Re: [SQU] How to turn off proxy when using accelerator mode 2.3.STABLE3

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Wed, 20 Dec 2000 18:08:14 +0100

For one thing, if you don't want to be required to set up advanced
access control then don't enable proxying in the accelerators (defaults
to off).

See the httpd_accel_with_proxy directive.

Second, if you are using virtual domains
(httpd_accel_host_uses_host_header) or by some reason requires to have
proxying enabled in the accelerator, then set up access control to only
allow requests to the intended destinations. See the "dst" ACL type and
http_access.

--
Henrik Nordstrom
Squid hacker
stan@bort.gps.caltech.edu wrote:
> 
> I'm having a weird problem.  I checked the FAQ, and also the mailing list
> archives, and I couldn't find a solution, so I'm asking here.
> 
> I have five Squid servers running as accelerators for various web sites
> in the Earthquake Hazards Program.  I've found that using a Squid as an
> amplifier is the most cost-effective way of handling the occasional
> large surges of traffic we get after earthquakes.
> 
> Anyway, the problem I'm having is with the three servers that accelerate
> the earthquake.usgs.gov.  They are all identical FreeBSD machines running
> Squid 2.3.STABLE3.  They are all set up as accelerators.  But I found
> that if I set up Netscape to point to any one of them as a regular HTTP
> proxy, it will happily go and fetch yahoo, cnn, or whatever for me.
> In the case of the two older Squids I have that are running 2.2.STABLE5,
> if I do this, it gives an error.  The older Squids refuse to fetch
> anything that is not on their 'httpd_accel_host'.  This is what I want
> them to do, so how do I turn this off for the ones running 2.3?
> 
> I added:
> 
> httpd_accel_with_proxy off
> 
> and did a 'squid -k reconfigure', but it still does it.  Is this a
> peculiarity of 2.3 vs 2.2?
> 
> Thanks for any help or enlightenment.
> 
> --
> Stan Schwarz                | Extreme sports...offer "some kind of physical
> stan@cosmo.pasadena.ca.us   | analog to the thrill of installing Linux or
> http://cosmo.pasadena.ca.us | other open-source operating systems."
>                             |           -Mikki Halpin, _The Geek Handbook_
> 
> --
> To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html
Received on Wed Dec 20 2000 - 17:25:54 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:57:04 MST