Re: [squid-users] tproxy with wccp

From: Amos Jeffries <squid3@dont-contact.us>
Date: Tue, 23 Oct 2007 10:44:32 +1300 (NZDT)

>
>
> --- Adrian Chadd <adrian@creative.net.au> wrote:
>
>> Nah, thats not how WCCP interception works. It just
>> sends the packets
>> to another server without IP source/destination
>> rewriting..
>>
>
> so does it work with tproxy or not !!??

Hmm, given Adrians info (and he's the resident WCCP expert) it SHOULD work.

Try the latest release or the daily snapshot if you can.
If you are still able to reproduce it, then it's a bug so please send all
details and at least a cache.log record (at level 5+) to bugzilla.

Amos

>>
>>
>> Adrian
>>
>> On Tue, Oct 23, 2007, Amos Jeffries wrote:
>> > pinky you wrote:
>> > >hello
>> > >
>> > >I have problem with tproxy and WCCP , I guess it
>> is
>> > >compatibility issue. (I am using Centos 5 and
>> > >iptables3.8)
>> > >
>> > >If anyone is using tproxy, please tell me the
>> > >following:
>> > >version of :
>> > >tproxy,
>> > >iptables,
>> > >kernel
>> > >squid
>> > >
>> > >and is there any trick when using wccp with
>> tproxy ,
>> > >or it is the same as using it without tproxy.
>> >
>> > What little I know of both, makes me think they
>> are in the overkill
>> > category and possibly non-compatible on the same
>> http_port.
>> > WCCP being a silent? router redirection to a
>> squid machine.
>> > TProxy being a silent local-machine interception
>> and spoof.
>> >
>> > I don;t know enough details of wccp to be certain
>> of this. But;
>> > By the time it get to local machines tproxy the
>> traffic has already been
>> > wccp re-routed from its original track and I would
>> not expect tproxy to
>> > work on it properly. I would expect to see squid
>> spoofing the routers
>> > address as source on outgoing requests instead of
>> the client which
>> > tproxy should spoof.
>> >
>> > >one last question
>> > >does tproxy4.1 (the latest version ) works with
>> squid
>> > >2.6 , or squid support does not come yet
>> >
>> > tproxy4+ support has not yet been added to either
>> version of squid.
>> > Henrik points out it should be easy, just nobody
>> has had time or
>> > inclination to look at it yet.
>> >
>> > Amos
>>
>> --
>> - Xenion - http://www.xenion.com.au/ - VPS Hosting -
>> Commercial Squid Support -
>> - $25/pm entry-level bandwidth-capped VPSes
>> available in WA -
>>
>
>
> Be pink or not to be
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
>
Received on Mon Oct 22 2007 - 15:44:37 MDT

This archive was generated by hypermail pre-2.1.9 : Thu Nov 01 2007 - 13:00:01 MDT