NTPT wrote:
> it is not for applicaions that need to know an IP address of the client,
> but for web traffic acceleration and traffic shaping purposees.
> Intercepting proxy is "all or nothing scenario" on ISP site and
> customers can not voluntairy switch it on/off themselfs.
>
> My idea is to allow users to set proxy in their browser to use (or not)
> our SQUID server, but we need their IP addresses to be preserved by
> squid (like in intercepting + tproxy scenario) for traffic shaping and
> control purposes.
>
Okay. Assuming you are using standard QoS traffic shaping techniques you
actually want to get Squid to set the TOS field values for you.
http://www.squid-cache.org/Doc/config/tcp_outgoing_tos/
This can be set for any of the fast accessible request details. You want
to look at client IPs (src ACL) or receiving port (myport, myportname)
Amos
>
>
>
> # ------------ Původní zpráva ------------
> # Od: Amos Jeffries <squid3_at_treenet.co.nz>
> # Předmět: Re: [squid-users] Transparent but not intercepting proxy
> # Datum: 10.1.2009 03:50:18
> # ----------------------------------------
> # NTPT wrote:
> # > Hi all.
> # > # > Is it possible to run SQUID proxy server in transparent mode
> without
> # interception ? ie SQUID pass original address of the client (tproxy
> patch), but
> # clients connections are not intercepted automatically and user have to
> set # proxy server manually in his browser ? # # No.
> # See X-Forwarded-For: header if you ave an application that needs to #
> detect the client behind a proxy. Sometimes also Client-IP:
> # # Amos
> # -- # Please be using
> # Current Stable Squid 2.7.STABLE5 or 3.0.STABLE11
> # Current Beta Squid 3.1.0.3
> # # #
-- Please be using Current Stable Squid 2.7.STABLE5 or 3.0.STABLE11 Current Beta Squid 3.1.0.3Received on Sat Jan 10 2009 - 14:17:11 MST
This archive was generated by hypermail 2.2.0 : Sat Jan 10 2009 - 12:00:02 MST