Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [squid]

Squid is a FOSS package licensed under the GNU GPL and is primarily used as a web proxy server and cache.

Squid is a FOSS package licensed under the GNU GPL primarily used as a web proxy server and cache.

In addition to its primary usages for web proyying and caching, it supports FTP and has limited support for several other protocols, including TLS, SSL, HTTPS and Gopher.

It has a wide variety of uses, from speeding up a web server by caching repeated requests (reverse proxy); to caching web, DNS and other computer network lookups for a group of people sharing network resources (regular proxy); to improving security by filtering traffic (layer 7 firewall).

Squid's homepage is here, and its Wikipedia entry is here.

1363 questions
7
votes
1 answer

Squid proxy: how to link inbound IPv4+port to outbound IPv6

I'm trying to setup a squid proxy that will accept multiple inbound connections on one IPv4 across a range of ports, and for each port connection to connect out on a unique IPv6 address. I've named each port connection, and designated an ACL based…
user2408290
  • 73
  • 1
  • 3
7
votes
1 answer

Limit bandwidth per IP address in Squid

I am having Squid 3.1.18 installed. I want to limit the maximum bandwidth any IP can use to 128 Kbps. Is it possible using squid ? I am not using squid authentication so identifying users and setting limit is not an option. Need some way to limit…
nitins
  • 2,527
  • 15
  • 42
  • 65
7
votes
1 answer

Upside Down Ternet

It's that time of year again, and I'm working on setting up a temporary CentOS box to act as a proxy for SOME websites (not all) in our corporate environment Monday morning (Ok, Sunday is April 1st, but Monday is close enough, right?)! I've never…
David W
  • 3,405
  • 5
  • 34
  • 61
7
votes
3 answers

Allow Facebook access only in specific hours of the day with squid

I've been able to install squid on my Ubuntu Server with basic authentication and everything works perfectly. Recently the boss asked to block facebook access and I did it with no problems. Now it looks that he wants to give the users possibility to…
Pitto
  • 2,009
  • 10
  • 33
  • 49
7
votes
2 answers

Number of nameserver entries in resolv.conf

How many nameserver entries can I give in /etc/resolv.conf? I have given our ISP's 2 nameserver entries as first and second. But since they have issues sometimes, I would like to add Google public nameserver enry. Does a 3rd & 4th entry make any…
nitins
  • 2,527
  • 15
  • 42
  • 65
6
votes
1 answer

python get-pip.py not working behind proxy

i'm having an issue when trying to run devstack which is trying to get pip using the following command i added the verbose parameter sudo -H -E python /opt/stack/devstack/files/get-pip.py -c /opt/stack/devstack/tools/cap-pip.txt --verbose i get…
Mheni
  • 199
  • 1
  • 2
  • 8
6
votes
9 answers

How do I tell if I would benefit from a Squid?

Is there a good way to tell if my network users would benefit from a squid cache? I assume setting one up and looking at it's logs would tell me, but at that point I may as well finish. The network already has a Linux based NATing Firewall.
Dru
  • 105
  • 2
  • 6
6
votes
6 answers

ssl_crtd helpers are crashing too rapidly in squid

I am using the sslBump and Dynamic SSL Certificate Generation features of squid, below is my configuration for the sslBump sslcrtd_program /usr/lib64/squid/ssl_crtd -s /usr/local/squid/var/lib/ssl_db -M 4MB sslcrtd_children 5 sslproxy_cert_error…
krupal
  • 111
  • 1
  • 1
  • 5
6
votes
3 answers

squid specify outgoing network interface

I have a Linux Debian machine with many network interfaces (venet0:1 to venet0:5) running Squid. If I connect to interface venet0:2 squid uses venet0:0 for outgoing traffic but I want Squid to use the same network interface for connections. So if I…
user2626702
  • 113
  • 2
  • 2
  • 9
6
votes
2 answers

What's the minimum required Squid config to make a public proxy server?

I'm trying to configure Squid3 proxy server that any IP address on the internet can access, but default settings horrible and whatever I do it keeps giving TCP_DENIED/403 What's the minimum config that enables me: Any IP address can access All out…
dr. evil
  • 81
  • 1
  • 1
  • 6
6
votes
1 answer

How can I make squid add its own http header to the reply, based on ACL?

I have a Squid server at work doing Squid-ly things. I need to have Squid reply with a particular header based on matching an ACL. The header is a custom one that will look something like X-External-IP: 123.45.67.8 I already know about…
Bryan Boettcher
  • 301
  • 2
  • 9
6
votes
1 answer

ProxyChains is redirecting packets destined to local machine to the proxy server

I am using ProxyChains to connect to my proxy at college. It works very fine except that it even redirects packets meant for a local port to the proxy server…
Ashish
  • 165
  • 1
  • 6
6
votes
2 answers

Squid Proxy - Hiding the proxy

I have setup squid proxy on an ubuntu server with DB authentication. However, whilst connected to the proxy, if I visit http://www.whatismyip.com/ it still shows my ACTUAL ip address. How can I configure Squid to hide my IP and to hide the fact it's…
gunwin
  • 6,330
  • 3
  • 18
  • 22
6
votes
1 answer

Squid + ClamAV + i-cap: Scanning proxy for uploaded files?

I'm trying to configure a virus scanning proxy server specifically to scan files being uploaded. Scanning flies being downloaded seems to be the common use case, and seems to be well documented. Not being a squid or i-cap expert, I'm using…
Ryan Greget
  • 61
  • 3
6
votes
1 answer

Can nginx listen on port 80, but send upstream to backend using SSL on 443?

For PCI compliance, my application is forced to use a secure/encrypted connection between the reverse proxy server and backend app server, whereas the connection coming into the reverse proxy is on port 80, i.e. the reverse proxy needs to act as a…
G Chuk
  • 61
  • 1
  • 1
  • 2
1 2
3
…
90 91