Re: [squid-users] New Squid3 Stable 13 Setup

>
> Hi Amos,
>
> Thanks for responding to my message.
>
> i am trying to achieve as mentioned below
>
> Site A has proxy as Proxy 2 and another proxy is located in different
> country Site B through tunnel as Proxy1
>
> Site A has local internet when fails need all web request to be forwarded
> to
> proxy 1 through proxy 2 Ie with out changing client proxy address.
>
> similar setup was running for 1 month, some how messed up had to
> reconfigure
> from scratch.
>

Ah, okay this is what you want for the peering then:

Proxy2:
 prefer_direct on
 cache_peer Proxy1 parent 8080 3130
 ...

Proxy1:
  <only an ACL permitting Proxy2 to make requests as a client>

Note the absence of 'default originserver' on proxy2 and any mention of
peering on proxy1.

If you have any problems with that it will be caused by other configure
options I've overlooked.

Amos

>
> bharathvn wrote:
>>
>> Hi,
>>
>> i am trying to setup proxy server as show below
>>
>> Client ==>Sibling ==> Parent==> Internet
>>
>> i got error when we browse any site from parent server as mentioned
>> below
>>
>> The following error was encountered while trying to retrieve the URL: /
>>
>> Invalid URL
>>
>> Some aspect of the requested URL is incorrect.
>>
>> Some possible problems are:
>>
>> Missing or incorrect access protocol (should be http:// or similar)
>>
>> Missing hostname
>>
>> Illegal double-escape in the URL-Path
>>
>> Illegal character in hostname; underscores are not allowed.
>>
>> Your cache administrator is root.
>>
>> --------------------------------------------------------------------------------
>>
>> Generated Sun, 17 May 2009 18:13:40 GMT by proxy1 (squid/3.0.STABLE13)
>>
>> Parent Proxy config
>>
>>
>> http_port 8080
>> cache_peer proxy2 sibling 8080 0
>> hierarchy_stoplist cgi-bin ?
>> acl QUERY urlpath_regex cgi-bin \?
>> cache deny QUERY
>> acl apache rep_header Server ^Apache
>> cache_mem 100 MB
>> cache_swap_low 90
>> cache_swap_high 95
>> access_log /var/log/squid/access.log squid
>> acl manager proto cache_object
>> acl localhost src 127.0.0.1/255.255.255.255
>> acl to_localhost dst 127.0.0.0/8
>> acl SSL_ports port 443
>> acl Safe_ports port 80 # http
>> acl Safe_ports port 21 # ftp
>> acl Safe_ports port 443 # https
>> acl Safe_ports port 70 # gopher
>> acl Safe_ports port 210 # wais
>> acl Safe_ports port 1025-65535 # unregistered ports
>> acl Safe_ports port 280 # http-mgmt
>> acl Safe_ports port 488 # gss-http
>> acl Safe_ports port 591 # filemaker
>> acl Safe_ports port 777 # multiling http
>> acl CONNECT method CONNECT
>> acl US src b.b.b.b-b.b.b.254
>> acl server src c.c.c.1-c.c.c.254
>> http_access allow manager localhost
>> http_access deny manager
>> http_access deny !Safe_ports
>> http_access deny CONNECT !SSL_ports
>> http_access allow localhost
>> http_access allow US
>> http_access allow server
>> http_access allow all
>> http_reply_access allow all
>> icp_access deny all
>> cache_effective_user squid
>> cache_effective_group squid
>> icp_port 0
>> coredump_dir /var/spool/squid
>> refresh_pattern ^ftp: 1440 20% 10080
>> refresh_pattern ^gopher: 1440 0% 1440
>> refresh_pattern (cgi-bin|\?) 0 0% 0
>> refresh_pattern . 0 20% 4320
>>
>>
>> Sibling Proxy config
>>
>> http_port 8080
>> cache_peer proxy1 parent 8080 0 default originserver
>> hierarchy_stoplist cgi-bin ?
>> acl QUERY urlpath_regex cgi-bin \?
>> cache deny QUERY
>> acl apache rep_header Server ^Apache
>> cache_mem 100 MB
>> cache_swap_low 90
>> cache_swap_high 95
>> access_log /var/log/squid/access.log squid
>> acl manager proto cache_object
>> acl localhost src 127.0.0.1/255.255.255.255
>> acl to_localhost dst 127.0.0.0/8
>> acl SSL_ports port 443
>> acl Safe_ports port 80 # http
>> acl Safe_ports port 21 # ftp
>> acl Safe_ports port 443 # https
>> acl Safe_ports port 70 # gopher
>> acl Safe_ports port 210 # wais
>> acl Safe_ports port 1025-65535 # unregistered ports
>> acl Safe_ports port 280 # http-mgmt
>> acl Safe_ports port 488 # gss-http
>> acl Safe_ports port 591 # filemaker
>> acl Safe_ports port 777 # multiling http
>> acl CONNECT method CONNECT
>> acl BLR src a.a.a.1-a.a.a.254
>> acl US src b.b.b.b-b.b.b.254
>> acl server src c.c.c.1-c.c.c.254
>> acl TAC src d.d.d.1-d.d.d.254
>> acl all src 0.0.0.0/255.0.0.0
>> http_access allow manager localhost
>> http_access deny manager
>> http_access deny !Safe_ports
>> http_access deny CONNECT !SSL_ports
>> http_access allow localhost
>> http_access allow BLR
>> http_access allow US
>> http_access allow server
>> http_access allow TAC
>> http_access deny all
>> http_reply_access allow all
>> icp_access allow all
>> cache_effective_user squid
>> cache_effective_group squid
>> icp_port 0
>> always_direct deny US
>> always_direct deny BLR
>> always_direct deny TAC
>> prefer_direct on
>> coredump_dir /var/spool/squid
>> refresh_pattern ^ftp: 1440 20% 10080
>> refresh_pattern ^gopher: 1440 0% 1440
>> refresh_pattern . 0 20% 4320
>>
>> Pls help me on this.
>>
>> Thanks,
>> Bharathvn
>>
>
> --
> View this message in context:
> http://www.nabble.com/New-Squid3-Stable-13-Setup-tp23601156p23609041.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
>
>
Received on Tue May 19 2009 - 03:34:20 MDT