Re: [squid-users] proxy placement.

On Thursday 20 October 2005 19:04, Derrick MacPherson wrote:
> I've gotten my authentication working as I want in my test environment,
> I'm now looking to put my squid box into our production environment. I
> am wondering if I can get some suggestions; what I was thinking of doing
> is putting 3 nics in the box, one with an IP on the lan, the other 2 in
> a bridge that I will put in between either our LAN and our firewall
> (pix, hopefully to be replaced soon) OR our firewall and our internet
> router.

That very much depends on your network setup. We run a DMZ topology which
means:

 Internet
    |
 Firewall---DMZ
    |
   LAN

In that case we'd put the proxy in the DMZ with one interface. Multiple
interfaces can quickly become a burden because you have to care about
routing more than you probably want. This way the rules are simple...

LAN -> DMZ Port 3128
DMZ -> Internet Port 80 + 1024-65535

Besides you didn't tell which mode you plan to run Squid in. Forward?
Interception? Reverse?

Kind Regards
 Christoph

-- 
~
~
".signature" [Modified] 1 line --100%--                1,48         All