Re: [squid-users] DNS Question

From: Henrik Nordstrom <henrik@dont-contact.us>
Date: Sat, 17 Nov 2007 13:36:42 +0100

On tor, 2007-11-15 at 19:24 -0800, Joseph Jenkins wrote:
> I verified that the squid cache is not using it's own dns resolution
> for the clients browsing, instead it is relying on the client's dns
> resolution.

Very much doubt this. It's not technically possible for Squid to even
know the result of the clients DNS lookup unless you run Squid in
transparent interception mode. And even then Squid do not trust the
originally requested IP to match the request and performs it's own DNS
lookup.

In normal proxy mode the client doesn't do a DNS lookup, instead sends
the request directly to the proxy asking it to figure out what to do
instead.

When looking at traces don't forget that Squid caches DNS lookup
internally, so you generally don't see much DNS lookups from Squid.

Regards
Henrik

Received on Sat Nov 17 2007 - 05:36:46 MST

This archive was generated by hypermail pre-2.1.9 : Sat Dec 01 2007 - 12:00:02 MST