
1answer
743 views

Upside Down Ternet

It's that time of year again, and I'm working on setting up a temporary CentOS box to act as a proxy for SOME websites (not all) in our corporate environment Monday morning (Ok, Sunday is April 1st, ...
6
votes
1answer
21k views

Configure Squid as an HTTPS forward proxy?

Here's some background about my problem: I have a web service running on Heroku, with a dynamic IP address. Static IPs on Heroku are not an option. I need to connect to an external web service which ...
6
votes
0answers
591 views

Using Squid as a maven repository

Does someone know how to use Squid to proxify maven repositories ? What are the configuration files for that ? The main problem is that maven client issue HTTP request with headers which control the ...
6
votes
1answer
871 views

Squid + ClamAV + i-cap: Scanning proxy for uploaded files?

I'm trying to configure a virus scanning proxy server specifically to scan files being uploaded. Scanning flies being downloaded seems to be the common use case, and seems to be well documented. Not ...
5
votes
4answers
12k views

Is there any way to cache HTTPS requests in a proxy server?

We are using Squid proxy server in our environment and we want to cache HTTPS requests. Is there any way to configure Squid or in general a proxy server to cache HTTPS requests?
5
votes
3answers
5k views

Allow Facebook access only in specific hours of the day with squid

I've been able to install squid on my Ubuntu Server with basic authentication and everything works perfectly. Recently the boss asked to block facebook access and I did it with no problems. Now it ...
5
votes
7answers
6k views

Why would I use Squid?

I have Googled, searched StackOverflow and here. Still I can not fully understand what or why someone would use Squid. All I can find out so far is that it is some sort of cache that can make it less ...
5
votes
6answers
5k views

For a small home network, is there any point to running Squid? [closed]

For a small home network -- two laptops, two desktops, plus the main server -- should I expect much gain by running Squid on the main server? I fully understand the value of running a caching name ...
5
votes
1answer
19k views

how to make squid work like proxy only, without caching anything [duplicate]

Possible Duplicate: How to prevent squid from caching and just filter? I want to make squid work purely as a proxy, so that it does not cache anything. Is such a usage of squid possible? How ...
5
votes
2answers
4k views

How to get Squid to not cache files with certain extensions?

I've found information on how to keep squid from caching domains/IP addresses, however, that's not quite what I want. I'd like to prevent it from caching .jnlp and .jar files. The core problem being ...
5
votes
4answers
3k views

Mitigate DDoS attack with HAProxy [duplicate]

We were targeted earlier today by a DDoS attack. There was 20x as many connections as normal on our load balancer (HAProxy), and all the backend nodes continued to go down during this attack. System ...
5
votes
9answers
2k views

How do I tell if I would benefit from a Squid?

Is there a good way to tell if my network users would benefit from a squid cache? I assume setting one up and looking at it's logs would tell me, but at that point I may as well finish. The network ...
5
votes
1answer
3k views

Squid cannot cache static files with query string

I'm having an issue here. i setup my router with squid transparent proxy and also to do static files caching. It can cache static files successfully. But it cannot cache static file with query string....
5
votes
1answer
21k views

Squid as Socks5 Proxy server [closed]

One of my friends lives in a country which they censor websites and they are fighting with techniques that people use to bypass the censorship. He told me that the only way that he can bypass the ...
5
votes
2answers
9k views

Apache2: Limit simultaneous requests & throttle bandwidth per IP/client?

I want to limit simultaneous requests & throttle bandwidth per IP/Client on a single apache vhost. In other words, I want to ensure that this site, which hosts large media files, doesn't get ...
5
votes
5answers
7k views

Squid to cache youtube and windows update content

I Have a squid server (transparent) and I want to cahce youtube videos and windows updates. I know that someone has posted a similar question and I have looked at this post but I am configuring this ...
5
votes
6answers
35k views

How to setup client for squid transparent proxy?

