RE: [squid-users] Where are the DNS entries stored?

From: Denis Vlasenko <vda@dont-contact.us>
Date: Wed, 9 Jun 2004 15:15:22 +0300

On Wednesday 09 June 2004 10:27, Elsen Marc wrote:
> > On Wednesday 09 June 2004 08:48, Elsen Marc wrote:
> > > > Hi everyone,
> > > >
> > > > I have recently started using squid (not transparent yet). I
> > > > have a few questions:
> > >
> > > Not transparant = good = keep it that way.
> >
> > Why?
>
> Because transparant proxying violates TCP/IP networking semantics; in the
> case for instance a browser through http thinks it talks directly to
> a remote webserver over ip. This and the way http interacts with the
> networking layer can lead to subttle issues and problems.
>
> Sometimes users start reporting problems with hotmail and other sites,
> often due to , for instance interleaving auth. mechanism(s), which
> subsequently check the origin of http - https connections.
>
> Other issues may 'appear' and apply, such as browser not succeeding
> to revalidate objects because it thinks, it was talking to the remote
> webserver directly, which it ain't in the case of transparant proxying.

You are right.

Although I am not going to remove transparent setup on my router
because it's not scalable to run around and configure proxy
on each and every Internet Exploder-infested box. There are
more than 400 of them here, spread across 30 km^2 area :(

-- 
vda
Received on Wed Jun 09 2004 - 06:19:50 MDT

This archive was generated by hypermail pre-2.1.9 : Thu Jul 01 2004 - 12:00:02 MDT