Squid Transparent

win32sux · 08-04-2005, 11:21 PM

i have squid installed transparently on a fast server for a small LAN... it accelerates the LAN hosts' web surfing very nicely and saves bandwidth...

now i need to add an apache web server to the LAN, but it's a very old/slow server so i'd like to use the squid box as a transparent proxy for the web server... the apache server will be accessed from the internet through the squid box (the squid box is also the LAN's iptables router/firewall)...

basically my questions are:

- can it be done??

- if so, how?? (i mean, is it as easy as adding a squid ACL and iptables PREROUTING/FORWARD rules much like you do for LAN clients??)

i know that squid is used as a proxy for apache web servers all the time, but i'm not sure what the implications are of having it operate in that mode while at the same time operating in the "LAN web surfers" mode...

any light that you could shed would be greatly appreciated...

cdhgee · 08-05-2005, 05:02 AM

Quote:

Originally posted by win32sux
- can it be done??

Don't see why not.

Quote:

Originally posted by win32sux
- if so, how?? (i mean, is it as easy as adding a squid ACL and iptables PREROUTING/FORWARD rules much like you do for LAN clients??)

It should be. From squid's point of view, it's just network traffic going to another web server.

win32sux · 08-05-2005, 11:57 AM

thanks for the reply cdhgee!!!

yeah, i was thinking the same thing, i guess i just needed some reassurance...

BTW, i'm currently using these options in squid.conf for the transparency:

Code:

httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

when i add the apache server, i should be fine without having to edit those lines, right??