Increased Efficiency with Cisco/Transparent Proxy

Here's a tip for people using squid along with a Cisco router utilizing
transparent proxy. This is what our first configuration looked like:

!
interface Ethernet0
 ip policy route-map proxy-redirect
!
access-list 110 deny tcp host 192.168.0.2 any eq www
access-list 110 permit tcp any any eq www
route-map proxy-redirect permit 10
 match ip address 110
 set ip next-hop 192.168.0.2
!

With the configuration above, our router load average was about 20%.

Here is the more efficient configuration:

!
interface Ethernet0
 ip route-cache policy
 ip policy route-map proxy-redirect
!
access-list 110 deny tcp any any neq www
access-list 110 deny tcp host 192.168.0.2 any
access-list 110 permit tcp any any
route-map proxy-redirect permit 10
 match ip address 110
 set ip next-hop 192.168.0.2
!

Now our router load average is around 2%, YAY!

---------------
Dan Hinds <webmaster@busprod.com, dhinds@busprod.com>
BPS Internet
(918) 664-0094
(765) 664-4447
Received on Wed Oct 28 1998 - 08:54:30 MST