Re: [squid-users] Setting up squid as an accel proxy
Amos, Is the redirector requirement something new? We don't have it on our current Squid configuration which is running on version 2.2 STABLE 13. Jake Martin C. Jacobson (Jake) Office of the DNI CIO Intelligence Community Enterprise Services Comm: (301) 317-7214 Secure: 369-6362 - Original Message - From: Amos Jeffries [EMAIL PROTECTED] To: Martin Jacobson (Jake) [EMAIL PROTECTED] Cc: Amos Jeffries [EMAIL PROTECTED], squid-users squid-users@squid-cache.org Sent: Thursday, December 20, 2007 6:26:01 PM (GMT-0500) America/New_York Subject: Re: [squid-users] Setting up squid as an accel proxy Amos, I am taking a step or two back and try to explain what I want to do with Squid. I know this can be done because I am doing it with Squid version 2.2. I really want to upgrade to 2.6 but my configuration is just not working. I need to take my public URL which is a Linux server running squid. Squid is listening on port 80 for all in bound request and when it gets one it proxies the request to my back-end server which is a search engine. I don't want squid to do any caching of content, I just want it to proxy all web requests coming to www.jakesite.com. So in the above example, my public URL www.jakesite.com. My search engine's URL is search.jakesite.com:8000/ When someone comes to www.jakesite.com with their browser, they should be presented the HTML search engine's page which is not on www.jakesite.com but is coming from search.jakesite.com:8000/ I hope that this makes more sense. Again, thanks for your help. It make sense and yes I understood that was what you want. To do it you need a redirector which re-writes the URL http_port 80 accel defaultsite=www.jakesite.com with a url_rewriter_program and location_rewriter_program for their config settings see OPTIONS FOR URL REWRITING in http://www.squid-cache.org/Versions/v2/2.6/cfgman/ Once that is done the URL are changed to squid retrieves the pages from search.jakesite.com:8000 as any normal web request. Amos Jake - Original Message - From: Amos Jeffries [EMAIL PROTECTED] To: Martin Jacobson (Jake) [EMAIL PROTECTED] Cc: squid-users squid-users@squid-cache.org Sent: Thursday, December 20, 2007 3:40:00 AM (GMT-0500) America/New_York Subject: Re: [squid-users] Setting up squid as an accel proxy Martin Jacobson (Jake) wrote: Amos, I have upgraded to STABLE17 but I still have the same issue. Basically I want to be able to go to URL in my browser like this: http://linproxy1.mysite.com/. (linproxy1 is running squid) and have squid proxy the default search page from: http://searchengine.mysite.com/ Well, to CHANGE the URL like that you will need to use a redirector, not a peer. To peer as a forward-proxy squid simply imitates a server and has DNS pointed at it. The peer still needs to understand when requests for linproxy1.mysite.com arrive at it from squid through the private channel. Config settings: http_port linproxy1.mysite.com:80 accel Could do with defaultsite=linproxy1.mysite.com to un-break some broken client software. cache_peer 10.2.234.9 parent 80 0 no-query originserver name=searchengine proxy-only proxy-only in accelerators does away with almost all of the actual benefit of 'acceleration' squid provides through caching unchanged content. Should work though as log as the peer knows its hosting inproxy1.mysite.com. Amos Martin C. Jacobson (Jake) - Original Message - From: Amos Jeffries [EMAIL PROTECTED] To: Martin Jacobson (Jake) [EMAIL PROTECTED] Cc: squid-users squid-users@squid-cache.org Sent: Tuesday, December 18, 2007 8:50:08 PM (GMT-0500) America/New_York Subject: Re: [squid-users] Setting up squid as an accel proxy I don't understand why I am having so much trouble getting something that seems to be so simple working. I