Hi all, I'm setting up a reverse proxy with squid to hide my web server.
Our site rely largely on session, and we pass our session id through the
url. I'm worry that squid might cached the url and new users will end up
accessing the site with a old session id.
Is this a problem that i should worr
tor 2007-05-03 klockan 15:21 -0800 skrev Chris Robertson:
> The second important function of the UTM Sensor is to uniquely identify
> both sessions and unique visitors. Through a patent-pending combination
> of browser cookies, the Sensor detects and initializes the unique
> visitor and session
On Fri, May 04, 2007 at 10:02:28AM +0200, Jerome wrote:
> How to log access by reverse proxy ? And in which file ?
> access.log ?
You can log it into whatever file you want. I'm using squid as a
reverse proxy for two sites, which I want to log separately. You can
do this by defining access lists
On Fri, May 04, 2007, Emilio Casbas wrote:
> Thanks for the response Chris,
>
> I'll give it a try and when I have it solved I'll write a small howto
> to achieve it. It could be helpful to more squid users.
Please do; I'll add it to the Wiki as a Knowledge Base article:
http://wiki.squid-cache
Chris Robertson escribió:
Emilio Casbas wrote:
I know that this is a question more related to urchin software,
but maybe someone in this list have successfully configured urchin
software (UTM enabled) with a squid reverse proxy configuration.
The Urchin UTM installation is available only with A
Thanks.
How to log access by reverse proxy ? And in which file ? access.log ?
Thanks
Jérôme
-Message d'origine-
De : Kenny Lee [mailto:[EMAIL PROTECTED]
Envoyé : jeudi 3 mai 2007 11:17
À : Jerome; squid-users@squid-cache.org
Objet : Re: [squid-users] Squid reverse proxy AND prox
Emilio Casbas wrote:
I know that this is a question more related to urchin software,
but maybe someone in this list have successfully configured urchin
software (UTM enabled) with a squid reverse proxy configuration.
The Urchin UTM installation is available only with Apache and IIS,
http://www.g
I know that this is a question more related to urchin software,
but maybe someone in this list have successfully configured urchin
software (UTM enabled) with a squid reverse proxy configuration.
The Urchin UTM installation is available only with Apache and IIS,
http://www.google.com/support/urch
Hi,
yes .. you can ... view below website for more information ...
http://wiki.squid-cache.org/SquidFaq/ReverseProxy
Regards,
Kenny
- Original Message -
From: "Jerome" <[EMAIL PROTECTED]>
To:
Sent: Thursday, May 03, 2007 04:42 PM
Subject: [squid-users] Squid reverse
Hi,
I use SquidNT as a Proxy on a Win 2000 server with no problem.
Is-it possible to use Squid as a proxy AND a reverse proxy on the same
machine, and the same configuration file ?
Thanks.
___
Jérôme
On Fri, 27 Apr 2007, Henrik Nordstrom wrote:
> tor 2007-04-26 klockan 16:56 -0700 skrev Justin Dossey:
>
> > Some of my users complain that large POSTs in the neighborhood of
> > 30-100MB, which worked before we introduced Squid into the mix, now fail
> > at some point along the process (it varies
tor 2007-04-26 klockan 16:56 -0700 skrev Justin Dossey:
> Some of my users complain that large POSTs in the neighborhood of
> 30-100MB, which worked before we introduced Squid into the mix, now fail
> at some point along the process (it varies).
Do you know if the failure is after about the same
I use squid as a reverse proxy for two application servers.
Configuration of the peers is very basic:
cache_peer 192.168.0.6 parent 80 0 sourcehash no-query no-digest
originserver login=PASS
cache_peer 192.168.0.7 parent 80 0 sourcehash no-query no-digest
originserver login=PASS
I have not set a
mån 2007-02-12 klockan 18:57 +0100 skrev Jordi Clement:
> Everything is working fine, except for file (directory) move or
> rename actions. This fails, regardless which client (OSX, Netfile,
> Windows XP or Cadaver) used.
What happens?
error message?
access.log?
Regards
Henrik
signature.
Hi All,
we're trying to implement Squid 2.6 STABLE7 as a reverse proxy for
both subversion (running as an apache module) and WebDAV (running as
a MS IIS extension). All Webdav + SVN extensions are added (most of
them probably superfluous) to the configuration file:
WebDAV: LOCK, UNLOCK,
fre 2006-11-03 klockan 14:48 +0100 skrev nick humphrey:
> but as soon as i removed "sslflags=DONT_VERIFY_PEER" in the cache_peer
> line i was not able to connect to wl81machine from the internet, and
> the terminal window on wl81machine spat out stuff like this:
OpenSSL on your Squid did not know
i found out that i could remove this line:
sslproxy_flags DONT_VERIFY_PEER
but as soon as i removed "sslflags=DONT_VERIFY_PEER" in the cache_peer
line i was not able to connect to wl81machine from the internet, and
the terminal window on wl81machine spat out stuff like this:
tor 2006-11-02 klockan 15:54 +0100 skrev nick humphrey:
> cache_peer 192.168.0.150 parent 8080 3130 ssl sslflags=DONT_VERIFY_PEER
> no-query
DONT_VERIFY_PEER opens you to man-in-the-middle attacks. Better to give
it the CA information needed to validate the peer..
