Re: [squid-users] Reverse proxy with 2 Nics

Jonathan Faranda wrote:
> Hi All,
>
> I am attempting to setup a reverse proxy using two nics on a Centos 4.4 box. Nic 1 (eth0 - 192.168.1.3) is where I want my outside world to see and Nic 2 (eth1 - 192.168.3.1) is the network where my webserver resides.
>
> I have modified my squid.conf as follows:
>
>
> visible_hostname name_of_reverse_proxy
>
> http_port name_of_reverse_proxy:80
>
> tcp_outgoing_address 192.168.3.1 #Nic 2 interface
>
> httpd_accel_host 192.168.3.2 #the webserver address
>
> httpd_accel_port 80
>
> httpd_accel_single_host on
>
> httpd_accel_with_proxy off
>
> httpd_accel_uses_host_header on
>
>
> I have no firewall running since I flushed the rules with
/sbin/iptables -F
>
> I am assuming it's a routing problem, but I do not understand how to
do this. Any ideas? Thanks.
>
> Regards,
>
> Jon Faranda

It looks like you are trying to use squid2.5
I highly recommend upgrading to squid2.6 or 3.0

Then the configuration becomes simply:

visible_hostname name_of_reverse_proxy
http_port 192.168.1.3:80 accel
http_port 192.168.3.1:80 accel

and a secure acl setup takes care of the rest, as per whatever you wish.

checkout this page:
    http://www.visolve.com/squid/squid30/network.php#http_port
I believe most of the parameters in this section apply to squid2.6 and
3.0 both.

Amos
Received on Mon Mar 26 2007 - 07:46:55 MDT