have downloaded and installed squid-2.6.STABLE16 on my Linux box. Please use STABLE17, 16 has a major security bug. I want to proxy my search engine's search page so I don't want squid caching the pages. I just want squid to act as a reverse proxy. After reading Squid The Definitive Guide and lots of posts on the web, I still can't get it to work. It would seem that the following basic config file should do the trick. This is based on http://wiki.squid-cache.org/SquidFaq/ReverseProxy http_port 80 accel defaultsite=linproxy1.mysite.com cache_peer searchengine.mysite.com parent 80 0 no-query originserver http_access allow all I can get squid to run with no errors, but it doesn't reverse proxy the search engine's search page. With my browser I can go directly to the search engine with no problems, but I get a Connection has timed out error when I try to go through linproxy1. So http://linproxy1.mysite.com is the publicly accessible website for the search engine? Does the machine at searchengine.mysite.com serve pages for http://linproxy1.mysite.com properly? Amos
Re: [squid-users] Setting up squid as an accel proxy
Martin Jacobson (Jake) wrote: Amos, I have upgraded to STABLE17 but I still have the same issue. Basically I want to be able to go to URL in my browser like this: http://linproxy1.mysite.com/. (linproxy1 is running squid) and have squid proxy the default search page from: http://searchengine.mysite.com/ Well, to CHANGE the URL like that you will need to use a redirector, not a peer. To peer as a forward-proxy squid simply imitates a server and has DNS pointed at it. The peer still needs to understand when requests for linproxy1.mysite.com arrive at it from squid through the private channel. Config settings: http_port linproxy1.mysite.com:80 accel Could do with defaultsite=linproxy1.mysite.com to un-break some broken client software. cache_peer 10.2.234.9 parent 80 0 no-query originserver name=searchengine proxy-only proxy-only in accelerators does away with almost all of the actual benefit of 'acceleration' squid provides through caching unchanged content. Should work though as log as the peer knows its hosting inproxy1.mysite.com. Amos Martin C. Jacobson (Jake) - Original Message - From: Amos Jeffries [EMAIL PROTECTED] To: Martin Jacobson (Jake) [EMAIL PROTECTED] Cc: squid-users squid-users@squid-cache.org Sent: Tuesday, December 18, 2007 8:50:08 PM (GMT-0500) America/New_York Subject: Re: [squid-users] Setting up squid as an accel proxy I don't understand why I am having so much trouble getting something that seems to be so simple working. I have downloaded and installed squid-2.6.STABLE16 on my Linux box. Please use STABLE17, 16 has a major security bug. I want to proxy my search engine's search page so I don't want squid caching the pages. I just want squid to act as a reverse proxy. After reading Squid The Definitive Guide and lots of posts on the web, I still can't get it to work. It would seem that the following basic config file should do the trick. This is based on http://wiki.squid-cache.org/SquidFaq/ReverseProxy http_port 80 accel defaultsite=linproxy1.mysite.com cache_peer searchengine.mysite.com parent 80 0 no-query originserver http_access allow all I can get squid to run with no errors, but it doesn't reverse proxy the search engine's search page. With my browser I can go directly to the search engine with no problems, but I get a Connection has timed out error when I try to go through linproxy1. So http://linproxy1.mysite.com is the publicly accessible website for the search engine? Does the machine at searchengine.mysite.com serve pages for http://linproxy1.mysite.com properly? Amos -- Please use Squid 2.6STABLE17 or 3.0STABLE1. There are serious security advisories out on all earlier releases.
