Hello, Everyone,
I'm interested in setting up a decent box (pentium D 3.4 GHz, 4GB RAM) to provide web caching for about 50 users at a site.
My distro of choice is CentOS 5.1, as I've been using it for my samba servers and VMware hosts.
The configuration of our network may cause some issues in doing this, however:
Separately-managed router (external public IP)
|
|
our LAN
(192.168.1.0/24)
Since we can't modify our router settings to intercept outgoing HTTP requests and forward them to a separate proxy server, I was wondering if this would work...
I've already set up a local CentOS 5.1 box providing DHCP services (in addition to hosting a few VM's) on the 192.168.1.0 network.
Could I set up a separate machine, move the DHCP services to it, and use squid on it in order to process the http requests?
i.e. have the DHCP server hand out the squid box as the default gateway for all clients, and have this same DHCP box pass all traffic to the true gateway--except for filtering http traffic?
Separately-managed router (external public IP)
|
|
"true" gateway (192.168.1.1)
|
|
dhcp+squid box (192.168.1.5)
| (default gateway of workstations, uses "true" gateway for itself)
| (passes all traffic--except for http requests, which go to squid)
|
|
workstations (192.168.1.50-254)
If this is possible, how would I go about doing it?
I've managed to create a non-transparent proxy, and configured a single box's IE and Firefox to use it as the proxy server. It worked pretty quickly, and management also likes the idea of being able to blacklist certain non-work-related sites for all users.
I guess I'm not completely sure if both NIC's on the DHCP+squid box can be on the same network and/or how it would work.
Placing the clients in a separate network breaks their communication with the AV server--otherwise I would not be trying this nonstandard configuration.
Has anyone else tried doing this sort of thing? If not, does anyone have any pointers for me?
I've looked through these examples pretty thoroughly, over and over again, but haven't been able to make this idea work yet...
http://www.cyberciti.biz/tips/howto-...iguration.html
http://www.cyberciti.biz/tips/linux-...uid-howto.html
http://www.faqs.org/docs/Linux-mini/...rentProxy.html
http://ubuntuforums.org/showthread.php?t=375319
http://www.linuxhomenetworking.com/w...ess_with_Squid
I think the link above at the ubuntuforums is closest to what I'm trying to do, but my brain hurts

At this point I can't even manage to tell the difference between bridging and routing--and I should know better, lol.
Any advice, or personal experience in this area that could be shared would be greatly appreciated!!!
Thanks in advance.