Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

learn more… | top users | synonyms

15
votes
3answers
34k views

Getting Squid to authenticate with kerberos and Windows 2008/2003/7/XP

This is something I setup recently and was quite a big pain. My environment was getting squid to authenticate a Windows 7 client against a Windows 2008 Server invisibly. NTLM is not really an ...
13
votes
7answers
29k views

What is a good SQUID Logs Analyzer?

Can anyone recommend me a good tool for analyzing squid logs ? I'm currently using SARG. Is there something better? I need to easily see what sites were visited/denied, when and by whom. There is ...
11
votes
7answers
2k views

How can I balance incoming web traffic amongst N apache servers?

I am looking to use something like Heartbeat/Squid/Varnish/etc to balance the amount of incoming traffic amongst the internal apache instances. This would have to be software and not hardware as all ...
11
votes
2answers
3k views

The Story of secure user-authentication in squid

once upon a time, there was a beautiful warm virtual-jungle in south america, and a squid server lived there. here is an perceptual image of the network: <the Internet> ...
7
votes
5answers
5k views

Squid or Other HTTP Caches with SSD Cache Store?

I'm contemplating setting up a squid (or possibly varnish) cache on a system with SSD drives. The obvious benefit is that these systems have great READ speeds and I expect my hit ratios to be fairly ...
6
votes
3answers
6k views

How can I prevent squid from being detected?

I've set up a proxy server on AWS in the US in order to allow me to browse the american internet from the UK, however I would like to hide this so that the reverse end cannot detect I am using squid. ...
6
votes
2answers
4k views

Squid not caching

I am trying to configure Squid as a caching server. I have a LAN where The webserver (apache) is at 192.168.122.11 squid is at 192.168.122.21 and my client is at 192.168.122.22. The problem is, when I ...
6
votes
1answer
470 views

Squid 3 reloading makes it stop serving requests

So, we use Squid 3 here (3.0.STABLE8-3+lenny4), pretty standard configuration (no dansguardian or similar) + NTLM authentication with LDAP background, circa 1000 users on a busy day, and our acls ...
5
votes
2answers
13k views

How to prevent squid from caching and just filter?

I have set a proxy server on my network. I only want to filter the web traffic. So, I have Squid as a proxy and Qlproxy as the filter : http://www.quintolabs.com/qlicap_info.php My server have only ...
5
votes
7answers
4k views

Why would I use Squid?

I have Googled, searched StackOverflow and here. Still I can not fully understand what or why someone would use Squid. All I can find out so far is that it is some sort of cache that can make it less ...
5
votes
1answer
4k views

Can nginx listen on port 80, but send upstream to backend using SSL on 443?

For PCI compliance, my application is forced to use a secure/encrypted connection between the reverse proxy server and backend app server, whereas the connection coming into the reverse proxy is on ...
5
votes
4answers
2k views

Mitigate DDoS attack with HAProxy [duplicate]

We were targeted earlier today by a DDoS attack. There was 20x as many connections as normal on our load balancer (HAProxy), and all the backend nodes continued to go down during this attack. System ...
5
votes
9answers
1k views

How do I tell if I would benefit from a Squid?

Is there a good way to tell if my network users would benefit from a squid cache? I assume setting one up and looking at it's logs would tell me, but at that point I may as well finish. The network ...
5
votes
1answer
2k views

“apt-get source” cannot find package but “apt-get install” and “apt-get cache” can find it

I'm trying to download the source of a package but when I run root@proxy:~# apt-get source squid3 Reading package lists... Done Building dependency tree Reading state information... Done E: Can not ...
5
votes
2answers
12k views

How can I cache YouTube videos with Squid Cache?

we're using the Squid cache in our company. Is there any way we can cache YouTube videos? cheers :)
5
votes
2answers
7k views

Apache2: Limit simultaneous requests & throttle bandwidth per IP/client?

