Re: [squid-users] reverse proxy for squid2.5.10
Peña wrote: From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] : # Save for the need of rewriting stuff most of the questions seen in # reverse proxying is the same in complex forward proxy setups and what # helps one helps the other.. and yes the squid configuration can be Thanks Henrik. i am planning to run a separate squid process just to cleanly separate reverse proxy from forward. Do you have docs that allow us to run two diff squid instances in one box? The reverse proxy will also be running in a diff and latest squid version. I can find some info fr google, but i would prefer a more authoritative source likc squid faq/doc. I reckon it may just be a simple case of like installing a different app using a different bin, config, and port locations, no? but i found hint thoug http://wiki.squid-cache.org/SquidFaq/OperatingSquid#head-64aff7c0bc127c50351ea7d062ca079d458eb9c3. is this it? thanks and kind regards -botp http://wiki.squid-cache.org/MultipleInstances Chris
RE: [squid-users] reverse proxy for squid2.5.10
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] : # Save for the need of rewriting stuff most of the questions seen in # reverse proxying is the same in complex forward proxy setups and what # helps one helps the other.. and yes the squid configuration can be Thanks Henrik. i am planning to run a separate squid process just to cleanly separate reverse proxy from forward. Do you have docs that allow us to run two diff squid instances in one box? The reverse proxy will also be running in a diff and latest squid version. I can find some info fr google, but i would prefer a more authoritative source likc squid faq/doc. I reckon it may just be a simple case of like installing a different app using a different bin, config, and port locations, no? but i found hint thoug http://wiki.squid-cache.org/SquidFaq/OperatingSquid#head-64aff7c0bc127c50351ea7d062ca079d458eb9c3. is this it? thanks and kind regards -botp
RE: [squid-users] reverse proxy for squid2.5.10
fre 2007-03-09 klockan 11:08 +0800 skrev Peña, Botp: imho, if squid is to be a very flexible and powerful reverse proxy, i'd suggest that it be a separate program/daemon or maybe a separate squid-reverse.conf perhaps. Save for the need of rewriting stuff most of the questions seen in reverse proxying is the same in complex forward proxy setups and what helps one helps the other.. and yes the squid configuration can be improved significantly to make request routing much easier. The steps taken in 2.6 is just a miniature step forward allowing reverse proxying to benefit from the request routing options already available. But using Squid pretty much assumes there is no need for rewriting, only routing (selecting which server the request should be sent to, without altering the request or response as such). This isn't very likely to change much unless one is willing to combine Squid with an ICAP server doing the heavy part of the rewrites.. Regards Henrik signature.asc Description: Detta är en digitalt signerad meddelandedel
Re: [squid-users] reverse proxy for squid2.5.10
Peña wrote: fr: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] : # To: [EMAIL PROTECTED]; Peña, Botp # we're using squid2.5.10 (basically because we're using debian apt # package). # # Did you mean to say you stuck with Debian stable release? # squid 2.6 and squid 3.0 are both available through Debian apt # at unstable # level. good info. care to point the repository, so i can update my sources.list? kind regards -botp Sorry for the delay, I have been up to my elbows in the code for a few days. ;-) The repositories I use are the official debian ones for my country: deb http://ftp.nz.debian.org/debian unstable main contrib non-free deb http://ftp.nz.debian.org/debian stable main contrib non-free Amos
RE: [squid-users] reverse proxy for squid2.5.10
From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] : # I strongly recommend you to update.. the configuratioon in 2.6 is much # better. indeed. # we'd like to do reverse proxy and we'd like to ask if # possible the ff: # # 1 reverse proxy multiple backend webservers # 2 reverse proxy with url mapping, like #/foo/ - http://backend/foo #/bar/ - http://backend2/bar #/foobar/ - http://backend3/foo/bar # # Note: Rewriting URLs is generally a bad idea. Web servers quite often # generate what they think is the correct URL in various contexts.. # (redirects, generated links, etc). So it's better to just map the URLs # to servers, not rewrite them.. yes # i cannot find squid docs detailing this. maybe i'm too dumb :) # tips, pls. # # http://wiki.squid-cache.org/SquidFaq/ReverseProxy # # Whats missing is how to map URLs to servers. This is done by # cache_peer_access (or _domain depending on what kind of # mapping is done, # and taste). I'll add an example of that as well.. yes. it's a 2.6 doc too. thanks much. fwiw, i recently switched to apache1.3 for reverse (forward still using squid). I find the combi very clean, no conflicts, and the squid + apache reverse proxy combined w apache's virtual hosts very flexible. imho, if squid is to be a very flexible and powerful reverse proxy, i'd suggest that it be a separate program/daemon or maybe a separate squid-reverse.conf perhaps. kind regards -botp # Regards # Henrik
RE: [squid-users] reverse proxy for squid2.5.10
From: Amos Jeffries [mailto:[EMAIL PROTECTED] : # The repositories I use are the official debian ones for my country: # # deb http://ftp.nz.debian.org/debian unstable main contrib non-free # deb http://ftp.nz.debian.org/debian stable main contrib non-free Amos, thank you for these. I will try it. kind regards -botp
Re: [squid-users] reverse proxy for squid2.5.10
