Re: [squid-users] tproxy configuration

Sent from my iPad

On 19 Jul 2012, at 19:58, Eliezer Croitoru <eliezer_at_ngtech.co.il> wrote:

> On 7/17/2012 6:01 PM, Wayne Lee wrote:
>> < SNIP >
>> Many thanks Eliezer.
>>
>> I still have the same issue in that once the packets arrive on the
>> squid box they are not actually diverted into the squid daemon and
>> thus fail.
>>
>> I have managed to find a working solution and that is to not use wccp
>> and just built a proper gre tunnel between the squid and cisco router,
>> the DNAT/Redirect methods then work as expected.
>>
>>
>> Thanks again
>>
>>
>> Wayne
>>
> if the packets are not diverted into squid there is something wrong with your setup.
> if you will post your squid config routes and iptables i will might be able to help you.
>
> for me squid works with wither tproxy\dnat\redirect + wccp or with basic routing rules.
>
> Regards,
> Eliezer
>
> --
> Eliezer Croitoru
> https://www1.ngtech.co.il
> IT consulting for Nonprofit organizations
> eliezer <at> ngtech.co.il

Hello

I followed your guide on this post although I swapped the wccp redirect statements around

You had

 ip wccp 80 redirect out
 ip wccp 90 redirect in

I changed it to
ip wccp 90 redirect in
ip wccp 80 redirect out
 
No traffic was being redirected down the wccp until I changed it. Everything else was as you posted. Packets were not being diverted or tproxy'ed into squid which has been my issue all along. I'm happy to set it up that way again and provide whatever debug output required as I would prefer the wccp for failover purposes. Any/all help and guidance is appreciated.

Regards

Wayne
Received on Thu Jul 19 2012 - 21:35:54 MDT