Questions tagged [squid]

Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

Squid is a FOSS package licensed under the GNU GPL primarily used as a web proxy server and cache.

In addition to its primary usages for web proyying and caching, it supports FTP and has limited support for several other protocols, including TLS, SSL, HTTPS and Gopher.

It has a wide variety of uses, from speeding up a web server by caching repeated requests (reverse proxy); to caching web, DNS and other computer network lookups for a group of people sharing network resources (regular proxy); to improving security by filtering traffic (layer 7 firewall).

Squid's homepage is here, and its Wikipedia entry is here.

1400 questions
3
votes
0 answers

HAProxy - Securing inbound TCP connections

I've been trying to implement a load balanced secured proxy passthrough using HAProxy. Basically what I want to do is this: request ----> haproxy passthrough -----> multiple proxy servers -----> target Now, I didn't want this to just be opened to…
Jarky
  • 31
  • 2
3
votes
1 answer

How to configure PFSense firewall with external transparent Squid proxy?

I am using PFSense 2.0 and trying to get transparent proxy to work. As the internal Squid won't work with loadbalancing and dual-wan (and it seems Squid doesn't work at all on the latest build), I installed Squid on one of the Linux servers I have…
Raynet
  • 511
  • 2
  • 4
  • 11
3
votes
2 answers

How to calculate ulimit -n (file descriptors) for a dedicated squid server

I have a production squid server that was having some issues serving content and reporting that it was out of file descriptors. I was successfully able to increase it from 1024 (default) to 4096 and it seemed to resolve my errors in the log. I was…
TheGrandPackard
  • 206
  • 1
  • 10
3
votes
1 answer

Squid proxy - Find urls that are consuming the most bandwidth

I have squid proxy setup on my home network (squid is running on Ubuntu server, 14.04). Right now our home internet usage is about 2TB per month. I would like to find out which sites/urls/domains are consuming the most bandwidth. Where do I need to…
3
votes
0 answers

Squid3 Access Denied error

I have set up a VPS on DigitalOCean and installed squid3. Here is the tail of the /etc/squid3/squid.conf file: acl myhost src 1.2.3.4 # 1.2.3.4 is replaced by my ip at whatismyipaddress.com http_access allow myhost via off forwarded_for…
conquester
  • 153
  • 2
  • 6
3
votes
2 answers

Squid 3.5: Preventing forwarding loop in intercept mode

I have set up a router and an intercepting HTTP squid proxy on different machines. Clients should use the proxy (without knowledge) in the following way: Client -> Router (DNATing to proxy server) -> Proxy Server -> Router -> Internet Requests that…
Cybran
  • 422
  • 2
  • 6
  • 16
3
votes
1 answer

Is it possible to expose pipe file from docker container?

Docker assume one container for one application. I have two apps (samba and squid) what talk to each other with pipe file. Is it possible to expose or share this pipe file between two containers?
Raf
  • 173
  • 7
3
votes
1 answer

Squid reverse proxy redirect / rewrite HTTP to HTTPS

My Squid Reverse Proxy only accepts HTTPS requests. What is a short way to redirect/rewrite a HTTP-request to https? So if the user visits http://foo.server.com he should be automatically redirected to https://foo.server.com
globus243
  • 139
  • 1
  • 2
  • 5
3
votes
1 answer

How to redirect Https CONNECT Request with Squid Explicit Proxy

I want to block certain urls for some users of my internal network. I am using a squid based explicit proxy for this purpose with a redirect_program. The clients are configured to use a pac file for https urls which makes them route their https…
muzammil
  • 59
  • 1
  • 2
  • 6
3
votes
1 answer

Make a basic auth client authenticate on a digest auth proxy server

My company has a legacy application which needs to connect to the Internet. Unfortunately, our network staff has changed the proxy settings in order to accept digest authentication only, which this application doesn't support. Is there any way to…
Victor Ribeiro
  • 161
  • 1
  • 6
3
votes
1 answer

How do I use Squid to redirect an incomig request to another host?

I'm trying to integrate an internal GitLab installation with a Slack incoming webhook but I have a problem, the machine where GitLab can only access other machines in the same network. I have VM which is in that same network and has external…
rfgamaral
  • 960
  • 2
  • 11
  • 18
3
votes
2 answers

Centos Squid Proxy Server for Windows Updates

I'm running Centos 7 as my OS and have installed squid to cache windows updates for my company. Going through the log file, it shows that everything is tcp_miss, including when it's accessing the windows update servers. I'm wanting my squid install…
Dean
  • 51
  • 1
  • 4
3
votes
2 answers

Hide squid in the header

I have a squid server installed, and I'd like it to be hidden when looking into the headers. First of all, I was getting both squid and the version on the headers: curl -i ip_address HTTP/1.0 400 Bad Request Server: squid/3.1.10 Mime-Version:…
tapp
  • 43
  • 1
  • 7
3
votes
2 answers

squid3 ssl bumping server-first with signed certificate

I'm trying to get Squid3.4 to do SSL Bumping with the server-first method. I followed this guide in alpinelinux. I'm working in explicit mode (browser configurer to Go to the proxy) and that works well. I generate my Key, my CSR as well, rebuilded…
user257666
  • 31
  • 1
  • 1
  • 2
3
votes
4 answers

Squid proxy performing extremely slow and sometimes doesn't work at all

I recently installed Squid on my desktop machine for testing purposes. I didn't edit the config whatsoever, and just pointed firefox at the proxy to see if it was working. Pages take an insanely long time to load, and sometimes just load forever. I…
AppleDash
  • 151
  • 1
  • 1
  • 5