On Feb 10, 2008, at 4:25 PM, David de Beer wrote:


Hi, would that mean that I would have to create a tunnel for each http server that i would need to connect to?

Sounds like a lot of work, if I understand you correctly.

I know privoxy supports socks forwarding, but it does not do caching. I'm looking for something that will be able to do both.

Hi,

I don't know on which platform you are running Varnish, but I've just tested the following on FreeBSD:

- Install varnish
- Install tsocks (/usr/ports/net/tsocks)
- Configure tsocks to use socks proxy for connections to back-end subnet
- Start ssh tunnel like you describe in your original mailing
- Start varnish like this (example):
tsocks varnishd -a listen-host:port -b backend:port -s file,/tmp/ varnishcache,$((1024*1024*10))

This works nicely. You might want to add -c blowfish to your sshd commandline, to minimize CPU overhead in encryption. Whether -C (compresson) makes sense or not depends on the back-end config, data types, volume and CPU cycles available.

Have fun!
/Eirik




Thanks!


On Feb 10, 2008 5:10 PM, C. Handel <[EMAIL PROTECTED]> wrote:
Just create your SSH Tunnel with port forwarding (no need for Socks)
and point varnish to localhost:port as a source.

ssh -L 8080:www.example.com:80 [EMAIL PROTECTED]

But you will pass all traffic through the encryption of the SSH
Tunnel, which will produce quite some CPU Load on both the Systems.

Greetings
  Christoph

On Feb 10, 2008 3:39 PM, David de Beer <[EMAIL PROTECTED]> wrote:
>
> Greetings,
>
> I have not been able to find any info on this subject: Is it possible to > have proxy server forward requests to a socks server i.e. using ssh to > tunnel to another machine and then poiting the local caching server to the
> port on the local machine (which gets forwarded to another host via)
>
> something like this:
>
> ssh -f -p 22 -D 45000 -l myname myfriends.host.net -N
>
> this will create a SOCKS5 server on 127.0.0.1:45000
>
> Can then one basically ask the caching server to retrieve everything through
> socks server on 127.0.0.1:45000 ?
>
> Thanks!
>
> --
>  recovery is forever...
> ..... if you can take it that long.
> _______________________________________________
> varnish-misc mailing list
> [email protected]
> http://projects.linpro.no/mailman/listinfo/varnish-misc
>
>



--
recovery is forever...
..... if you can take it that long. _______________________________________________
varnish-misc mailing list
[email protected]
http://projects.linpro.no/mailman/listinfo/varnish-misc

_______________________________________________
varnish-misc mailing list
[email protected]
http://projects.linpro.no/mailman/listinfo/varnish-misc

Reply via email to