Questions tagged [squid]

Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

Squid is a FOSS package licensed under the GNU GPL primarily used as a web proxy server and cache.

In addition to its primary usages for web proyying and caching, it supports FTP and has limited support for several other protocols, including TLS, SSL, HTTPS and Gopher.

It has a wide variety of uses, from speeding up a web server by caching repeated requests (reverse proxy); to caching web, DNS and other computer network lookups for a group of people sharing network resources (regular proxy); to improving security by filtering traffic (layer 7 firewall).

Squid's homepage is here, and its Wikipedia entry is here.

1400 questions
6
votes
1 answer

How can I make squid add its own http header to the reply, based on ACL?

I have a Squid server at work doing Squid-ly things. I need to have Squid reply with a particular header based on matching an ACL. The header is a custom one that will look something like X-External-IP: 123.45.67.8 I already know about…
Bryan Boettcher
  • 381
  • 2
  • 10
6
votes
1 answer

Squid proxy not caching anything

squid.conf: http_access allow all # Squid normally listens to port 3128 http_port 3128 accel defaultsite=localhost no-vhost cache_peer localhost parent 80 0 no-query originserver name=myAccel cache_peer_access myAccel allow all # Uncomment and…
Dan Fabulich
  • 497
  • 1
  • 6
  • 19
6
votes
1 answer

ProxyChains is redirecting packets destined to local machine to the proxy server

I am using ProxyChains to connect to my proxy at college. It works very fine except that it even redirects packets meant for a local port to the proxy server…
Ashish
  • 165
  • 1
  • 7
6
votes
1 answer

How can config squid to use a socks as parent or cascade?

I have a socks server and a squid linux server. How can config squid to use socks (as parent or proxy chain or cascade) ?
Metalik
  • 157
  • 1
  • 2
  • 10
6
votes
2 answers

Squid Proxy - Hiding the proxy

I have setup squid proxy on an ubuntu server with DB authentication. However, whilst connected to the proxy, if I visit http://www.whatismyip.com/ it still shows my ACTUAL ip address. How can I configure Squid to hide my IP and to hide the fact it's…
gunwin
  • 6,400
  • 3
  • 19
  • 22
6
votes
1 answer

Encrypt client connection with squid forward proxy using SSL

I'm setting up a Squid forward proxy and I'm wondering if I could configure Squid in such a way that the connection from my web browser to squid is https regardless of whether the connection from squid to the destination website is http or https. In…
Twisted Whisper
  • 193
  • 1
  • 6
6
votes
1 answer

Squid 3 reloading makes it stop serving requests

So, we use Squid 3 here (3.0.STABLE8-3+lenny4), pretty standard configuration (no dansguardian or similar) + NTLM authentication with LDAP background, circa 1000 users on a busy day, and our acls reference some external files (allowed/blocked…
coredump
  • 12,713
  • 2
  • 36
  • 56
6
votes
2 answers

Apache2: Limit simultaneous requests & throttle bandwidth per IP/client?

I want to limit simultaneous requests & throttle bandwidth per IP/Client on a single apache vhost. In other words, I want to ensure that this site, which hosts large media files, doesn't get hammered by someone trying to download everything all at…
xentek
  • 351
  • 1
  • 2
  • 7
5
votes
1 answer

How to health check Squid server with ELB?

I wanted to have an HA forward proxy solution using Squid, and I am trying to use the Squid servers behind ELB solution on page 41. However, my forward proxy service is a service meant to forwarding traffic to an internal network (back to my corp…
chen
  • 329
  • 1
  • 5
  • 13
5
votes
3 answers

Local transparent proxy

I have an application that does not support proxy but I need to send it's traffic to a local proxy. I want to set IPTABLES to transparently redirect traffic to a given IP and PORT (80) to be intercepted and redirected to the local…
Jofre
  • 549
  • 1
  • 4
  • 11
5
votes
3 answers

How to get Squid to not cache files with certain extensions?

I've found information on how to keep squid from caching domains/IP addresses, however, that's not quite what I want. I'd like to prevent it from caching .jnlp and .jar files. The core problem being that when I push updates out to our server, our…
Brian Knoblauch
  • 2,196
  • 2
  • 32
  • 48
5
votes
2 answers

Configure squid 3.5 to use different parent proxies for different listening ports

I have following configuration now: # Squid normally listens to port 3128 http_port 3128 cache_peer proxy1_address parent proxy1_port 0 proxy-only default login=name1:pass1 never_direct allow all Now I need to configure squid in a way when all…
bonzaster
  • 211
  • 2
  • 5
5
votes
2 answers

Squid Not Blocking SSL HTTPS Properly

So my goal here it to block only certain youtube channels. If I do: acl block_youtube dstdomain .youtube.com http_access deny block_youtube it blocks any access to youtube. if I do: acl block_youtube url_regex -i…
John
  • 157
  • 3
  • 10
5
votes
1 answer

Squid log https without SSL Bumping

I have implemented a transparent squid3 proxy for logging purposes. I won't be doing SSL bumping / HTTPS decryption, as this is too much to install a cert on every client. However, I would like to log the CONNECT URL data passed to squid. For some…
dthree
  • 367
  • 1
  • 8
  • 26
5
votes
2 answers

How to forward HTTPS traffic through squid transparently?

I want to redirect all HTTP and HTTPS traffic to squid acting as a transparent proxy. This traffic will then be blocked or authorized (in bulk) during certain hours. Specifically I do not want to decrypt/reencrypt HTTPS traffic but push it as…
WoJ
  • 3,607
  • 9
  • 49
  • 79