Skip to main content
OverflowAI is here! AI power for your Stack Overflow for Teams knowledge community. Learn more

Questions tagged [squid]

Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

Filter by
Sorted by
Tagged with
0 votes
1 answer
64 views

How to block Web3 Domains

There are some domains called "decentralized" (Web3), promoted by Unstoppable Domains and Ethereum Name Service, example: .888 .anime .bitcoin .blockchain .coin .crypto .dao .eth Is there ...
acgbox's user avatar
  • 398
0 votes
0 answers
40 views

Squid returning Invalid URL

I have a squid instance running together with a wireguard tunnel. Client traffic is proxied through the wireguard tunnel: Client -> (gateway wireguard) -> (wireguard + squid) The gateway ...
bear's user avatar
  • 222
0 votes
0 answers
19 views

Two Squid Chaining but different IP segment

Can two proxy servers be chained together, where one server has access to the internet and the other can only access internal networks? How can I configure this setup? IP addresses information: ...
Chen Siang's user avatar
0 votes
0 answers
25 views

SQUID : Allowing Specific dst IPs through Cache_Peer and block the rest

I have a Squid server using a parent Machine(192.168.1.18) to access to country A while the Internet connection on Squid(192.168.1.19) belongs to country B. I need proxy authenticated users to use the ...
fbi's user avatar
  • 1
2 votes
0 answers
80 views

Squid file descriptors on Sles15 cannot be increased beyond 4096

I'm testing squid server on Sles15. In Squid 4.17 on Sles12, we modify the squid.conf with: vsa11074425:/tmp # grep desc /etc/squid/squid.conf # Squid max_filedescriptors max_filedescriptors 65536 ...
EisenWang's user avatar
  • 121
0 votes
0 answers
74 views

Squid Proxy StoreID use with pfSense

I am wondering if anyone can help me with learning more about Squid's StoreID? I have been researching this for some time. I got the web cache accelerator to work however at times I feel it is lacking ...
Jonathan Lee's user avatar
0 votes
0 answers
55 views

Using Squid as proxy for allowing LimaCharlie Sensor to talk to LimaCharlie cloud

I am configuring LimaCharlie sensor on Windows 2022 server that does not have Internet access. The LimaCharlie sensor is a software that is installed on computers, and uses HTTPS tcp/443 to ...
Europa's user avatar
  • 113
0 votes
1 answer
187 views

SSH through squid proxy running on the same server

I am currently connecting to my server over ssh. I also have a squid proxy running on the same server, and I would like to be able to connect to ssh through the proxy, presumably with ssh taking place ...
user avatar
0 votes
0 answers
42 views

Re-route traffic from a Shadowsocks server based on GeoIP

I am trying to set up a proxy network consisting of two servers: First server is a ShadowSocks server (Rust version) with manager API enabled as a standalone systemd service. This allows opening proxy ...
wutt's user avatar
  • 1
0 votes
1 answer
102 views

Can't cache dynamic content with Squid

I am trying to use squid in order to cache some dynamic content. The content comes from requests such as /path/{id}, where id is the identifier of the resource. I have tried playing with the ...
Alex's user avatar
  • 3
0 votes
0 answers
56 views

Can I add a custom (spoofed) X-Forwarded-For and Via Header in Squid for requests from local network?

I tried spoofing the X-Forwarded-For Header (and Via Header) in Squid in my local network. Since the request isn't coming from a system with a public ip, I assume that squid doesn't set these headers (...
quantumquester's user avatar
0 votes
0 answers
30 views

How to use sslcrtvalidator_program helper in squid on ubuntu

I have an application that does not support TLS but wants to access another application that requires TLS access with mutual authentication. To bridge the gap I have setup squid in accelerator/reverse-...
Rosso's user avatar
  • 111
1 vote
0 answers
88 views

Squid to allow src ip address

I have a squid proxy running on a docker on linux with ip say a.b.c.d Squid proxy is configured to allow only certain domains (dst) and block everything else. There is also a parent proxy configured ...
A Sree's user avatar
  • 11
0 votes
1 answer
144 views

Squid's `tls_key_log` does not work as alternative to `SSLKEYLOGFILE` to decrypt TLS traffic

Following the instruction I can successfully descrypt TLS traffic in wireshark while browsing in firefox with SSLKEYLOGFILE env variable set and running squid as middle man proxy. export SSLKEYLOGFILE=...
rnd_nr_gen's user avatar
0 votes
0 answers
134 views

Squid not blocking access to websites

I'm on Ubuntu Server 22.04.3 LTS and I'm trying to learn a bit about Squid. I installed Squid v5.7 and one of my tasks is to deny access to a list of URL's. I modified "squid.conf" file and ...
João Sacramento's user avatar
0 votes
1 answer
146 views

Debugging combination of tproxy and policy based routing

let me preface this by saying that I know I am combining a wild amount of things in here, but sometimes that is where things take you. So the scenario: I'm using squid and tproxy to transparently ...
Mart Allini's user avatar
0 votes
0 answers
136 views

