Re: [squid-users] One instance as both, proxy and reverse proxy

From: Bastian Spanneberg <bastian.spanneberg_at_linkwerk.com>
Date: Tue, 23 Feb 2010 16:26:57 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Chris, Hi Henrik

> http://www.mail-archive.com/squid-users@squid-cache.org/msg61608.html
>

Thx for the hint.

I have at least a partly running configuration now, but still suffer
from different problems :)

Below is the upper part of my squid.conf

 http_port 127.0.0.1:80 accel

 cache_peer 192.168.1.69 parent 7070 0 no-query originserver
name=SERVICES
 acl FOO dstdomain www.example.net
 cache_peer_access SERVICES allow FOO
 cache_peer_access SERVICES deny all
 acl CONNECT method CONNECT
 never_direct allow FOO !CONNECT

 [forward proxy config ...]

What still doesn't work is, that I can access the web apps running on
the SERVICES machine via http://localhost. When I have the proxy enabled
in my browser, I can visit access them via http://www.example.net, but
localhost doesn't work. It works when I add the

 defaultsite=www.example.net

statement to the http_port directive, but then the forward proxy
configuration doesn't work anymore.

Another problem is that the authentication on the SERVICES machine
doesn't work through the forward proxy. Whenever I try to authenticate,
Squid logs

1266935951.663 2 127.0.0.1 TCP_MISS/401 1717 GET
http://www.example.net/1/login? - FIRST_UP_PARENT/SERVICES text/html

although the URL I'm requesting is

http://localhost/1/login?returnto=/path/to/resource

The authentication window keeps popping up until I cancel.

Any more hints are highly welcome ;)

- --
Linkwerk - Software und Beratung für vernetzte Information
Telefon: +49 40 69 66 48 14
Web: www.linkwerk.com

Linkwerk GmbH, Oberaltenallee 20a, 22081 Hamburg,
Handelsregister Hamburg, HRB 95084
Geschäftsführer: Stefan Mintert
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkuD88EACgkQSm4S1ty9BPXRmgCgp2mQxOAIoxOLCBLWZnHZIYxJ
isEAni10/b16sgxEqdJwS8lfdFA3IWp/
=ygSm
-----END PGP SIGNATURE-----
Received on Tue Feb 23 2010 - 15:27:03 MST

This archive was generated by hypermail 2.2.0 : Wed Feb 24 2010 - 12:00:06 MST