Server Details Squid Transparent Proxy Version: 3.3.8 OS: Ubuntu Server 14.04 Server IP: 192.168.1.3 Squid config file (excluding comments using grep) root@ubuntu:~# grep -v '^$\|^\s*\#' /etc/...
5
votes
3answers
2k views

Squid authentication encryption

I use Squid and the users must authenticate. The users are authenticating in cleartext. I found tutorials about stunnel (http://www.jeffyestrumskas.com/?page_id=3), but the clients also need this ...
5
votes
3answers
3k views

Squid Proxy - Hiding the proxy

I have setup squid proxy on an ubuntu server with DB authentication. However, whilst connected to the proxy, if I visit http://www.whatismyip.com/ it still shows my ACTUAL ip address. How can I ...
5
votes
7answers
12k views

Adding an HTTP request header with Squid

I want to permit my users to login to Google apps only for my domain. I found a solution by adding the HTTP header X-GoogApps-Allowed-Domains as described in this Google help page. I use Squid, but ...
5
votes
3answers
5k views

Squid Proxy Antivirus - Recommendations / Performance [closed]

Due to our user's increasing expertise at downloading virus and the like, we are investigating adding Antivirus to our Squid proxy. A casual Google reveals several free and one paid: HAVP squid-...
5
votes
3answers
12k views

How do I log authentication attempts with samba?

I have users authenticating with squid (NTLM) to an Active Directory server using Samba 3.5.4 and I'd like to log users' login attempts. I'd like a line showing something like: TIMESTAMP ...
5
votes
3answers
3k views

Squid, authentication, Outlook Anywhere, Windows 7 and HTTP 1.1 = NIGHTMARE

I'm running a Squid proxy (latest version, 3.1.4) on Linux CentOS 5.4 with Samba 3.5.4, in order to allow authenticated web access for domain users; everything works fine, and even Windows 7 clients ...
4
votes
3answers
575 views

What is the best way to automatically configure Windows desktops and laptops in an AD environment to use a proxy server?

I have recently setup a Squid proxy server for caching purposes and would like to start pointing my desktops and laptops to it. My computers are running Windows XP with IE8 and Windows 7 with IE9.
4
votes
7answers
3k views

Scaling large file downloads?

We currently deliver large (1GB+) files via a single Apache server, but our Apache server is extremely disk-IO-bound and we need to scale. My first idea was to simply duplicate this Apache server, ...
4
votes
1answer
1k views

iptables refuses connections to squid port on CentOS 5.5

I installed squid on a fresh CentOS 5.5 and added this rule for iptables: -A RH-Firewall-1-INPUT -m state --state NEW,ESTABLISHED,RELATED -m tcp -p tcp --dport 8080 -j ACCEPT Using this HOWOT: http:...
4
votes
1answer
608 views

Running pfSense server after load balancer, dhcp?

I got the following situation: Two wan, load balanced by a hardware load balancing router Wifi network (can be up to twenty AP's) And I need the following: Need a captive portal where clients ...
4
votes
1answer
9k views

ACL allow IP range Squid

I'm using Squid and I want to know how to make a specific IP range of allowed connections, I use this acl permittedips src 77.86.72.49 http_access allow permittedips But I want to make an range ...
4
votes
2answers
909 views

SELinux & ncsa_auth in Squid

I'm trying to enable SELinux on a CentOS 5.5 server with Squid 3.1.12 that handles authentication via ncsa_auth. When I turn off SElinux everything works fine, but when I enable it, Squid crashes on ...
4
votes
3answers
5k views

Squid running out of file descriptors on Ubuntu

I am running Squid 2.7 on Ubuntu 10.04 64bits. I had the problem of Squid running out of file descriptors, with the following error showing in /var/log/squid/cache.log: WARNING! Your cache is ...
4
votes
2answers
9k views

Modify HTML Content with Squid

We have setup our network as per the tutorial here: https://help.ubuntu.com/community/Upside-Down-TernetHowTo. Basically, we have a squid proxy that inverts images for pages that clients request. We'...
4
votes
2answers
6k views

maximum number of connections Squid

I have a Squid proxy server that controls all internet traffic for my network. I need a way to stop users from downloading big files (say >50MB) in my network. I banned some famous ports (e.g. ...