Re: [squid-users] Accelerator mode, select peer form request destination ip (feature request?)

From: Henrik Nordstrom <henrik_at_henriknordstrom.net>
Date: Tue, 03 Nov 2009 02:59:18 +0100

tis 2009-11-03 klockan 11:26 +1300 skrev Amos Jeffries:

> This requirement is met by adding a cache_peer directive for each back-end
> Apache server. Then using cache_peer_access and ACL of the "myip" type
> limiting the requests passed to each peer to be those received on the
> matching input IP.

But beware of cache pollution attacks when doing this approach.

The urlgroup= http_port option of squid-2 allows the cache pollution
problem to be solved by dividing the cache per http_port (urlgroup), but
this is not yet available in Squid-3.

Regards
Henrik
Received on Tue Nov 03 2009 - 01:59:23 MST

This archive was generated by hypermail 2.2.0 : Tue Nov 03 2009 - 12:00:02 MST