On Mon, 03 May 2010 15:24:30 -0430, Robert Marcano <rob...@marcanoonline.com> wrote: > On 05/03/2010 03:07 PM, Henrik Nordström wrote: >> mån 2010-05-03 klockan 21:59 +1200 skrev Amos Jeffries: >> >> Donẗ forget to add whildcard interface name syntax such as ppp+ or >> similar, as used for many dialup or vpn network configurations sharing >> the exact same dynamic ip problem. >> >> But generally my recommendation is to not use tcp_outgoing_address and >> instead rely on routing to pick the most suitable interface. > > I understand, but we are using tcp_outgoing_address because it supports > ACLs and we route some users to a dedicated ISP exclusive to them. It
ACL list checking can be duplicated trivially now. > breaks server side persistent connections so we disable it, but I think > it could be theoretically possible to have server side persistent > connections in Squid is changed to keep track of the outgoing address > and group those connections accordingly AKA, connection pinning. Doing that with a readable configuration would be the challenge there. Amos
