RE: [squid-users] Squid + (BGP) Routing

On Thu, 11 Mar 2004, Mark Tinka wrote:

> o does the tcp_outgoing_address function randomise
> choice of outgoing IP's, or can this be hard specified
> by the configuration so that clients are mapped
> one-to-one..?..

tcp_outgoing_address

        Allows you to map requests to different outgoing IP addresses
        based on the username or sourceaddress of the user making
        the request.

        tcp_outgoing_address ipaddr [[!]aclname] ...

        Example where requests from 10.0.0.0/24 will be forwareded
        with source address 10.1.0.1, 10.0.2.0/24 forwarded with
        source address 10.1.0.2 and the rest will be forwarded with
        source address 10.1.0.3.

        acl normal_service_net src 10.0.0.0/255.255.255.0
        acl good_service_net src 10.0.1.0/255.255.255.0
        tcp_outgoing_address 10.0.0.1 normal_service_net
        tcp_outgoing_address 10.0.0.2 good_service_net
        tcp_outgoing_address 10.0.0.3

        Processing proceeds in the order specified, and stops at first
        fully matching line.

> o by NAT'ing, is this performed on the router..?.. any
> idea of the NAT config required, if so..?..

At some point which sees the return traffic towards the clients and the
traffic from the Squid server, allowing it to NAT the Squid traffic to the
client IP and the resulting return traffic back to the Squid server.

Regards
Henrik
Received on Thu Mar 11 2004 - 06:40:43 MST