Re: [squid-users] Setting up squid as an accel proxy
Amos, I am taking a step or two back and try to explain what I want to do with Squid. I know this can be done because I am doing it with Squid version 2.2. I really want to upgrade to 2.6 but my configuration is just not working. I need to take my public URL which is a Linux server running squid. Squid is listening on port 80 for all in bound request and when it gets one it proxies the request to my back-end server which is a search engine. I don't want squid to do any caching of content, I just want it to proxy all web requests coming to www.jakesite.com. So in the above example, my public URL www.jakesite.com. My search engine's URL is search.jakesite.com:8000/ When someone comes to www.jakesite.com with their browser, they should be presented the HTML search engine's page which is not on www.jakesite.com but is coming from search.jakesite.com:8000/ I hope that this makes more sense. Again, thanks for your help. Jake - Original Message - From: Amos Jeffries [EMAIL PROTECTED] To: Martin Jacobson (Jake) [EMAIL PROTECTED] Cc: squid-users squid-users@squid-cache.org Sent: Thursday, December 20, 2007 3:40:00 AM (GMT-0500) America/New_York Subject: Re: [squid-users] Setting up squid as an accel proxy Martin Jacobson (Jake) wrote: Amos, I have upgraded to STABLE17 but I still have the same issue. Basically I want to be able to go to URL in my browser like this: http://linproxy1.mysite.com/. (linproxy1 is running squid) and have squid proxy the default search page from: http://searchengine.mysite.com/ Well, to CHANGE the URL like that you will need to use a redirector, not a peer. To peer as a forward-proxy squid simply imitates a server and has DNS pointed at it. The peer still needs to understand when requests for linproxy1.mysite.com arrive at it from squid through the private channel. Config settings: http_port linproxy1.mysite.com:80 accel Could do with defaultsite=linproxy1.mysite.com to un-break some broken client software. cache_peer 10.2.234.9 parent 80 0 no-query originserver name=searchengine proxy-only proxy-only in accelerators does away with almost all of the actual benefit of 'acceleration' squid provides through caching unchanged content. Should work though as log as the peer knows its hosting inproxy1.mysite.com. Amos Martin C. Jacobson (Jake) - Original Message - From: Amos Jeffries [EMAIL PROTECTED] To: Martin Jacobson (Jake) [EMAIL PROTECTED] Cc: squid-users squid-users@squid-cache.org Sent: Tuesday, December 18, 2007 8:50:08 PM (GMT-0500) America/New_York Subject: Re: [squid-users] Setting up squid as an accel proxy I don't understand why I am having so much trouble getting something that seems to be so simple working. I have downloaded and installed squid-2.6.STABLE16 on my Linux box. Please use STABLE17, 16 has a major security bug. I want to proxy my search engine's search page so I don't want squid caching the pages. I just want squid to act as a reverse proxy. After reading Squid The Definitive Guide and lots of posts on the web, I still can't get it to work. It would seem that the following basic config file should do the trick. This is based on http://wiki.squid-cache.org/SquidFaq/ReverseProxy http_port 80 accel defaultsite=linproxy1.mysite.com cache_peer searchengine.mysite.com parent 80 0 no-query originserver http_access allow all I can get squid to run with no errors, but it doesn't reverse proxy the search engine's search page. With my browser I can go directly to the search engine with no problems, but I get a Connection has timed out error when I try to go through linproxy1. So http://linproxy1.mysite.com is the publicly accessible website for the search engine? Does the machine at searchengine.mysite.com serve pages for http://linproxy1.mysite.com properly? Amos -- Please use Squid 2.6STABLE17 or 3.0STABLE1. There are serious security advisories out on all earlier releases.
