Re: [squid-users] Setting up squid as an accel proxy

Amos,

I am taking a step or two back and try to explain what I want to do with Squid. I know this can be done because I am doing it with Squid version 2.2. I really want to upgrade to 2.6 but my configuration is just not working.

I need to take my public URL which is a Linux server running squid. Squid is listening on port 80 for all in bound request and when it gets one it proxies the request to my back-end server which is a search engine. I don't want squid to do any caching of content, I just want it to proxy all web requests coming to www.jakesite.com.

So in the above example, my public URL www.jakesite.com.
My search engine's URL is search.jakesite.com:8000/

When someone comes to www.jakesite.com with their browser, they should be presented the HTML search engine's page which is not on www.jakesite.com but is coming from search.jakesite.com:8000/

I hope that this makes more sense. Again, thanks for your help.

Jake

----- Original Message -----
From: "Amos Jeffries" <squid3@treenet.co.nz>
To: "Martin Jacobson (Jake)" <jake.jacobson@ugov.gov>
Cc: "squid-users" <squid-users@squid-cache.org>
Sent: Thursday, December 20, 2007 3:40:00 AM (GMT-0500) America/New_York
Subject: Re: [squid-users] Setting up squid as an accel proxy

Martin Jacobson (Jake) wrote:
> Amos,
>
> I have upgraded to STABLE17 but I still have the same issue.
>
> Basically I want to be able to go to URL in my browser like this: http://linproxy1.mysite.com/. (linproxy1 is running squid)
>
> and have squid proxy the default search page from: http://searchengine.mysite.com/

Well, to CHANGE the URL like that you will need to use a redirector, not
a peer.
To peer as a forward-proxy squid simply imitates a server and has DNS
pointed at it. The peer still needs to understand when requests for
linproxy1.mysite.com arrive at it from squid through the private channel.

>
> Config settings:
> http_port linproxy1.mysite.com:80 accel

Could do with defaultsite=linproxy1.mysite.com to un-break some broken
client software.

> cache_peer 10.2.234.9 parent 80 0 no-query originserver name=searchengine proxy-only

proxy-only in accelerators does away with almost all of the actual
benefit of 'acceleration' squid provides through caching unchanged content.

Should work though as log as the peer knows its hosting inproxy1.mysite.com.

Amos

>
>
> Martin C. Jacobson (Jake)
>
> ----- Original Message -----
> From: "Amos Jeffries" <squid3@treenet.co.nz>
> To: "Martin Jacobson (Jake)" <jake.jacobson@ugov.gov>
> Cc: "squid-users" <squid-users@squid-cache.org>
> Sent: Tuesday, December 18, 2007 8:50:08 PM (GMT-0500) America/New_York
> Subject: Re: [squid-users] Setting up squid as an accel proxy
>
>> I don't understand why I am having so much trouble getting something that
>> seems to be so simple working. I have downloaded and installed
>> squid-2.6.STABLE16 on my Linux box.
>
> Please use STABLE17, 16 has a major security bug.
>
>> I want to proxy my search engine's
>> search page so I don't want squid caching the pages. I just want squid to
>> act as a reverse proxy. After reading "Squid The Definitive Guide" and
>> lots of posts on the web, I still can't get it to work. It would seem
>> that the following basic config file should do the trick. This is based
>> on http://wiki.squid-cache.org/SquidFaq/ReverseProxy
>>
>> http_port 80 accel defaultsite=linproxy1.mysite.com
>> cache_peer searchengine.mysite.com parent 80 0 no-query originserver
>> http_access allow all
>>
>> I can get squid to run with no errors, but it doesn't reverse proxy the
>> search engine's search page. With my browser I can go directly to the
>> search engine with no problems, but I get a "Connection has timed out"
>> error when I try to go through linproxy1.
>>
>
> So http://linproxy1.mysite.com is the publicly accessible website for the
> search engine?
>
> Does the machine at searchengine.mysite.com serve pages for
> http://linproxy1.mysite.com properly?
>
> Amos
>

-- 
Please use Squid 2.6STABLE17 or 3.0STABLE1.
There are serious security advisories out on all earlier releases.