Re: [squid-users] policy based routing from cisco router for squid tproxy

From: Luis Daniel Lucio Quiroz <luis.daniel.lucio_at_gmail.com>
Date: Wed, 28 Sep 2011 11:01:35 -0500

2011/9/28 Benjamin <benjo11111_at_gmail.com>:
>  Hi,
>
> I am looking for POLICY BASED ROUTING rules , which i need to use route web
> traffic to squid box which is configured for tproxy purpose.If someone tried
> it , please share your tips and feedback for that.
>
>
> Network setup:
>
>    ROUTER   ------------> PBR CONFIGURATION
>          |
>          |
>          |
>          |
>       SWITCH
>        |  |
>        |  |
>        |  | -----SQUID BOX ( 1 interface )
>        |
>       BANDWITH
>       SHAPPER
>        |
>        |
>   END  USERS
>
>
> Thanks,
> Benjo Fernandis
>
>

Easy,
# acl normal_service_net src 10.0.0.0/24
# acl good_service_net src 10.0.1.0/24
# tcp_outgoing_tos 0x00 normal_service_net
# tcp_outgoing_tos 0x20 good_service_net

with this you are marking tcp packets, then in your cisco/linux you
can do rules that depending mark and squid-ip will select an specific
rule table. look for "ip rule" command to specify tables rules if you
are using linux.

LD
http://www.twitter.com/ldlq
Received on Wed Sep 28 2011 - 16:01:42 MDT

This archive was generated by hypermail 2.2.0 : Sat Oct 01 2011 - 12:00:03 MDT