I want to use full /56 or /64 subnet in squid proxy change on every request instead of 1 ipv6 only

I want squid proxy to use full /56 or /64 IPv6 subnet instead of one Ipv6 I have two servers with squid proxy installed and my servers have been assigned with /56 and /64 ipv6 ranges But on both ...
Nova's user avatar
  • 5
0 votes
0 answers
94 views

Squid Proxy - Hide Signs of Proxy Being Used

I've installed a Squid Proxy Server in a Windows VPS. I will route browser and some other programs in my PC through that proxy, and I would like that all requests are sent to the websites just as if I ...
FrO's user avatar
  • 1
0 votes
0 answers
29 views

squid reverse proxy log

we have an exchange server behind a squid reverse proxy there is many failed account events in exchange, the exchange event viewer display the IP address of the reverse proxy as source address in ...
skacem's user avatar
  • 1
0 votes
0 answers
42 views

squid v5.5 is not logging successful ssh connections on oracle linux 9.2

I adjusted my acls to allow port 22 traffic, however my access log is not showing succsssful port 22 connections only denys and the "denys" show a http RC of 200. access.log is below [20/Sep/...
dirman's user avatar
  • 3
0 votes
0 answers
56 views

Squid didn't cache artifacts, which was downloaded from remote repository with authentication

I have a latest Squid, installed in my network. SSL bump and other options has been configured. Artifacts, which I download from HTTPS sites, are cacheing successfully(as example https://downloads....
Mak S's user avatar
  • 1
0 votes
1 answer
88 views

Excepted behavior for overlapping dstdomains entries in Squid 4.1

Per documentation, if using dstdomain and having overlapping entries in the list, Squid should generate a warning message. For example I have this in my /etc/squid/squid.conf: acl dst_domains ...
John Heyer's user avatar
2 votes
1 answer
55 views

squid: Unable to allow 10.10.11.0/24 but 10.10.11.0/23 works

Im unable to make a working acl with CIDR over `/23` (squid 5.7 on Debian) For example i got this config (working): acl servers src 10.10.11.0/23 http_access allow servers ... http_access deny all ...
mylan's user avatar
  • 61
0 votes
0 answers
70 views

Squid cache 302 responses

I have a very specific use case in which I need to cache EVERYTHING. Including 302s. I know it's technically against the HTTP RFC, but I know those redirects will always be the same and I need them to ...
Martin Horský's user avatar
0 votes
0 answers
352 views

Serving squid proxy behind HTTP load balancer

I want to build a system where we have 3 squid proxies server running behind load balancer. Currently squid proxy is running on http port, (help for https_port is also appreciated) dns_v4_first on acl ...
tbhaxor's user avatar
  • 101
0 votes
0 answers
207 views

Squid Proxy - allow http for specific url

I'm learning about squid proxy in a Windows environment. I have verified that the list of allowed urls in a notepad file and add it to squid.config file as path of allowed url is functioning well. ...
Praveen Sivakumar's user avatar
0 votes
0 answers
467 views

Connecting squid to upstream proxy using CONNECT request

I'm setting up a reverse proxy that has to forward all the requests to a given url.com/resource. Now, that resource is behind a proxy, so it has to use the CONNECT request. The idea is that squid, ...
dario's user avatar
  • 1
0 votes
0 answers
320 views

[SQUID-6.1]: Setup Squid ipv4 to ipv6 proxy

I'm trying to setup a squid proxy that will accept multiple inbound connections on one IPv4 across a range of ports, and for each port connection to connect out on a unique IPv6 address. I can ...
Alexander's user avatar
0 votes
0 answers
56 views

Squid bypass site don't work (as expected)

Here is my squid.conf http_access allow localhost acl whoer dstdomain .whoer.net http_access allow whoer never_direct allow whoer # And finally deny all other access to this proxy always_direct allow ...
comm1ted's user avatar
  • 101
0 votes
0 answers
303 views

Squid doesn't use IPv6 address

I've got a small issue with my squid (forward) proxy server. It keeps using IPv4 as outgoing IP address even if remote server and client have IPv6 connectivity. My client's IP address: devuan@devuan:~$...
Tchupy's user avatar
  • 1
0 votes
0 answers
47 views

In a Linux environment, does the order of commands "ip Route" affect routing?

I attached multiple ethernets to the server, one for LAN and the rest for PPPOE. Each packet connected to each PPPOE was sent by itself. It works fine on CentOS 6.10. In the 8 series, packets are ...
Cholho Lee's user avatar
0 votes
0 answers
61 views

grab https URL without import CA into PC from squid access log

1.The domain aa.com was belongs to our company and we have the public and private key of Wildcard certificate about aa.com. 2.We want to grab all of the URL from the access log which about *.aa.com, ...
insmod's user avatar
  • 1
1 vote
2 answers
5k views

Transparent HTTPS proxy with squid using SNI

Final update: I ended up using nginx as squid proved to be difficult to work with, see last update at the end for more detail What I'm trying to do is setting up a transparent HTTPS proxy with squid ...
Alireza Dastyar's user avatar
0 votes
0 answers
436 views