Re: [squid-users] Setting up squid as an accel proxy
Amos, I am taking a step or two back and try to explain what I want to do with Squid. I know this can be done because I am doing it with Squid version 2.2. I really want to upgrade to 2.6 but my configuration is just not working. I need to take my public URL which is a Linux server running squid. Squid is listening on port 80 for all in bound request and when it gets one it proxies the request to my back-end server which is a search engine. I don't want squid to do any caching of content, I just want it to proxy all web requests coming to www.jakesite.com. So in the above example, my public URL www.jakesite.com. My search engine's URL is search.jakesite.com:8000/ When someone comes to www.jakesite.com with their browser, they should be presented the HTML search engine's page which is not on www.jakesite.com but is coming from search.jakesite.com:8000/ I hope that this makes more sense. Again, thanks for your help. It make sense and yes I understood that was what you want. To do it you need a redirector which re-writes the URL http_port 80 accel defaultsite=www.jakesite.com with a url_rewriter_program and location_rewriter_program for their config settings see OPTIONS FOR URL REWRITING in http://www.squid-cache.org/Versions/v2/2.6/cfgman/ Once that is done the URL are changed to squid retrieves the pages from search.jakesite.com:8000 as any normal web request. Amos Jake - Original Message - From: Amos Jeffries [EMAIL PROTECTED] To: Martin Jacobson (Jake) [EMAIL PROTECTED] Cc: squid-users squid-users@squid-cache.org Sent: Thursday, December 20, 2007 3:40:00 AM (GMT-0500) America/New_York Subject: Re: [squid-users] Setting up squid as an accel proxy Martin Jacobson (Jake) wrote: Amos, I have upgraded to STABLE17 but I still have the same issue. Basically I want to be able to go to URL in my browser like this: http://linproxy1.mysite.com/. (linproxy1 is running squid) and have squid proxy the default search page from: http://searchengine.mysite.com/ Well, to CHANGE the URL like that you will need to use a redirector, not a peer. To peer as a forward-proxy squid simply imitates a server and has DNS pointed at it. The peer still needs to understand when requests for linproxy1.mysite.com arrive at it from squid through the private channel. Config settings: http_port linproxy1.mysite.com:80 accel Could do with defaultsite=linproxy1.mysite.com to un-break some broken client software. cache_peer 10.2.234.9 parent 80 0 no-query originserver name=searchengine proxy-only proxy-only in accelerators does away with almost all of the actual benefit of 'acceleration' squid provides through caching unchanged content. Should work though as log as the peer knows its hosting inproxy1.mysite.com. Amos Martin C. Jacobson (Jake) - Original Message - From: Amos Jeffries [EMAIL PROTECTED] To: Martin Jacobson (Jake) [EMAIL PROTECTED] Cc: squid-users squid-users@squid-cache.org Sent: Tuesday, December 18, 2007 8:50:08 PM (GMT-0500) America/New_York Subject: Re: [squid-users] Setting up squid as an accel proxy I don't understand why I am having so much trouble getting something that seems to be so simple working. I have downloaded and installed squid-2.6.STABLE16 on my Linux box. Please use STABLE17, 16 has a major security bug. I want to proxy my search engine's search page so I don't want squid caching the pages. I just want squid to act as a reverse proxy. After reading Squid The Definitive Guide and lots of posts on the web, I still can't get it to work. It would seem that the following basic config file should do the trick. This is based on http://wiki.squid-cache.org/SquidFaq/ReverseProxy http_port 80 accel defaultsite=linproxy1.mysite.com cache_peer searchengine.mysite.com parent 80 0 no-query originserver http_access allow all I can get squid to run with no errors, but it doesn't reverse proxy the search engine's search page. With my browser I can go directly to the search engine with no problems, but I get a Connection has timed out error when I try to go through linproxy1. So http://linproxy1.mysite.com is the publicly accessible website for the search engine? Does the machine at searchengine.mysite.com serve pages for http://linproxy1.mysite.com properly? Amos -- Please use Squid 2.6STABLE17 or 3.0STABLE1. There are serious security advisories out on all earlier releases.
