RE: [squid-users] Reverse proxy with 2 Nics

Hi,

I upgraded to Squid 2.6.STABLE12 and made the adjustments you mentioned.
I tried and start squid with /usr/local/squid/sbin/squid -z and I get
the following error:

FATAL: Failed to make swap directory /usr/local/squid/var/cache: (13)
Permission denied

I am executing this as root so I don't understand the problem.

Regards,
 
Jon Faranda

-----Original Message-----
From: Amos Jeffries [mailto:squid3@treenet.co.nz]
Sent: Monday, March 26, 2007 8:47 AM
To: Jonathan Faranda
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] Reverse proxy with 2 Nics

Jonathan Faranda wrote:
> Hi All,
>
> I am attempting to setup a reverse proxy using two nics on a Centos
4.4 box. Nic 1 (eth0 - 192.168.1.3) is where I want my outside world to
see and Nic 2 (eth1 - 192.168.3.1) is the network where my webserver
resides.
>
> I have modified my squid.conf as follows:
>
>
> visible_hostname name_of_reverse_proxy
>
> http_port name_of_reverse_proxy:80
>
> tcp_outgoing_address 192.168.3.1 #Nic 2 interface
>
> httpd_accel_host 192.168.3.2 #the webserver address
>
> httpd_accel_port 80
>
> httpd_accel_single_host on
>
> httpd_accel_with_proxy off
>
> httpd_accel_uses_host_header on
>
>
> I have no firewall running since I flushed the rules with
/sbin/iptables -F
>
> I am assuming it's a routing problem, but I do not understand how to
do this. Any ideas? Thanks.
>
> Regards,
>
> Jon Faranda

It looks like you are trying to use squid2.5
I highly recommend upgrading to squid2.6 or 3.0

Then the configuration becomes simply:

visible_hostname name_of_reverse_proxy
http_port 192.168.1.3:80 accel
http_port 192.168.3.1:80 accel

and a secure acl setup takes care of the rest, as per whatever you wish.

checkout this page:
    http://www.visolve.com/squid/squid30/network.php#http_port
I believe most of the parameters in this section apply to squid2.6 and
3.0 both.

Amos
Received on Mon Mar 26 2007 - 10:26:52 MDT