Use squid to forward http(s) requests based on domainname

I have installed 5 LXC containers in Proxmox. Each container has a Apache2 webserver up and running inside, pointing to a registered domain. So: container1 points to example1.com and has a local ip ...
kzpm's user avatar
  • 99
1 vote
1 answer
212 views

Rsyslog prepend text to messages in certain facility

OS: Debian 11 Rsyslog version 8.2102 Squid version 4.13 I am attempted to remote log squid logs without going through a file. I am using the following logging line for the store log in squid.conf: ...
user avatar
0 votes
0 answers
94 views

squid proxy random IP time change

I have included two IP addresses in squid with random TCP outgoing addresses but I need them as one IP will be active for 15 minutes and the other one will be active for 15 minutes and this will ...
Manojit Das's user avatar
-1 votes
1 answer
110 views

How to redirect network traffic using squid and nginx to outer page?

My school network blocks access to game pages, more exactly colonist.io. We have an access to linux server for learning purposes. I'd like to avoid blocking by setting up some kind of proxy server on ...
MijatTomić's user avatar
0 votes
1 answer
2k views

Squid configuration to forward another proxy for internet only

I just installed squid proxy server on Linux. I am now configurating squid . I have a set of ip defined for intranet. Internet are those that is not intranet. If destination is to internet, I want the ...
Hairy Ass's user avatar
  • 101
0 votes
1 answer
372 views

How to create Iptables rules for squid to only handle web traffic request

I'm using Squid Proxy for (DNS Filtering), I have configured squid proxy behind my GCP Cloud NAT in transparent mode to intercept HTTP and HTTPS Web Traffic, I have added only below rules to redirect ...
sanket jaiswal's user avatar
1 vote
0 answers
114 views

How to allow squid user to use only certain ports that are bound to ip

In my squid configuration, I map each ip to a specific port. acl port_3000_acl myport 3000 acl port_3001_acl myport 3001 http_port 3000 http_port 3001 tcp_outgoing_address 185.166.196.238 ...
timur zolotov's user avatar
0 votes
1 answer
203 views

Forward all incoming traffic without redirect

How to forward all traffic to another domain? serverA has a serverA.com domain serverB has a serverB.com domain I want to forward all incoming traffic from serverA to serverB For example, when ...
Joe's user avatar
  • 11
0 votes
2 answers
37 views

Will my Harddisk still be written when i delete a logfile in use on Debian?

Due some Bug testings there are tons of request made to my squid server on debian. Because it is a test i can't disable logging, restart the Server or block the requests. Due the growing size of the ...
Deex's user avatar
  • 131
1 vote
0 answers
284 views

Squid as an explicit & terminated forward proxy / bridge

Background: we've got some "old" IoT devices running an older SSL stack that must connect to a newer server over HTTPS. We'd like to setup a forward proxy / bridge so that: Device uses its ...
smertrios's user avatar
  • 111
0 votes
1 answer
2k views

Squid Reverse Proxy with SSL

I'm trying to use squid as a reverse proxy in front of a single website, to decrypt the SSL on the proxy and then to encrypt the connection to the webserver (this is in order to use squid as an ICAP ...
user3811862's user avatar
0 votes
2 answers
4k views

How can I avoid the error TCP_MISS_ABORTED/000 when uploading files through squid?

While uploading big files, > 10MB, through a squid V5.6, I noticed that they failed and/or were retried. The error has been logged multiple times in the logs: 1671092710.452 423 ::1 ...
Zioalex's user avatar
  • 131
0 votes
1 answer
468 views

A proxy forward to redirect some calls to avoid crossing the proxy. Only redirect proxy forward

I'm trying to redirect with 301 some https calls with some proxy forward. The idea is not to go through the proxy, but to return a 301 redirect with the new location. I've got two cases: https://...
albertoiNET's user avatar
0 votes
2 answers
132 views

How to show an internal static page to IP addresses list? [closed]

I have a ubuntu 22.04 server, a list of ip addresses of users on my local network and I want to redirect http/https traffic from this list to a local informative html page. Similar to how a hotspot ...
acgbox's user avatar
  • 398
1 vote
1 answer
1k views

CONNECT Proxy over Squid with TLS termination

I can create a regular http(s) proxy with Squid, which can then be accessed at http://my-ip. I want to have TLS termination, so I can access httpS://my-domain. I have generated ssl certs using certbot ...
d9ngle's user avatar
  • 59
0 votes
1 answer
426 views

Squid in docker returns 502 but works when run on host

I'm using the same config for squid 5.6 that runs on a host machine and in docker. When I run it on the host (Ubuntu 22.10) it works just fine but when I run it from ubuntu/squid image I get 502 bad ...
chingis's user avatar
  • 243
0 votes
1 answer
351 views

Squid + OpenVPN : 403 Forbidden

I need to have a proxy server for an already configured and working OpenVPN server. So I install Squid 5.2 on Ubuntu 20.04. To test, I changed the following line in the /etc/squid/squid.conf file and ...
Omid Shojaee's user avatar

1
2 3 4 5
28