On Mon, Mar 12, 2001 at 01:11:40PM -0500, Carl E. Mankinen wrote:
> 2) GRE is used by the router to "transparently" proxy http requests.
GRE is the Generic Routing Encapsulation and usually used for ip-ip
tunnels and L2 Tunnels and VPN Stuff.
The squid stuff you are refering to is the ICP, a Protocol where Proxies can
ask its neighbours and parents for requests and get the Data back.
Squid is using GRE, this works so, that you redirect all Traffic you want to
proxy in a GRE Packet to the Squid Proxy. This works with Cisco Filter Lists
quite well, and the Redirect can work on LAN or on WAN. Squid-host will unpack
the IP-request.
To actually find the Proxies Routers like Cisco Support the WCCP Protocol.
It will find all configured squids and aim the GRE PAckets at them:
http://www.vsb.cz/~hal01/cache/wccp/wccp.html
In that case Linux ipchains based redirect Feature is used to redirect all
incoming (depackaged) GRE packets to the Squid Port 3128.
Greetings
Bernd
--
(OO) -- [EMAIL PROTECTED] --
( .. ) ecki@{inka.de,linux.de,debian.org} http://home.pages.de/~eckes/
o--o *plush* 2048/93600EFD eckes@irc +497257930613 BE5-RIPE
(O____O) When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl!
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
