[squid-users] WCCP configuration

2009-01-07 Thread viveksnv
OS - Fedor8 Kernal - 2.6.20 Cttproxy - 2.6.20 Cisco Router - IOS 12.4 We have compiled squid+Tproxy and it works fine. Tunelling has been done between the squid machine and the router. We need to configure WCCP. The WCCP config in squid:- wccp2_router xxx.xx.xxx.xxx wccp_version 4 wccp2_forw

[squid-users] Re: WCCP configuration

2009-01-09 Thread viveksnv
Hi, Thanks for the reply. It did help us solve the problem. But there is a new issue. We have configured as squid+tproxy. The squid ip is not displayed and only the client ip is displayed when we do the proxy test. But after configuring wccp we find that the server ip is displayed in the prox

Re: [squid-users] Re: WCCP configuration

2009-01-10 Thread viveksnv
Amos, Thanks for your reply. Sorry, we are not using TPROXY but cttporxy 2.6.20-2.0.6, iptables 1.3.8 and linux kernal 2.6.20.21. Cisco IOS 2800 Ver 12.4 (13b) WCCP+Tranparent proxy works good. Trproxy without wccp works well by not revealing the server ip and only displaying the client ip.

Re: [squid-users] Re: WCCP configuration

2009-01-13 Thread viveksnv
Hello Hendrik, I am facing some issues while implementing Squid + Tproxy and WCCP. There is no problem with squid + Transparent + WCCP. cache.log as follows... 2009/01/12 08:36:11| clientTryParseRequest: FD 155 (189.50.133.254:1955) Invalid Request 2009/01/12 08:36:18| clientTryParseReque

Re: [squid-users] Re: WCCP configuration

2009-01-14 Thread viveksnv
Henrik, Thanks for your reply. You said we should use only either transparent or tproxy and not both, but i feel we need to use both, like " http_port 3128 tproxy tranparent " based on the following. The parseHttpRequest() function needs to parse the "Host:" header in the http request. Ho

[squid-users] Connection time out error with tproxy

2009-01-14 Thread viveksnv
Amos, Thanks again for your reply. We have configured squid + Tproxy + WCCP and client ip is redirect to the web server, but browser shows a connection timeout(110) error and it takes a long time even to display this error message. The access.log shows long timestamp value. forward log sh

Re: [squid-users] Connection time out error with tproxy

2009-01-14 Thread viveksnv
Hi Amos, Thank you very much. This is ifconfig result of the squid server. But it works in transparent mode. but why not in tproxy ? eth0 Link encap:Ethernet HWaddr inet addr:xx.xx.xx.xx Bcast:xx.xx.xx.xx Mask:255.255.255.252 inet6 addr: fe80::21a:4bff:fe34:9af0/64

[squid-users] Problem in WCCP configuration

2009-01-16 Thread viveksnv
Hi All, Two wccp services 80, 90 is detected by the router. 80 - outgoing, 90-incoming. But return traffic does not comes to squid. No packets redirected by the service 90. Router IOS version is Cisco IOS Software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4(13b), RELEASE SOFTWAR

[squid-users] Fwd: Problem in WCCP configuration

2009-01-16 Thread viveksnv
Amos, Henrik I need your help. I am a newbie in squid + tproxy + WCCP. So I sent lot messages to you. Now i describe my problem. I have a router with 2 Ethernet, 6 Serial interfaces. LAN users connected via Ethernet 0/0 and squid machine connected via Ethernet 0/1 interface. And internet co

Re: [squid-users] Cisco with WCCP!! newbie here..

2009-01-16 Thread viveksnv
Roland, I have the same issue. I am using cisco 2800 IOS version 12.4(13b). But it works in transparent mode perfectly. If we go Tproxy, it's not working. Any IOS bug ? I just share my problems also. Thanks Vk. -Original Message- From: Roland Roland To: Ritter, Nicholas ; squid-u

[squid-users] Doubts in Tproxy

2009-01-27 Thread viveksnv
Hi All, I have a doubt in Tproxy with WCCP. How squid+WCCP identifies the packets return from the web server ?.. For example When client access the squid-cache.org, the request comes to router then redirects to squid server using GRE tunnel then goes to squid-cache.org server. when squid-cach

[squid-users] Some sites not working!!!

2009-02-04 Thread viveksnv
Hi All, I am using Squid 2.7 Stable 5 with Tproxy. I have problem while accessing some sites. Example: When accessing http://seek.co.nz, it takes more time and returns error time out. It works good with out squid. I had changed following parameters, but no luck. Is it related with http 1.

Re: [squid-users] Some sites not working!!!

2009-02-05 Thread viveksnv
Hi Henrik, Thanks for your reply. I have sent it to squid-users mailing list and i received it. I will correct it if i am doing wrong. The below problem was solved. Thanks for mailing list archival. Thanks Vivek Squid usage & configuration questions is best sent to the squid-users mailin

[squid-users] Need your help : Tproxy + WCCP

2009-02-17 Thread viveksnv
Hello All, I am trying to setup a Tproxy+WCCP. WCCP+Transparent proxy works fine and also Tproxy works good without WCCP. I had followed the following link for WCCP configuration: http://wiki.squid-cache.org/ConfigExamples/FullyTransparentWithTPROXY. Only SYNC packets reaches the w

[squid-users] HTTPS traffic in normal transparent proxy

2008-10-14 Thread viveksnv
Hi all, I need to handle the HTTPS request(443) in squid transparent proxy. I am using squid 3.0. http_port 3128 transparent https_port 3129. Forward the 80 port request to 3128 and 443 port to 3129. In debugging mode, squid ready to handle the HTTPS requests.But not working. ( Error : take

Re: [squid-users] HTTPS traffic in normal transparent proxy

2008-10-15 Thread viveksnv
My configuration is... http_port 0.0.0.0:3128 transparent https_port 0.0.0.0:3129 transparent cert=/usr/local/squid-test/CA/servercert.pem key=/usr/local/squid-test/CA/serverkey.pem Iptable rules are: iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128 iptab

Re: [squid-users] HTTPS traffic in normal transparent proxy

2008-10-15 Thread viveksnv
Thanks Henrik. i tried with https_port 0.0.0.0:3129 transparent cert=/usr/local/squid/CA/servercert.pem key=/usr/local/squid/CA/serverkey.pem But not working... My problem is i want to block some sites like gmail.com. I have an acl for blocking. it works only for http://gmail.com not h

Re: [squid-users] HTTPS traffic in normal transparent proxy

2008-10-16 Thread viveksnv
Thanks Hendrik. I tried with both types for blocking https://gmail.com. My conf is acl gmail1 url_regex gmail.com mail.google.com and acl gmail dstdomain gmail.com mail.google.com http_access deny gmail gmail1 Now https://gmail.com is blocking.. But all other https sites not working.. Err

[squid-users] Squid conf for live video stream

2008-10-19 Thread viveksnv
Hi all, i configured squid transparent for caching live video stream. I need to cache the live video objects from my particular domain. But mostly url's vary from request to request.Because VOD service. So i configured the rewrite program. video object size is 5 Mb to 100Mb... I need to tune

Re: [squid-users] Squid conf for live video stream

2008-10-20 Thread viveksnv
Thanks Henrik, All the videos are cachable. Because the video's are maintained by us. But the origin server not near by us. So i try to cache and serve to customers quickly. And also the objects are cached by squid. But performance is very slow. so i need some tips to improve the performa