Also you need the originserver
i was also getting this in my weblogic terminal window:
--
javax.net.ssl.SSLProtocolException: FATAL Alert:BAD_RECORD_MAC - A
record was received with an incorrect MAC.
at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireException(Unknown
Source)
at com.certicom.t
i came up with this:
cache_peer 192.168.150 parent 8080 3130 ssl sslflags=DONT_VERIFY_PEER
originserver
but it doesn't seem to work. i just tried following the comment
guidelines in squid.conf for cache_peer, but i'm obviously not doing
this right.
there it says, among other things, that:
"To spe
tor 2006-11-02 klockan 08:40 +0100 skrev nick humphrey:
> Ready to serve requests.
> Failed to select source for 'https://192.168.0.150:8080/'
> always_direct = 0
>never_direct = 0
>timedout = 0
This indicates incomplete accelerator mode configuration, missing the
cache_peer telling
here's some of what was in the cache.log:
-
Initialising SSL.
Using certificate in /usr/local/squid/etc/key.crt
Using private key in /usr/local/squid/etc/key.key
Initialising SSL.
NOTICE: Peer certificates are not verified for validity!
DNS Socket created at 0.0.0.0, port 32786, FD 7
A
ons 2006-11-01 klockan 16:24 +0100 skrev nick humphrey:
> het (our local network)
>
> i have a weblogic server 8.1 (wl81machine) in our intranet running a
> ssl/https site (we're testing out verisign ssl).
>
> i also have installed squid 2.6 STABLE4 (with --enable-ssl) on debian
> 3 (deb3machine)
hey thanks for the quick reply Mark,
i added:
http_access allow CONNECT localhost
and could get to the index page, but when i clicked on a link i got
the following errors:
the cache manager does not allow this cache to make direct connections
to origin servers
What's in access.log for these re
hey thanks for the quick reply Mark,
i added:
http_access allow CONNECT localhost
and could get to the index page, but when i clicked on a link i got
the following errors:
the cache manager does not allow this cache to make direct connections
to origin servers
hmmm...
2006/11/1, Mark Elsen <[EM
> hi everybody, there really isn't any good tutorial out there for this
subject (i'm trying to make one:
http://norgesinternettforum.no/showpost.php?p=2652&postcount=2)
so i'm asking here as a last resort.
here's my setup:
internet (where my users will come from)
intranet (our local network)
i
hi everybody, there really isn't any good tutorial out there for this
subject (i'm trying to make one:
http://norgesinternettforum.no/showpost.php?p=2652&postcount=2)
so i'm asking here as a last resort.
here's my setup:
internet (where my users will come from)
intranet (our local network)
i hav
On Wed, 2006-02-15 at 14:01 +0100, [EMAIL PROTECTED] wrote:
> Hi All,
>
> I'm trying to configure Squid (squid-2.5.STABLE3-3.3E) as a Reverse Proxy /
> HTTP Accelerator
[...]
> This works ... as long as the HTTP-code returned by apache is using
> relative links
> BUT ... when absolute links (inc
Hi All,
I'm trying to configure Squid (squid-2.5.STABLE3-3.3E) as a Reverse Proxy /
HTTP Accelerator
This is the setup :
- 1 server "SQUID", running squid,
accepts the http-requests from the internet
(this one should be placed In the DMZ)
== SQUID == (http://web-site.server.com:80)
- an
On Wed, 11 Jan 2006, Mark Elsen wrote:
I want my clients to be able to use the url http://squid_server/ to access
apache_server. (I currently have squid configured to do this.)
But, I also want them to be able to use the url http://squid_server/yahoo/
to go to www.yahoo.com. (this is just an
> Actually, I need to proxy or accelerate (don't know which word to use here)
> to two sites.
> For example: lets say my squid server is called squid_server and my web
> server is called apache_server.
