Re: [squid-users] cache peer choice based on acl

On Fri, 9 Jul 2004, Nuno Miguel Pais Fernandes wrote:

> I'm trying to send requests to diferent parents based on acl
> (checknofilter). If it matches checknofilter it should be sent to
> 127.0.0.2 and if it doesn't should be sent to 127.0.0.1

Please note that cache_peer_access is not an ordered list. It tells per
peer what requests MAY be forwarded to this peer, so for each peer you
need to build a complete access list.

> cache_peer_access 127.0.0.2 allow checknofilter
> cache_peer_access 127.0.0.2 deny all
> cache_peer_access 127.0.0.1 allow all

cache_peer_access 127.0.0.2 allow checknofilter
cache_peer_access 127.0.0.1 deny checknofilter

cache_peer_access 127.0.0.1 allow all
cache_peer_access 127.0.0.2 deny all

or

cache_peer_access 127.0.0.2 allow checknofilter
cache_peer_access 127.0.0.1 allow !checknofilter

And if you use authentication then you must make sure authentication is
first enfoced in http_access, and it should also be noted that NTLM
authentication may not fully work here.. (but I think it should in
2.5.STABLE5 and later..)

Regards
Henrik
Received on Sun Jul 25 2004 - 11:15:15 MDT