Questions tagged [squid]

Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

Squid is a FOSS package licensed under the GNU GPL primarily used as a web proxy server and cache.

In addition to its primary usages for web proyying and caching, it supports FTP and has limited support for several other protocols, including TLS, SSL, HTTPS and Gopher.

It has a wide variety of uses, from speeding up a web server by caching repeated requests (reverse proxy); to caching web, DNS and other computer network lookups for a group of people sharing network resources (regular proxy); to improving security by filtering traffic (layer 7 firewall).

Squid's homepage is here, and its Wikipedia entry is here.

1400 questions
2
votes
1 answer

Squid cache_peer round-robin algorithm not working as expected

I have number of peer-to-peer HTTP proxies and I need to distribute my requests among them evenly, so I added multiple cache_peer directives and set round-robin as peer selection algorithm. This is my config: # Basic configuration visible_hostname…
2
votes
4 answers

CentOS7 Kerberos Auth: Improper format of Kerberos configuration file;

I'm working on setting up a Squid 4.0 explicit proxy for group based AD authentication against a Active Directory domain (Server 2012 R2) with SSL bumping on a minimal CentOS 7 (64b) install. The domain join was very sketchy using authconfig-tui…
beeks
  • 211
  • 1
  • 2
  • 9
2
votes
1 answer

Integrating squid with active directory

I am trying to integrate squid as a web proxy for my users in active directory. I have followed the tutorial in the squid site in here. When i run the command : msktutil -c -b "CN=Administrator" -s HTTP/proxy.example.com -k /etc/squid3/PROXY.keytab…
Vini7
  • 131
  • 5
2
votes
2 answers

Trouble getting transparent Squid forwarding proxy working with ssl

I have an environment consisting of four servers networked together. One server acts as the server, and the other three act as clients for running automated tests and Linux benchmarking using Phoromatic. The four systems are all behind a corporate…
Andrew Bowers
  • 33
  • 1
  • 6
2
votes
0 answers

iptables configuations for stunnel+squid

I'm building a highly anonymous proxy server with squid and stunnel, and I'm facing a configurations problem on iptables. The server should act like this: browser <-> client stunnel <=> server stunnel <-> server squid <=> site Wheres - means local…
Hartman
  • 141
  • 1
  • 1
  • 7
2
votes
0 answers

How do I make Docker forward a packet from remote when a packet from the dockerhost works?

I have set up a docker container with a vpn. I added another container with a Squid proxy using the --net option, sharing the same network as the vpn. Running a traceroute from within the container I am able to see that traffic is routed through the…
2
votes
0 answers

SquidGuard holding navigation

This is my first question within ServerFault. So I beg you pardon if the question here is a little out of context or too long. I haven't found anything on the internet so I'm recurring to you. I'm using a pfSense Firewall v2.2.4 in a virtual machine…
2
votes
2 answers

How can I set up a reverse proxy for several web applications and static content?

Update: based on Jesper Mortensen's response, here is some more information. The applications are based on Perl's HTTP::Daemon. I do plan to deploying them on a Linux server. Each application does something different. Therefore, this is not really…
Sinan Ünür
  • 331
  • 4
  • 12
2
votes
1 answer

Iptables rule to block ip range for a specific string (works sometimes)

After a two week search and read I ended up with this iptable rule that blocks youtube (as string) to an ip range in my office network. iptables -A FORWARD -t filter -m iprange --src-range 10.217.76.60-10.217.76.70 -m string --algo bm --string…
ASK
  • 41
  • 1
  • 7
2
votes
1 answer

APT-GET behind a proxy with Digest Authentication

I'd like to use apt-get (and other ubuntu tools) to download software and keep it updated. Unfortunately, my company has set a squid proxy to accept digest authentication only. I've seen somewhere (can't find the link again) that APT-GET uses WGET,…
Victor Ribeiro
  • 161
  • 1
  • 6
2
votes
1 answer

Squid server issues after upgrade (Ubuntu 14)

We have upgraded a squid proxy server from a previous version of Ubuntu (Can't recall what it was sorry) to version 14.04.2. Now it appears Squid will not start / VM's can not reach internet through proxy. I noticed there maybe an issue with…
StackUser_py
  • 283
  • 2
  • 4
  • 14
2
votes
1 answer

How to establish new connection through proxy using Squid in Python script?

I am new to networking and proxy. For a project I need to give a proxy connection. I already have a connection and I want change the connection behavior of the process to connect through that proxy. I would also like it to use a new IP in the event…
2
votes
3 answers

Squid cannot log to syslog

According to this documentation: http://www.squid-cache.org/Doc/config/access_log/ squid should be able to log to rsyslog with the following directives: access_log syslog:daemon.info squid cache_log syslog:daemon.info squid However when I try to…
napalmbrain
  • 31
  • 1
  • 3
2
votes
2 answers

Setting up Squid Transparent Proxy on a machine separate from the router

As explained in the title, I'm trying to set up a Squid Transparent Proxy on a machine separate from the router, and also separate from the private network I want to filter through the proxy. The context would be like this: Router Machine runs…
rubjim
  • 21
  • 1
  • 2
2
votes
2 answers

Can Squid be configured to use the incoming IP address as the outgoing Address if multiple IPs are used on the server?

At the moment I have to define rules for all local ips like this: acl ip1 localip 1.1.1.1/32 tcp_outgoing_address 1.1.1.1 ip1 acl ip2 localip 2.2.2.2/32 tcp_outgoing_address 2.2.2.2 ip2 acl ip3 localip 3.3.3.3/32 tcp_outgoing_address 3.3.3.3 ip3 As…
The Shurrican
  • 2,240
  • 7
  • 39
  • 60