> I want my clients to be able to use the url http://squid_server/ to access
> apache_server. (I
> I currently use a squid proxy server to proxy to a single web server using
> accelerator mode. I do this strictly for security purposes to hide the web
> server. I have the IP address of the single web server in the
> httpd_accel_host directive. In addition to doing this, I would like to
> prox
I currently use a squid proxy server to proxy to a single web server using
accelerator mode. I do this strictly for security purposes to hide the web
server. I have the IP address of the single web server in the
httpd_accel_host directive. In addition to doing this, I would like to
proxy to anoth
On Tue, 11 Oct 2005 [EMAIL PROTECTED] wrote:
It looks to me Squid is not rewriting the URL of the response to look like
that of the request.
Correct. It only rewrites the request.
The Web/J2EE application is using lots of redirects and whatever it
receives from Squid server ( httpd_accel_hos
check if
redirectors in Squid could help me control the response.
Thanks,
Dimitar
"Chris Robertson" <[EMAIL PROTECTED]>
10/11/2005 02:32 PM
To
<[EMAIL PROTECTED]>
cc
Subject
RE: [squid-users] Squid reverse proxy - URL change in the response
Did you try the &qu
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Friday, October 07, 2005 10:21 AM
> To: squid-users@squid-cache.org
> Subject: [squid-users] Squid reverse proxy - URL change in
> the response
>
>
> hi,
>
> A question rel
hi,
A question related to the URL a client receives as a response to its
request.
If a client sends the following request http://www.somename.com/...
Squid in reverse proxy mode with the following configuration
httpd_accel_host myhost.domain.com
httpd_accel_port 8080
ht
On Wed, 23 Mar 2005, David Lampkin wrote:
Does the same problem happen with an IIS server, and ssl on standard not
OWA pages?
Usually, but not as visible. The problem is that web servers at a number
of occations renders absolute URLs into the returned HTML or HTTP headers,
and as far as the web
: [squid-users] Squid Reverse Proxy and SSL
On Tue, 22 Mar 2005, David Lampkin wrote:
> So I should be trying squid 3 instead of 2.5?
It's easier in Squid-3 as Squid-2.5 does not have builtin support of this
header and the source must be patched to add it. But at the same time
Squid-3 has
On Tue, 22 Mar 2005, David Lampkin wrote:
So I should be trying squid 3 instead of 2.5?
It's easier in Squid-3 as Squid-2.5 does not have builtin support of this
header and the source must be patched to add it. But at the same time
Squid-3 has it's own problems (still under development, not yet r
lto:[EMAIL PROTECTED]
Sent: Tuesday, 22 March 2005 11:23 AM
To: David Lampkin
Cc: Squid Users
Subject: Re: [squid-users] Squid Reverse Proxy and SSL
On Tue, 22 Mar 2005, David Lampkin wrote:
> I'm currently pilot-testing a squid as a reverse proxy server,
> to go in front of an OWA
On Tue, 22 Mar 2005, David Lampkin wrote:
I'm currently pilot-testing a squid as a reverse proxy server,
to go in front of an OWA (Exchange server web interface) I have got it to
work fine with http, I can also access the pages by https, however when I
access the page, and login using https, the br
Hi,
Im currently pilot-testing a squid as a reverse proxy server,
to go in front of an OWA (Exchange server web interface) I have got it to
work fine with http, I can also access the pages by https, however when I
access the page, and login using https, the browser switches back to htt
On Fri, 14 Jan 2005, Gruskovnjak Oliver wrote:
Is it possible to have one reverse proxy and 3 Webservers ?
Yes. There is no limit on the number of reverse-proxied web servers.
Can be presented to the user either as multiple virtual domains like if
all web servers were hosted in one big server, or
Gruskovnjak Oliver <[EMAIL PROTECTED]>@[EMAIL PROTECTED]
01/14/2005 09:11 AM
Please respond to
Gruskovnjak Oliver <[EMAIL PROTECTED]>@[EMAIL PROTECTED]
To
squid-users@squid-cache.org@[EMAIL PROTECTED]
cc
Subject
[squid-users] Squid Reverse Proxy
Hey people
I got a litle question a
Hey people
I got a litle question about reverse proxing.
Is it possible to have one reverse proxy and 3 Webservers ?
Or do I need to have for each webserver one reverse proxy ?
Regards Oliver
-Original Message-
From: Ratti Michele [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 22, 2004 7:50 PM
To: squid-users@squid-cache.org
Cc: Elsen Marc; Henrik Nordstrom
Subject: [squid-users] SQUID + REVERSE PROXY + OWA
Importance: High
Sensitivity: Confidential
I have:
1) Linux
-users@squid-cache.org
Cc: Elsen Marc; Henrik Nordstrom
Subject: [squid-users] SQUID + REVERSE PROXY + OWA
Importance: High
Sensitivity: Confidential
I have:
1) Linux Mandrake v10.1
2) Linux Mandrake SQUID RPM v2.5-STABLE6
3) OutlookWebAccess on Windows Server 2003
Here you have my configuration
I have:
1) Linux Mandrake v10.1
2) Linux Mandrake SQUID RPM v2.5-STABLE6
3) OutlookWebAccess on Windows Server 2003
Here you have my configuration files.
