Re: [squid-users] Need your help : Tproxy + WCCP

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Wed, 18 Feb 2009 14:09:34 +1300

Junyong Jiang wrote:
> I want to know you use bridge or router mode.
> Could you paste you configure file here?

No, I don't use WCCP, bridging, or routing setups.

The squid wiki (http://wiki.squid-cache.org/) has best info I know about
for WCCP and tproxy.

WCCP by its nature is a diversion middlebox topology. Not bridging or
routing topology.

client <-> router <-> internet
            |
           squid <-> internet

 From what I know, I think the tproxy if working correctly makes this:

client <-> router <-A-> squid -B-> Internet
            | \-->-C->-/ |
            \--<----<---D-<----<----/

ie:
client->router->(A)->squid-(B)->Internet->(D)->router->(C)->squid->(A)->router->client

A is the TPROXY chain from the configs,
C is the DIVERT chain
B + D is normal routing

Amos

>
> 2009/2/17 Amos Jeffries <squid3_at_treenet.co.nz <mailto:squid3_at_treenet.co.nz>>
>
> viveksnv_at_aol.in <mailto:viveksnv_at_aol.in> wrote:
>
> Hello All,
>
>
> I am trying to setup a Tproxy+WCCP.
>
>
> WCCP+Transparent proxy works fine and also Tproxy works good
> without WCCP.
>
>
> I had followed the following link for WCCP configuration:
> http://wiki.squid-cache.org/ConfigExamples/FullyTransparentWithTPROXY.
>
>
> Only SYNC packets reaches the web server and return packets
> doesn't come to squid server. So we get connection timeout error.
>
>
> Problem in squid or Router ?.
>
>
> "return packets doesn't come to squid server"
>
> looks like a routing problem. Namely, the triangle of doom.
>
>
> Amos
> --
> Please be using
> Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
> Current Beta Squid 3.1.0.5
>
>

-- 
Please be using
   Current Stable Squid 2.7.STABLE6 or 3.0.STABLE13
   Current Beta Squid 3.1.0.5
Received on Wed Feb 18 2009 - 01:09:24 MST

This archive was generated by hypermail 2.2.0 : Wed Feb 18 2009 - 12:00:01 MST