I want to limit simultaneous requests & throttle bandwidth per IP/Client on a single apache vhost. In other words, I want to ensure that this site, which hosts large media files, doesn't get ...
5
votes
5answers
6k views

Squid to cache youtube and windows update content

I Have a squid server (transparent) and I want to cahce youtube videos and windows updates. I know that someone has posted a similar question and I have looked at this post but I am configuring this ...
5
votes
1answer
3k views

Limit bandwidth per IP address in Squid

I am having Squid 3.1.18 installed. I want to limit the maximum bandwidth any IP can use to 128 Kbps. Is it possible using squid ? I am not using squid authentication so identifying users and ...
5
votes
1answer
436 views

Upside Down Ternet

It's that time of year again, and I'm working on setting up a temporary CentOS box to act as a proxy for SOME websites (not all) in our corporate environment Monday morning (Ok, Sunday is April 1st, ...
5
votes
3answers
4k views

Squid Proxy Antivirus - Recommendations / Performance [closed]

Due to our user's increasing expertise at downloading virus and the like, we are investigating adding Antivirus to our Squid proxy. A casual Google reveals several free and one paid: HAVP ...
5
votes
3answers
2k views

Squid authentication encryption

I use Squid and the users must authenticate. The users are authenticating in cleartext. I found tutorials about stunnel (http://www.jeffyestrumskas.com/?page_id=3), but the clients also need this ...
5
votes
8answers
7k views

Adding an HTTP request header with Squid

I want to permit my users to login to Google apps only for my domain. I found a solution by adding the HTTP header X-GoogApps-Allowed-Domains as described in this Google help page. I use Squid, but ...
5
votes
3answers
7k views

How do I log authentication attempts with samba?

I have users authenticating with squid (NTLM) to an Active Directory server using Samba 3.5.4 and I'd like to log users' login attempts. I'd like a line showing something like: TIMESTAMP ...
5
votes
3answers
2k views

Squid, authentication, Outlook Anywhere, Windows 7 and HTTP 1.1 = NIGHTMARE

I'm running a Squid proxy (latest version, 3.1.4) on Linux CentOS 5.4 with Samba 3.5.4, in order to allow authenticated web access for domain users; everything works fine, and even Windows 7 clients ...
5
votes
1answer
556 views

Squid + ClamAV + i-cap: Scanning proxy for uploaded files?

I'm trying to configure a virus scanning proxy server specifically to scan files being uploaded. Scanning flies being downloaded seems to be the common use case, and seems to be well documented. Not ...
4
votes
3answers
538 views

What is the best way to automatically configure Windows desktops and laptops in an AD environment to use a proxy server?

I have recently setup a Squid proxy server for caching purposes and would like to start pointing my desktops and laptops to it. My computers are running Windows XP with IE8 and Windows 7 with IE9.
4
votes
7answers
2k views

Scaling large file downloads?

We currently deliver large (1GB+) files via a single Apache server, but our Apache server is extremely disk-IO-bound and we need to scale. My first idea was to simply duplicate this Apache server, ...
4
votes
3answers
3k views

Allow Facebook access only in specific hours of the day with squid

I've been able to install squid on my Ubuntu Server with basic authentication and everything works perfectly. Recently the boss asked to block facebook access and I did it with no problems. Now it ...
4
votes
1answer
1k views

iptables refuses connections to squid port on CentOS 5.5

I installed squid on a fresh CentOS 5.5 and added this rule for iptables: -A RH-Firewall-1-INPUT -m state --state NEW,ESTABLISHED,RELATED -m tcp -p tcp --dport 8080 -j ACCEPT Using this HOWOT: ...
4
votes
1answer
349 views

Running pfSense server after load balancer, dhcp?

I got the following situation: Two wan, load balanced by a hardware load balancing router Wifi network (can be up to twenty AP's) And I need the following: Need a captive portal where clients ...
4
votes
3answers
7k views

How to setup client for squid transparent proxy?

Server Details Squid Transparent Proxy Version: 3.3.8 OS: Ubuntu Server 14.04 Server IP: 192.168.1.3 Squid config file (excluding comments using grep) root@ubuntu:~# grep -v '^$\|^\s*\#' ...
4
votes
2answers
813 views

SELinux & ncsa_auth in Squid

I'm trying to enable SELinux on a CentOS 5.5 server with Squid 3.1.12 that handles authentication via ncsa_auth. When I turn off SElinux everything works fine, but when I enable it, Squid crashes on ...
4
votes
1answer
4k views

maximum number of connections Squid

I have a Squid proxy server that controls all internet traffic for my network. I need a way to stop users from downloading big files (say >50MB) in my network. I banned some famous ports (e.g. ...
4
votes
1answer
2k views