I'd like to use Squid as a reverse proxy in this way:
WEB -> SSL SQUID PROXY -> OWA (HTTP) (exchange)
Is my configuration OK!?
Can you help m
ECTED]>
Sent: Wednesday, December 22, 2004 03:45 AM
Subject: Re: [squid-users] Squid reverse proxy
>
>
> On Tue, 21 Dec 2004, Rakesh Kumar wrote:
>
> > After this I installed Squid-3 and have folloing squid.conf
> >
> > http_port 8080
> > https_port x.x.x.x
On Tue, 21 Dec 2004, Rakesh Kumar wrote:
After this I installed Squid-3 and have folloing squid.conf
http_port 8080
https_port x.x.x.x:443 cert=/usr/local/ssl/certificate.crt key=/usr/local
/ssl/certificate.key
There should be a defaultsite=... argument with your official domainname
the clients s
AIL PROTECTED]>
Cc: "Henrik Nordstrom" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Monday, December 20, 2004 08:27 PM
Subject: Re: [squid-users] Squid reverse proxy
> On Mon, 20 Dec 2004, Rakesh Kumar wrote:
>
> > 1. No I have not installed any patch so far..
On Mon, 20 Dec 2004, Rakesh Kumar wrote:
1. No I have not installed any patch so far..If I have to install a
patch, which patch should I install or there is consolidated patch?
Look in the squid-users archives for discussion on how to use Squid 2.5
infront of OWA. It has been discussed very m
version?
3. Also the Exchnage 2003 is running IIS6 ofr OWA.
Thanks & regards,
Rakesh Jha
- Original Message -
From: "Henrik Nordstrom" <[EMAIL PROTECTED]>
To: "Rakesh Kumar" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Monday, December 20, 2004
AIL PROTECTED]>
To: "Rakesh Kumar" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Monday, December 20, 2004 12:23 AM
Subject: Re: [squid-users] Squid reverse proxy
> On Sun, 19 Dec 2004, Rakesh Kumar wrote:
>
> > I have been using the Squid Cache: Version 2
No, I am still running the same version that I started with...
Rakesh
- Original Message -
From: "Henrik Nordstrom" <[EMAIL PROTECTED]>
To: "Rakesh Kumar" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Monday, December 20, 2004 12:23 AM
Su
On Sun, 19 Dec 2004, Rakesh Kumar wrote:
I have been using the Squid Cache: Version 2.5.STABLE4 as SSL reverse proxy
in between two firewalls - Internal and External. There is an exchange
server behind internal firewall which is being accelerated by squid reverse
proxy. The Inetrenet access https:/
I have been using the Squid Cache: Version 2.5.STABLE4 as SSL reverse proxy
in between two firewalls - Internal and External. There is an exchange
server behind internal firewall which is being accelerated by squid reverse
proxy. The Inetrenet access https://mail.xyz.com worked perfectly ok till we
Hello,
I'm using squid/2.5.STABLE5 for a reverse proxy with
URL switching with squidGuard.
This linux squid server will be front of 30 web
servers, for the moment it use 15Mbps, CPU is 50%
idle.
I monitore the client tcp connect established with
RRDtools :
/bin/netstat -vatn | /bin/grep localip:
Hi All!
I want to setup multiple Linux boxes with their own www, ssl, and ftp
servers behind one public IP. I tried Apache mod_proxy which worked fine for
www but would need to pass the ftp connections to something like ftp-proxy.
I don't have a problem with that but I'd rather that my Squid/Firew
Henrik Nordstrom a écrit:
The best action is to convince tomcat that even if it received the
request via HTTP the URL namespace is https://
Thanks for responding.
I'll try "isVirtualWebappRelative" parameter in web.xml to set Tomcat to respond
in relative mode. I hope this correct my problem.
The best action is to convince tomcat that even if it received the
request via HTTP the URL namespace is https://
Regards
Henrik
mån 2003-01-27 klockan 11.33 skrev Raphaël Bordet:
> Hi,
> I've got some troubles with servlets applications served by Tomcat.
> Squid is configured as a HTTPS an
Hi,
I've got some troubles with servlets applications served by Tomcat.
Squid is configured as a HTTPS and HTTP front-end for many web servers. Any
servers are Apache on the front-end and Tomcat over WARP connection for the
backend. According to documentation about virtual hosting reverse proxy
101 - 163 of 163 matches
Mail list logo
