Re: [squid-users] Transparent caching problem

Thanks Henrik. That fixed my problem! I have 1 more question though. Which would you say is more efficient: using the ip_wccp mod or the GRE interface. Any recommendation? Thanks, Kamel --- Henrik Nordstrom [EMAIL PROTECTED] wrote: ons 2006-03-15 klockan 14:03 -0800 skrev Kamel A. Baba:

Re: [squid-users] Transparent caching problem

tor 2006-03-16 klockan 12:46 -0800 skrev Kamel A. Baba: Thanks Henrik. That fixed my problem I have 1 more question though. Which would you say is more efficient: using the ip_wccp mod or the GRE interface. Any recommendation? No noticeable difference in performance, but the ip_gre works

Re: [squid-users] Transparent caching problem

tis 2006-03-14 klockan 23:26 -0800 skrev Daniel EPEE LEA: [EMAIL PROTECTED] network-scripts]# cat ifcfg-gre0 DEVICE=gre0 BOOTPROTO=static IPADDR=172.16.1.6 NETMASK=255.255.255.252 ONBOOT=yes IPV6INIT=no Eum.. for security reasons it's recommended to make the WCCP GRE interface a

RE: [squid-users] Transparent caching problem

] Sent: Wednesday, March 15, 2006 1:11 PM To: Ryan Sumida Cc: Kamel A. Baba; squid-users@squid-cache.org Subject: Re: [squid-users] Transparent caching problem Kamel, I used 1- For gre tunned, after loading ip_gre module at startup, I have this gre interface. You can copie it exactly the IP address

RE: [squid-users] Transparent caching problem

ons 2006-03-15 klockan 16:56 +0545 skrev arabinda: If the http traffic is very high, is it possible that DNAT can be a bottle neck? If you run out of iptables/netfilter conntrack entries then performance will go down the drain. This gets logged in the kernel syslog messages if it happens..

RE: [squid-users] Transparent caching problem

-cache.org Subject: RE: [squid-users] Transparent caching problem Hello Daniel Epee Lea, Regarding: 2- for ip tables -A PREROUTING -s My_Network/20 -d ! My_Network/20 - i gre0 -p tcp -m tcp --dport 80 -j DNAT --to-destination my_cache_server_IP:3128 If the http traffic

RE: [squid-users] Transparent caching problem

AM To: Daniel EPEE LEA Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Transparent caching problem tis 2006-03-14 klockan 23:26 -0800 skrev Daniel EPEE LEA: [EMAIL PROTECTED] network-scripts]# cat ifcfg-gre0 DEVICE=gre0 BOOTPROTO=static IPADDR=172.16.1.6 NETMASK=255.255.255.252

RE: [squid-users] Transparent caching problem

ons 2006-03-15 klockan 08:16 -0500 skrev Shoebottom, Bryan: This would work, but will give you some errors on boot as the gre module won't be loaded before you start the network. As the distribution doesn't support GRE there should not be any system defined network configuration for the gre

Re: [squid-users] Transparent caching problem

Daniel, Thanks for your help. I tried what you suggested. However, I am getting the same results as before. The traffic is actually being redirected to DG/squid and being decapsulated but still DG cannot see the traffic. I did a tcpdump while trying to access dell.com (143.166.224.178) and here's

Re: [squid-users] Transparent caching problem

Henrik, I see that you're very active in helping people on this list. I am pretty sure everyone appreciates that. Would you be able to help in fixing my problem functionality wwise first? Thanks in advance. Kamel --- Henrik Nordstrom [EMAIL PROTECTED] wrote: tis 2006-03-14 klockan 23:26

Re: [squid-users] Transparent caching problem

ons 2006-03-15 klockan 09:22 -0800 skrev Kamel A. Baba: Daniel, Thanks for your help. I tried what you suggested. However, I am getting the same results as before. The traffic is actually being redirected to DG/squid and being decapsulated but still DG cannot see the traffic. Then most

Re: [squid-users] Transparent caching problem

Then most likely your NAT rules are not correct. Or you have rp_filter or similar enabled causing the packets to be immediately discarded. Or other firewalling rules discarding the traffic. iptables-save -c [EMAIL PROTECTED] ~]# iptables-save -c # Generated by iptables-save v1.2.11

Re: [squid-users] Transparent caching problem

ons 2006-03-15 klockan 14:03 -0800 skrev Kamel A. Baba: [34:1632] -A PREROUTING -i gre0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 127.0.0.1:8080 COMMIT Don't DNAT to 127.0.0.1, DNAT to a real IP address.. The loopback address is special, and the kernel will silently drop any traffic

[squid-users] Transparent caching problem

Hi, This is kind of driving me crazy. I've been trying to get transparent caching to work for the last 2 days without success. I am only posting to get help after I read so much on this and I think I quite understand what needs to be done but still DG/SQUID do not see the traffic. Ok, so I have

Re: [squid-users] Transparent caching problem

fine now but I'm not sure why. I'll figure it out later. Ryan Kamel A. Baba [EMAIL PROTECTED] 03/14/2006 02:35 PM To squid-users@squid-cache.org cc Kamel Baba [EMAIL PROTECTED] Subject [squid-users] Transparent caching problem Hi, This is kind of driving me crazy. I've been trying

Re: [squid-users] Transparent caching problem

Kamel, I used 1- For gre tunned, after loading ip_gre module at startup, I have this gre interface. You can copie it exactly the IP address in there doesn't matter. [EMAIL PROTECTED] network-scripts]# cat ifcfg-gre0 DEVICE=gre0 BOOTPROTO=static IPADDR=172.16.1.6 NETMASK=255.255.255.252

RE: [squid-users] transparent caching problem

To: John Hally Cc: '[EMAIL PROTECTED]' Subject: Re: [squid-users] transparent caching problem On Wed, 2003-10-08 at 02:54, John Hally wrote: Hello, I'm having a really weird problem where I get refused requests when browsing any sites on the intranet, but Internet browsing is fine. As soon as I

[squid-users] transparent caching problem

Hello, I'm having a really weird problem where I get refused requests when browsing any sites on the intranet, but Internet browsing is fine. As soon as I pull the redirect off of the router interface, the ability to browse the intranet returns. Has anyone else experienced this? Thanks in