Squid proxy not caching anything

squid.conf: http_access allow all # Squid normally listens to port 3128 http_port 3128 accel defaultsite=localhost no-vhost cache_peer localhost parent 80 0 no-query originserver name=myAccel ...
4
votes
1answer
3k views

Config squid for Windows with basic authorization, but squid still denied access after I input correct username/password

I installed squid-2.7-stable8 for Windows, try to let only authorized user can access the internet. But unfortunately after I entered username/password in client browser, squid still return HTTP 403 ...
4
votes
1answer
2k views

squid: allow only certain youtube videos (solved for FF, not working on IE)

At my job, I'm not the systadmin but a linux programmer. But once in a while the sysadmins (who generally aren't that knowledgeable about linux) ask me for help. Today the sysadmin asked me to allow ...
4
votes
1answer
2k views

How can I inspect why Active Directory can't use kerberos and fallsback to NTLM?

I have been trying to get squid running with kerberos auth for a few days but I'm in some trouble. The problem has been asked and replied many times on both the squid-users list and on the web, I have ...
4
votes
5answers
1k views

Which version of squid should I choose?

There are 3 squid releases in squid's official website: 2.7, 3.0 and 3.1. I am confused, which one should I choose?
4
votes
1answer
666 views

Need help with ntlm auth in Squid 2.7 and Active Directory group permission

I'm having problems with squid and NTLM auth, I already have ntlm auth (http://wiki.squid-cache.org/ConfigExamples/Authenticate/Ntlm) working so only logged users to the AD can navigate through the ...
4
votes
1answer
452 views

How can I make squid add its own http header to the reply, based on ACL?

I have a Squid server at work doing Squid-ly things. I need to have Squid reply with a particular header based on matching an ACL. The header is a custom one that will look something like ...
4
votes
2answers
3k views

Why is squid breaking kerberos/NTLM auth?

I'm using squid 2.6.22 (Centos 5 Default) as a proxy. Squid seems to break the authentication process for web pages when they require NTLM or Kerberos Auth. I tested with sharepoint 2007 and tried all ...
3
votes
4answers
5k views

Is there any way to cache HTTPS requests in a proxy server?

We are using Squid proxy server in our environment and we want to cache HTTPS requests. Is there any way to configure Squid or in general a proxy server to cache HTTPS requests?
3
votes
5answers
4k views

Squid equivalent for Windows?

We are planning to move some of our Linux services to a Windows platform. What is the equivalent solution on the Microsoft platform to setup a web cache for outgoing traffic?
3
votes
6answers
4k views

Force clients to use proxy

Here's my network configuration: The proxy server is running Ubuntu with Squid on port 3128 and DansGuardian on port 8080. I'd like to force all clients to use the proxy server - specifically, ...
3
votes
7answers
12k views

How to setup equivalent USVIDEO.ORG DNS-Proxy on Linux

I have a VPS in the USA running Ubuntu. I want to setup something similar to http://www.usvideo.org Basically, USVIDEO is a DNS service that allows Canadians to access American content like Hulu, ...
3
votes
2answers
3k views

How to get Squid to not cache files with certain extensions?

I've found information on how to keep squid from caching domains/IPs, however, that's not quite what I want. I'd like to prevent it from caching .jnlp and .jar files. The core problem being that ...
3
votes
3answers
825 views

BYOD and Google SSL

I run a school network with a BYOD program in place. I have a linux proxy (squid) with content filtering by Mind (fork of dansguardian). Everything works fine over HTTP, the problem is of corse when ...
3
votes
1answer
12k views

Squid as Socks5 Proxy server [closed]

One of my friends lives in a country which they censor websites and they are fighting with techniques that people use to bypass the censorship. He told me that the only way that he can bypass the ...
3
votes
1answer
7k views

squid and https URLs

I have installed squid as a non-transparent proxy/cache server with --enable-ssl configuration. It is a child of a parent proxy server proxy1.ut.ac.ir. Everything is OK for HTTP URLs, but any HTTPS ...
3
votes
4answers
3k views

Why does squid reject this multipart-form-data POST from curl?

This fails: $ curl --trace multipart-fail.log -F "source={}" http://127.0.0.1:3003/jslint With a squid status 417 error, ERR_INVALID_REQ. trace of failing curl request trace of successful curl ...