RE: [squid-users] Squid and Selecting Gateways

Thanks Henrik however this is squid running on a Windows 2000 box and AFAIK
you cannot set windows routing tables like in Linux. Also with your solution
(which I adore) there is still the problem that the second gateway requires
connection to an upstream proxy. How will your solution work with this?

_________________________________

James Collins
Technical Officer
Cairns School of Distance Education
Hoare St, Cairns QLD 4870

Ph: +61 7 4050 8203
Fax: +61 7 4051 0336
Mob: +61 402 866 972
Email: james.collins@eq.edu.au

How am I doing? If you have any comments, Please contact the Principal at
rhuel1@eq.edu.au

This message (including attachments) is intended for the addressee named
above. It may also be confidential, privileged and/or subject to copyright.
If you wish to forward this message to others, you must first obtain the
permission of the author. If you are not the addressee named above, you must
not disseminate, copy, communicate or otherwise use or take any action in
reliance on this message. You understand that any privilege or
confidentiality attached to this message is not waived, lost or destroyed
because you have received this message in error. If you have received this
message in error please notify the sender and delete from any computer.
Unless explicitly attributed, the opinions expressed in this message do not
necessarily represent the official position or opinions of the State of
Queensland or the Queensland Department of Education. Whilst all care has
been taken, the Department of Education disclaims all liability for loss or
damage to person or property arising from this message being infected by
computer virus or other contamination.

> -----Original Message-----
> From: Henrik Nordstrom [mailto:henrik@henriknordstrom.net]
> Sent: Monday, 13 March 2006 7:42 PM
> To: James Collins
> Cc: squid-users@squid-cache.org
> Subject: RE: [squid-users] Squid and Selecting Gateways
>
> mån 2006-03-13 klockan 16:27 +1000 skrev James Collins:
> > Thanks for the pointer Mark. Unfortunally the printed manual I have
> > doesn't explain the tcp_outgoing_address completely. It
> comments that
> > it only overrides the systems default gateway and doesn't
> mention you
> > can use it under acl's.
>
> Squid has no control over which gateway to use. All it can
> say is to ask the OS to "please use this specific source
> address when I make connections".
>
> Which gateway or NIC to use is a business of the routing
> settings in your OS. Multihomed routing like you described
> generally requires policy routing to be configured to route
> the traffic to the correct gateway(s) depending on source
> address or whatever criterias you have other han just destination.
>
> Please note that there is an alternative and much easier
> solution to your original problem. Simply configure your OS
> to route the IP addresses of the site in question via the
> second gateway and leave tcp_outgoing_address alone. Your OS
> and Squid will then do what they should automatically.
>
> So you will have
>
> NIC 1:
>
> ip = x.y.z.a/mask
> default gateway = x.y.z.b
>
> NIC 2:
>
> ip = x.y.y.a/mask
> no default gateway
>
> Static routes:
>
> ip.of.site via x.y.y.b
>
>
>
> x.y.z = ISP1
> x.y.y = ISP2
>
>
>
> Hmm... upon reading your question again it seems these two
> NICs are to be connected to the same Ethernet? If so then no
> new NIC is needed. Just assign a second IP address to the
> existing one.
>
> Additionally routing of requests to parents is done via the
> cache_peer + cache_peer_access directives. You only need to
> play the games with routing if you need different IP level
> routers, or different source addresses to be used for the traffic.
>
>
>
>
> Regards
> Henrik
>