Re: [MEL-NAP] Putting AUIX local domains into squid

Further thoughts on Squid and BGP:

I recently learned the syntax 'route -n get 203.2.144.6' which returns
information about a path to a host in the host's routing tables. On
FreeBSD, it returns:

For a non-locally-known host
   route to: 203.20.144.6
destination: default
       mask: default
    gateway: 203.29.224.30
  interface: ed0
      flags: UP,GATEWAY,STATIC,DONE,PRCLONING

For a locally-known host:

   route to: 203.8.13.6
destination: 203.8.13.0
       mask: 255.255.255.0
    gateway: 203.29.224.19
  interface: ed0
      flags: UP,GATEWAY,DONE,PRCLONING

Thus, squid could interrogate the host's routing tables directly to
determine the localness of a host, working on the basis that if the
returned route is not 'default' it should be asked directly, and not
through a parent. Running gated on the squid machine would thus manage
the routing tables for squid.

The only catch is that 'route' is suid root so that it can read the kernel
routing tables, and thus a separate squid-routed would be needed to
interrogate the tables on squid's behalf.

Thoughts?

Danny
Received on Tue Jul 29 2003 - 13:15:40 MDT