Hello people



I am running Squid on RedHat 5 server
I have 4 sites in my intranet and all users use proxy to connect to internet.Sometimes when internet line is down, then my internal sites can't be accessed.
I'd like squid to bypass the proxy when users are accessing the local
intranet sites

Right now users explicitly specify proxy options in the browsers .. BYPASS PROXY FOR LOCAL SERVERS

But that doesn't work



I have an internal DNS running on a different subnet. Now the strange thing is, if I put in only the IP address of intranet sites, they open without delay, but when i enter URL it takes a very long time. I analysed the traffic on Wireshark.
Turns out when I enter URL, all the traffic is routed through proxy, making it extremely slow.
Is there any way to bypass proxy for local intranet sites. (2 each on 2 diffenet subnets)
I tried searching everywhere in squid.conf file, but was unable to find anything. Most tutorials on net were for transparent proxies which don't apply to my case.









regards

well I don't see how squid could be actually involved in this, the point is, when squid is dead so is the intranet, so you can't fix that with squid. a "local" address in a browser normally means a non-fqdn e.g. "intranet" rather than "intranget.mycompany.com" so only use the short host name. Alternatively, use a proxy.pac / wpad.dat file to provide more specific control to the browsers. there are plenty of good sites explaining how to craft a proxy.pac file for your browsers to use directly.

Well, even when internet access is fine and I've instructed clients to bypass proxy for all local sites, then why does all the traffic gets routed through proxy? I've checked this through a bandwidth controller (packeteer) and wireshark. When I enter domain name (fqdn) all traffic is routed through proxy. When I put in IP of intranet server, traffic is directly between intranet server and client.

Is there anything to fix that? That is to allow direct data transfer between all the intranet servers and clients?
We have to use FQDN here, not hostname. It's one particular requirement.
Configuring each PC in network is simply not an option either.

well I've already told you what to do... proxy.pac

<snip err>

I have only ever setup proxy.pac or wpad.dat files.

that's not direct though... that's via squid..! always_direct isn't a self referential command, it's about other upstream proxies.

Ahh.. it sounded too easy.