We recently deployed a squid server with tproxy and wccp. I followed some of
the steps listed at
http://wiki.squid-cache.org/ConfigExamples/FullyTransparentWithTPROXY,
compiling tproxy support on iptables, squid, and recompiling the linux
kernel with tproxy support. We able to browse all sites with
Check the standard stuff - disable TCP Window scaling/rfc1323?, ECN, set
the MTU to <1500 via a route statement (not ifconfig eth0 mtu 1400!); etc.
You're also not using the tproxy stuff the way it should be, it won't be
fully transparent in this setup. You're no better off using tproxy here than
If this question has been answered before, can someone at least point me in
the right direction?
> We recently deployed a squid server with tproxy and wccp. I followed some of
> the steps listed at
> http://wiki.squid-cache.org/ConfigExamples/FullyTransparentWithTPROXY,
> compiling tproxy support