[brlug-general] Squid as a Reverse Proxy / Back end accel

[Bret J. Esquivel]

Keith,

 

Sure, it is rather simple. Below are the lines of interest for the
squid.conf:

 

http_port 8080

httpd_accel_host 10.0.0.2

httpd_accel_port 80

httpd_accel_single_host on

httpd_accel_with_proxy on   

httpd_accel_uses_host_header on

 

# And finally allow all other access to this proxy

http_access allow all

 

Notice, squid is listening on port 8080 since it does NOT have SUID
privileges, I just NAT it at the firewall. We have never had any
problems with it. Let me know if I can lend any other assistance. 

 

------------------------------------

Bret J. Esquivel

besquivel at immense.net

Immense Networks, L.L.C.

http://www.immense.net

Ofc: (225) 754-9005

Cell: (504) 301-7413

 

From: general-bounces at brlug.net [mailto:general-bounces at brlug.net] On
Behalf Of Keith M. Richard
Sent: Friday, January 25, 2008 11:28 AM
To: general at brlug.net
Subject: Re: [brlug-general] Squid as a Reverse Proxy / Back end accel

 

Bret,

 

            Would you mind copying and example of your conf for the OWA
server? Of course change out the IP addresses to protect the innocent.

 

Keith M Richard

State of Louisiana

Office of Group Benefits

krichard at ogb.state.la.us

 

>Keith,

 

>I've used squid as a reverse proxy for an Exchange OWA frontend and it
works great! I know you can also do reverse proxy with Apache mod_proxy,
which also >worked well for me.

 

 

>------------------------------------
>Bret J. Esquivel
>besquivel at immense.net
>Immense Networks, L.L.C.
>http://www.immense.net
<https://secure.immense.net/exchweb/bin/redir.asp?URL=http://www.immense
.net> 
>Ofc: (225) 754-9005
>Cell: (504) 301-7413

 

>>I was wondering if anyone has any experience with squid? I have been
looking at setting it up as a reverse proxy or back end accelerator for
an internal >>webserver. The configuration example would be as follows:
internal webserver (10.1.x.x) , proxy server (DMZ 172.x.x.x) and public
address (64.x.x.x).

 

>>Is squid the best option for what I'm doing or is there something
better and/or easier to setup?

 

>>Keith M Richard

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.brlug.net/pipermail/general_brlug.net/attachments/20080125/22923d5d/attachment-0001.html