Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

15
votes
3answers
35k views

Getting Squid to authenticate with kerberos and Windows 2008/2003/7/XP

This is something I setup recently and was quite a big pain. My environment was getting squid to authenticate a Windows 7 client against a Windows 2008 Server invisibly. NTLM is not really an ...
12
votes
2answers
3k views

The Story of secure user-authentication in squid

once upon a time, there was a beautiful warm virtual-jungle in south america, and a squid server lived there. here is an perceptual image of the network: <the Internet> ...
11
votes
7answers
3k views

How can I balance incoming web traffic amongst N apache servers?

I am looking to use something like Heartbeat/Squid/Varnish/etc to balance the amount of incoming traffic amongst the internal apache instances. This would have to be software and not hardware as all ...
8
votes
3answers
8k views

How can I prevent squid from being detected?

I've set up a proxy server on AWS in the US in order to allow me to browse the american internet from the UK, however I would like to hide this so that the reverse end cannot detect I am using squid. ...
7
votes
5answers
5k views

Squid or Other HTTP Caches with SSD Cache Store?

I'm contemplating setting up a squid (or possibly varnish) cache on a system with SSD drives. The obvious benefit is that these systems have great READ speeds and I expect my hit ratios to be fairly ...
6
votes
2answers
16k views

How to prevent squid from caching and just filter?

I have set a proxy server on my network. I only want to filter the web traffic. So, I have Squid as a proxy and Qlproxy as the filter : http://www.quintolabs.com/qlicap_info.php My server have only ...
6
votes
2answers
12k views

How can I cache YouTube videos with Squid Cache?

we're using the Squid cache in our company. Is there any way we can cache YouTube videos? cheers :)
6
votes
2answers
5k views

Squid not caching

I am trying to configure Squid as a caching server. I have a LAN where The webserver (apache) is at 192.168.122.11 squid is at 192.168.122.21 and my client is at 192.168.122.22. The problem is, when I ...
6
votes
1answer
534 views

Upside Down Ternet

It's that time of year again, and I'm working on setting up a temporary CentOS box to act as a proxy for SOME websites (not all) in our corporate environment Monday morning (Ok, Sunday is April 1st, ...
6
votes
1answer
513 views

Squid 3 reloading makes it stop serving requests

So, we use Squid 3 here (3.0.STABLE8-3+lenny4), pretty standard configuration (no dansguardian or similar) + NTLM authentication with LDAP background, circa 1000 users on a busy day, and our acls ...
5
votes
7answers
4k views

Why would I use Squid?

I have Googled, searched StackOverflow and here. Still I can not fully understand what or why someone would use Squid. All I can find out so far is that it is some sort of cache that can make it less ...
5
votes
1answer
5k views

Can nginx listen on port 80, but send upstream to backend using SSL on 443?

For PCI compliance, my application is forced to use a secure/encrypted connection between the reverse proxy server and backend app server, whereas the connection coming into the reverse proxy is on ...
5
votes
2answers
3k views

How to get Squid to not cache files with certain extensions?

I've found information on how to keep squid from caching domains/IP addresses, however, that's not quite what I want. I'd like to prevent it from caching .jnlp and .jar files. The core problem being ...
5
votes
4answers
2k views

Mitigate DDoS attack with HAProxy [duplicate]

We were targeted earlier today by a DDoS attack. There was 20x as many connections as normal on our load balancer (HAProxy), and all the backend nodes continued to go down during this attack. System ...
5
votes
9answers
1k views

How do I tell if I would benefit from a Squid?

Is there a good way to tell if my network users would benefit from a squid cache? I assume setting one up and looking at it's logs would tell me, but at that point I may as well finish. The network ...
5
votes
1answer
2k views

“apt-get source” cannot find package but “apt-get install” and “apt-get cache” can find it

I'm trying to download the source of a package but when I run root@proxy:~# apt-get source squid3 Reading package lists... Done Building dependency tree Reading state information... Done E: Can not ...
5
votes
2answers
7k views

Apache2: Limit simultaneous requests & throttle bandwidth per IP/client?

