Re: Transparent proxy - Help

From: Henrik Nordstrom <>
Date: Fri, 24 Sep 1999 21:09:23 +0200

You then need a policy route in router 1 to route port 80 traffic from
site 2 down to router 2.

Routing is done hop by hop. You cannot in router 3 (or even router 1)
tell that the traffic should be sent to the proxy server, all you can
tell is that it should be sent on the way which is towards the proxy
server. For Router 3 you don't need a policy route as all traffic should
travel by the same link up to router 1.

I hope that you are aware that this arrangement will at least triple the
load on the s1 link. Cache misses for site 2 will travel the s1 link
twice, cache hits for site 2 once, and it will alsho carry cache misses
for site 1 once.

The acl in router 1 must match only clients at site 2. You do not want
to have site 1 redirected back on itself.

Henrik Nordstrom
Spare time Squid hacker
Marlon Pabilona wrote:
> The Transparent Caching/Proxying in SITE 1 is already running and
> ,currently, used by our dial-up clients with in that site (SITE1).
> Apparently, We are planning to include all our dial-up users of SITE 2
> for transparency but we don't know where to declare "ip policy
> route-map"  and access-list configuration with our routers  and to
> direct all http (80) request to proxy server which belong in site 1.
Received on Fri Sep 24 1999 - 14:24:50 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:48:33 MST