Re: [squid-users] Setting up squid as an accel proxy
Amos, I have upgraded to STABLE17 but I still have the same issue. Basically I want to be able to go to URL in my browser like this: http://linproxy1.mysite.com/. (linproxy1 is running squid) and have squid proxy the default search page from: http://searchengine.mysite.com/ Config settings: http_port linproxy1.mysite.com:80 accel cache_peer 10.2.234.9 parent 80 0 no-query originserver name=searchengine proxy-only Martin C. Jacobson (Jake) - Original Message - From: Amos Jeffries [EMAIL PROTECTED] To: Martin Jacobson (Jake) [EMAIL PROTECTED] Cc: squid-users squid-users@squid-cache.org Sent: Tuesday, December 18, 2007 8:50:08 PM (GMT-0500) America/New_York Subject: Re: [squid-users] Setting up squid as an accel proxy I don't understand why I am having so much trouble getting something that seems to be so simple working. I have downloaded and installed squid-2.6.STABLE16 on my Linux box. Please use STABLE17, 16 has a major security bug. I want to proxy my search engine's search page so I don't want squid caching the pages. I just want squid to act as a reverse proxy. After reading Squid The Definitive Guide and lots of posts on the web, I still can't get it to work. It would seem that the following basic config file should do the trick. This is based on http://wiki.squid-cache.org/SquidFaq/ReverseProxy http_port 80 accel defaultsite=linproxy1.mysite.com cache_peer searchengine.mysite.com parent 80 0 no-query originserver http_access allow all I can get squid to run with no errors, but it doesn't reverse proxy the search engine's search page. With my browser I can go directly to the search engine with no problems, but I get a Connection has timed out error when I try to go through linproxy1. So http://linproxy1.mysite.com is the publicly accessible website for the search engine? Does the machine at searchengine.mysite.com serve pages for http://linproxy1.mysite.com properly? Amos
[squid-users] Setting up squid as an accel proxy
I don't understand why I am having so much trouble getting something that seems to be so simple working. I have downloaded and installed squid-2.6.STABLE16 on my Linux box. I want to proxy my search engine's search page so I don't want squid caching the pages. I just want squid to act as a reverse proxy. After reading Squid The Definitive Guide and lots of posts on the web, I still can't get it to work. It would seem that the following basic config file should do the trick. This is based on http://wiki.squid-cache.org/SquidFaq/ReverseProxy http_port 80 accel defaultsite=linproxy1.mysite.com cache_peer searchengine.mysite.com parent 80 0 no-query originserver http_access allow all I can get squid to run with no errors, but it doesn't reverse proxy the search engine's search page. With my browser I can go directly to the search engine with no problems, but I get a Connection has timed out error when I try to go through linproxy1. Jake Jacobson
Re: [squid-users] Setting up squid as an accel proxy
HOw does your queries look like? if the url contains cgi-bin, ?, by default squid wont cache them mike At 01:15 PM 12/18/2007, Martin Jacobson \(Jake\) wrote: I don't understand why I am having so much trouble getting something that seems to be so simple working. I have downloaded and installed squid-2.6.STABLE16 on my Linux box. I want to proxy my search engine's search page so I don't want squid caching the pages. I just want squid to act as a reverse proxy. After reading Squid The Definitive Guide and lots of posts on the web, I still can't get it to work. It would seem that the following basic config file should do the trick. This is based on http://wiki.squid-cache.org/SquidFaq/ReverseProxy http_port 80 accel defaultsite=linproxy1.mysite.com cache_peer searchengine.mysite.com parent 80 0 no-query originserver http_access allow all I can get squid to run with no errors, but it doesn't reverse proxy the search engine's search page. With my browser I can go directly to the search engine with no problems, but I get a Connection has timed out error when I try to go through linproxy1. Jake Jacobson
Re: [squid-users] Setting up squid as an accel proxy
I don't understand why I am having so much trouble getting something that seems to be so simple working. I have downloaded and installed squid-2.6.STABLE16 on my Linux box. Please use STABLE17, 16 has a major security bug. I want to proxy my search engine's search page so I don't want squid caching the pages. I just want squid to act as a reverse proxy. After reading Squid The Definitive Guide and lots of posts on the web, I still can't get it to work. It would seem that the following basic config file should do the trick. This is based on http://wiki.squid-cache.org/SquidFaq/ReverseProxy http_port 80 accel defaultsite=linproxy1.mysite.com cache_peer searchengine.mysite.com parent 80 0 no-query originserver http_access allow all I can get squid to run with no errors, but it doesn't reverse proxy the search engine's search page. With my browser I can go directly to the search engine with no problems, but I get a Connection has timed out error when I try to go through linproxy1. So http://linproxy1.mysite.com is the publicly accessible website for the search engine? Does the machine at searchengine.mysite.com serve pages for http://linproxy1.mysite.com properly? Amos