I want to limit simultaneous requests & throttle bandwidth per IP/Client on a single apache vhost. In other words, I want to ensure that this site, which hosts large media files, doesn't get ...
5
votes
5answers
6k views

Squid to cache youtube and windows update content

I Have a squid server (transparent) and I want to cahce youtube videos and windows updates. I know that someone has posted a similar question and I have looked at this post but I am configuring this ...
5
votes
1answer
4k views

Limit bandwidth per IP address in Squid

I am having Squid 3.1.18 installed. I want to limit the maximum bandwidth any IP can use to 128 Kbps. Is it possible using squid ? I am not using squid authentication so identifying users and ...
5
votes
3answers
2k views

Squid authentication encryption

I use Squid and the users must authenticate. The users are authenticating in cleartext. I found tutorials about stunnel (http://www.jeffyestrumskas.com/?page_id=3), but the clients also need this ...
5
votes
3answers
4k views

Squid Proxy Antivirus - Recommendations / Performance [closed]

Due to our user's increasing expertise at downloading virus and the like, we are investigating adding Antivirus to our Squid proxy. A casual Google reveals several free and one paid: HAVP ...
5
votes
8answers
9k views

Adding an HTTP request header with Squid

I want to permit my users to login to Google apps only for my domain. I found a solution by adding the HTTP header X-GoogApps-Allowed-Domains as described in this Google help page. I use Squid, but ...
5
votes
3answers
8k views

How do I log authentication attempts with samba?

I have users authenticating with squid (NTLM) to an Active Directory server using Samba 3.5.4 and I'd like to log users' login attempts. I'd like a line showing something like: TIMESTAMP ...
5
votes
3answers
3k views

Squid, authentication, Outlook Anywhere, Windows 7 and HTTP 1.1 = NIGHTMARE

I'm running a Squid proxy (latest version, 3.1.4) on Linux CentOS 5.4 with Samba 3.5.4, in order to allow authenticated web access for domain users; everything works fine, and even Windows 7 clients ...
5
votes
1answer
10k views

Configure Squid as an HTTPS forward proxy?

Here's some background about my problem: I have a web service running on Heroku, with a dynamic IP address. Static IPs on Heroku are not an option. I need to connect to an external web service which ...
5
votes
1answer
646 views

Squid + ClamAV + i-cap: Scanning proxy for uploaded files?

I'm trying to configure a virus scanning proxy server specifically to scan files being uploaded. Scanning flies being downloaded seems to be the common use case, and seems to be well documented. Not ...
4
votes
3answers
551 views

What is the best way to automatically configure Windows desktops and laptops in an AD environment to use a proxy server?

I have recently setup a Squid proxy server for caching purposes and would like to start pointing my desktops and laptops to it. My computers are running Windows XP with IE8 and Windows 7 with IE9.
4
votes
7answers
2k views

Scaling large file downloads?

We currently deliver large (1GB+) files via a single Apache server, but our Apache server is extremely disk-IO-bound and we need to scale. My first idea was to simply duplicate this Apache server, ...
4
votes
3answers
3k views

Allow Facebook access only in specific hours of the day with squid

I've been able to install squid on my Ubuntu Server with basic authentication and everything works perfectly. Recently the boss asked to block facebook access and I did it with no problems. Now it ...
4
votes
1answer
2k views

Squid cannot cache static files with query string

I'm having an issue here. i setup my router with squid transparent proxy and also to do static files caching. It can cache static files successfully. But it cannot cache static file with query ...
4
votes
1answer
14k views

Squid as Socks5 Proxy server [closed]

One of my friends lives in a country which they censor websites and they are fighting with techniques that people use to bypass the censorship. He told me that the only way that he can bypass the ...
4
votes
1answer
1k views

iptables refuses connections to squid port on CentOS 5.5

I installed squid on a fresh CentOS 5.5 and added this rule for iptables: -A RH-Firewall-1-INPUT -m state --state NEW,ESTABLISHED,RELATED -m tcp -p tcp --dport 8080 -j ACCEPT Using this HOWOT: ...
4
votes
3answers
15k views

How to setup client for squid transparent proxy?

