Squid multiple IPS

fandar · 05-14-2010, 07:53 AM

Hello, I need to configure squid to use multiple public IP addresses
I have configured network interfaces:

Quote:

eth0 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx:xx
inet addr:64.xxx.xxx.130 Bcast:xx.xxx.xx.xxx Mask:255.255.255.248
inet6 addr: Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:95759941 errors:0 dropped:0 overruns:0 frame:0
TX packets:60532364 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:116895655050 (116.8 GB) TX bytes:9481321322 (9.4 GB)
Interrupt:16

Quote:

eth0:1 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx:xx
inet addr:69.xxx.xxx.1 Bcast:69.xxx.xxx.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
Interrupt:16

[QUOTE]

Quote:

eth0:2 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx:xx
inet addr:69.xxx.xxx.2 Bcast:69.xxx.xxx.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
Interrupt:16

So I have 254 virtual interfaces with Public ips 1-255
I added this to my squid.conf

Quote:

acl ip1 myip 69.xxx.xxx.1
tcp_outgoing_address 69.xxx.xxx.1 ip1
acl ip2 myip 69.xxx.xxx.2
tcp_outgoing_address 69.xxx.xxx.2 ip2

So when I use address 69.xxx.xxx.1 for proxy connection on my home PC, I should have public IP 69.xxx.xxx.1, for 69.xxx.xxx.2 69.xxx.xxx.2,etc.

But when I connect to the ip 69.xxx.xxx.1, my ip address is still the main eth0 address
Your IP: 64.xxx.xxx.130 (port 45280)

So it seems, that the squid tcp_outgoing_address isnt working?
What can be wrong there?

Linux distribution is Debian.

Thank You

Traffic · 12-01-2011, 10:25 PM

Bump...

agentbuzz · 12-02-2011, 08:49 AM

fandar,
It seems that your virtual interfaces on the Debian box should be non-routable addresses, 10.10.1.2, 10.10.1.3, etc. I don't understand why you have configured so many sub-interfaces with public IP addresses, but you need to set up your firewall to PAT one public address on one service port, like 80, to the squid box on 3128, then publish that as "www.domain.com" in your external DNS, if you are trying to reverse-proxy to your web farm. For internal client connections, you should manually configure workstations to use the internal IP with the squid listener on it, or offer a wpad.dat file to clients from an internal web server.

Traffic · 12-02-2011, 09:30 AM

This did work correctly =>

Quote:

acl ip1 myip xx.xx.xx.01
acl ip2 myip xx.xx.xx.02
acl ip3 myip xx.xx.xx.03

tcp_outgoing_address xx.xx.xx.01 ip1
tcp_outgoing_address xx.xx.xx.02 ip2
tcp_outgoing_address xx.xx.xx.03 ip3

Of course utilizing real outside IP addresses...

...