mån 2007-03-05 klockan 11:16 +0800 skrev Peña, Botp: Hi, we're using squid2.5.10 (basically because we're using debian apt package). I strongly recommend you to update.. the configuratioon in 2.6 is much better. we'd like to do reverse proxy and we'd like to ask if possible the ff: 1 reverse proxy multiple backend webservers 2 reverse proxy with url mapping, like /foo/ - http://backend/foo /bar/ - http://backend2/bar /foobar/ - http://backend3/foo/bar Note: Rewriting URLs is generally a bad idea. Web servers quite often generate what they think is the correct URL in various contexts.. (redirects, generated links, etc). So it's better to just map the URLs to servers, not rewrite them.. i cannot find squid docs detailing this. maybe i'm too dumb :) tips, pls. http://wiki.squid-cache.org/SquidFaq/ReverseProxy Whats missing is how to map URLs to servers. This is done by cache_peer_access (or _domain depending on what kind of mapping is done, and taste). I'll add an example of that as well.. Regards Henrik signature.asc Description: Detta är en digitalt signerad meddelandedel
[squid-users] reverse proxy for squid2.5.10
Hi, we're using squid2.5.10 (basically because we're using debian apt package). we'd like to do reverse proxy and we'd like to ask if possible the ff: 1 reverse proxy multiple backend webservers 2 reverse proxy with url mapping, like /foo/ - http://backend/foo /bar/ - http://backend2/bar /foobar/ - http://backend3/foo/bar i cannot find squid docs detailing this. maybe i'm too dumb :) tips, pls. kind regards -botp
RE: [squid-users] reverse proxy for squid2.5.10
Peria Yes, the structure I use is: http://proxyIP/foo/ - http://backend/foo/ There use to be good docs on Visolve site which is linked off the main web page (Configuration Guide link) but I couldn't find the reverse proxy stuff last time I looked. If you need more details ask. Regards Mike -Original Message- From: Peña, Botp [mailto:[EMAIL PROTECTED] Sent: Monday, 5 March 2007 2:17 PM To: squid-users@squid-cache.org Subject: [squid-users] reverse proxy for squid2.5.10 Hi, we're using squid2.5.10 (basically because we're using debian apt package). we'd like to do reverse proxy and we'd like to ask if possible the ff: 1 reverse proxy multiple backend webservers 2 reverse proxy with url mapping, like /foo/ - http://backend/foo /bar/ - http://backend2/bar /foobar/ - http://backend3/foo/bar i cannot find squid docs detailing this. maybe i'm too dumb :) tips, pls. kind regards -botp
RE: [squid-users] reverse proxy for squid2.5.10
From: Mike Withers [mailto:[EMAIL PROTECTED] : # Yes, the structure I use is: # http://proxyIP/foo/ - http://backend/foo/ would you mind sharing how you did it? # There use to be good docs on Visolve site which is linked off # the main web # page (Configuration Guide link) but I couldn't find the # reverse proxy stuff # last time I looked. If you need more details ask. yes, it's the details i need. my last option is to use apache, but i'd like to stick to one (squid), if squid can do it. kind regards -botp
Re: [squid-users] reverse proxy for squid2.5.10
Hi, we're using squid2.5.10 (basically because we're using debian apt package). Did you mean to say you stuck with Debian stable release? squid 2.6 and squid 3.0 are both available through Debian apt at unstable level. Amos
RE: [squid-users] reverse proxy for squid2.5.10
fr: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] : # To: [EMAIL PROTECTED]; Peña, Botp # we're using squid2.5.10 (basically because we're using debian apt # package). # # Did you mean to say you stuck with Debian stable release? # squid 2.6 and squid 3.0 are both available through Debian apt # at unstable # level. good info. care to point the repository, so i can update my sources.list? kind regards -botp
RE: [squid-users] reverse proxy for squid2.5.10
Peria
The following applies to the 2.5 series. Note that Henrik Nordstrom had
indicated earlier on another thread that the details for 2.6 are up to date
in the wiki at:
http://wiki.squid-cache.org/SquidFaq/ReverseProxy
The important lines in the conf file are:
# This is the port the proxy is listening on
http_port 80
# User nobody in group nobody .. could be user:squid group:squid
cache_effective_user nobody
cache_effective_group nobody
# This is the port your backend(s) are listening on
httpd_accel_port 80
httpd_accel_host virtual
httpd_accel_single_host off
httpd_accel_with_proxy on
redirect_program /usr/local/squid/redirect
# end of config ##
Not this is the bare bones info, you will need to look at such things as:
- cache manage email address
- log file paths
- pid file path
I have used a perl script to remap the URL's. This was what was given as an
example in the original Visolve info. My script is essentially:
#! /usr/bin/perl
$|=1;
while () {
tr/A-Z/a-z/;
s|http://proxy_address/JoeBloggs/|http://backend_address/JoeBloggs/|g;
print;
}
This is a perl statement which substitutes one address to another taking the
original address from std input given by squid
Regards Mike
-Original Message-
From: Peña, Botp [mailto:[EMAIL PROTECTED]
Sent: Monday, 5 March 2007 2:53 PM
To: squid-users@squid-cache.org
Subject: RE: [squid-users] reverse proxy for squid2.5.10
From: Mike Withers [mailto:[EMAIL PROTECTED] :
# Yes, the structure I use is:
# http://proxyIP/foo/ - http://backend/foo/
would you mind sharing how you did it?
# There use to be good docs on Visolve site which is linked off
# the main web
# page (Configuration Guide link) but I couldn't find the
# reverse proxy stuff
# last time I looked. If you need more details ask.
yes, it's the details i need.
my last option is to use apache, but i'd like to stick to one (squid), if
squid can do it.
kind regards -botp
RE: [squid-users] reverse proxy for squid2.5.10
From: Mike Withers [mailto:[EMAIL PROTECTED] : # The following applies to the 2.5 series. Note that Henrik # Nordstrom had # indicated earlier on another thread that the details for 2.6 # are up to date snip Mike, thanks much. I will try this. kind regards -botp