Server Details Squid Transparent Proxy Version: 3.3.8 OS: Ubuntu Server 14.04 Server IP: 192.168.1.3 Squid config file (excluding comments using grep) root@ubuntu:~# grep -v '^$\|^\s*\#' ...
4
votes
1answer
2k views

Squid3 not caching larger files

I try to use squid to cache rpm packages fetched from a yum repository. With the following configuration, it works well for a small rpms, but it would not cache larger ones like openjdk. From the log ...
4
votes
1answer
446 views

Running pfSense server after load balancer, dhcp?

I got the following situation: Two wan, load balanced by a hardware load balancing router Wifi network (can be up to twenty AP's) And I need the following: Need a captive portal where clients ...
4
votes
2answers
2k views

Squid Proxy - Hiding the proxy

I have setup squid proxy on an ubuntu server with DB authentication. However, whilst connected to the proxy, if I visit http://www.whatismyip.com/ it still shows my ACTUAL ip address. How can I ...
4
votes
2answers
839 views

SELinux & ncsa_auth in Squid

I'm trying to enable SELinux on a CentOS 5.5 server with Squid 3.1.12 that handles authentication via ncsa_auth. When I turn off SElinux everything works fine, but when I enable it, Squid crashes on ...
4
votes
1answer
4k views

maximum number of connections Squid

I have a Squid proxy server that controls all internet traffic for my network. I need a way to stop users from downloading big files (say >50MB) in my network. I banned some famous ports (e.g. ...
4
votes
1answer
2k views

Squid proxy not caching anything

squid.conf: http_access allow all # Squid normally listens to port 3128 http_port 3128 accel defaultsite=localhost no-vhost cache_peer localhost parent 80 0 no-query originserver name=myAccel ...
4
votes
1answer
3k views

Config squid for Windows with basic authorization, but squid still denied access after I input correct username/password

I installed squid-2.7-stable8 for Windows, try to let only authorized user can access the internet. But unfortunately after I entered username/password in client browser, squid still return HTTP 403 ...
4
votes
1answer
2k views

squid: allow only certain youtube videos (solved for FF, not working on IE)

At my job, I'm not the systadmin but a linux programmer. But once in a while the sysadmins (who generally aren't that knowledgeable about linux) ask me for help. Today the sysadmin asked me to allow ...
4
votes
1answer
3k views

How can I inspect why Active Directory can't use kerberos and fallsback to NTLM?

I have been trying to get squid running with kerberos auth for a few days but I'm in some trouble. The problem has been asked and replied many times on both the squid-users list and on the web, I have ...
4
votes
5answers
1k views

Which version of squid should I choose?

There are 3 squid releases in squid's official website: 2.7, 3.0 and 3.1. I am confused, which one should I choose?
4
votes
1answer
679 views

Need help with ntlm auth in Squid 2.7 and Active Directory group permission

I'm having problems with squid and NTLM auth, I already have ntlm auth (http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ntlm) working so only logged users to the AD can navigate through the ...
4
votes
1answer
540 views

How can I make squid add its own http header to the reply, based on ACL?

I have a Squid server at work doing Squid-ly things. I need to have Squid reply with a particular header based on matching an ACL. The header is a custom one that will look something like ...
4
votes
2answers
3k views

Why is squid breaking kerberos/NTLM auth?

I'm using squid 2.6.22 (Centos 5 Default) as a proxy. Squid seems to break the authentication process for web pages when they require NTLM or Kerberos Auth. I tested with sharepoint 2007 and tried all ...
3
votes
4answers
7k views

Is there any way to cache HTTPS requests in a proxy server?

We are using Squid proxy server in our environment and we want to cache HTTPS requests. Is there any way to configure Squid or in general a proxy server to cache HTTPS requests?
3
votes
5answers
4k views

Squid equivalent for Windows?

We are planning to move some of our Linux services to a Windows platform. What is the equivalent solution on the Microsoft platform to setup a web cache for outgoing traffic?
3
votes
6answers
5k views

Force clients to use proxy

Here's my network configuration: The proxy server is running Ubuntu with Squid on port 3128 and DansGuardian on port 8080. I'd like to force all clients to use the proxy server - specifically, ...
3
votes
1answer
10k views

how to make squid work like proxy only, without caching anything [duplicate]

Possible Duplicate: How to prevent squid from caching and just filter? I want to make squid work purely as a proxy, so that it does not cache anything. Is such a usage of squid possible? ...