Re: [squid-users] How can I use to squid servers ea for specific website?

On 11/11/2011 12:00 p.m., Wilson Hernandez wrote:
> Hello List.
>
> I would like to know how I can use two squid servers to redirect
> traffic for an especific page through the second squid server
> connected to a different provider.
>
> For ie:
> squid2 ---- provider 1 (used for facebook.com
> ONLY)
> |
> lan ---------------- |
> |
> squid1 ---- provider 2 (default server used
> for everything except facebook)
>
>
> I need to know how to use squid2 as a slave and what configuration do
> I need on squid1 (master) in order for me to accomplish my task or the
> rules need to be done with iptables?
>

The term master/slave terms may be where you are getting into trouble.
In HTTP terminology there are "parent/child" and "sibling" relationships
only. The parent/child relationship is a little different from
master/slave concept due to the two-way nature of the data flow. Child
is master of the request flow and slave for the reply flow. Parent is
master of the reply flow and slave for the request flow.

If I interpret your message right you are asking about squid2 as parent,
squid1 as child. Nothing special for squid2 config. This would be the
config for squid1:

   # link squid1 to parent (data source) squid2
   # see http://www.squid-cache.org/Doc/config/cache_peer/ for the
actual text
   cache_peer squid2 parent ...

   # specify that only facebook.com requests goes to squid2
   acl FB dstdomain .facebook.com
   cache_peer_access allow FB
   cache_peer_access deny all

   # specify that squid1 MUST NOT service facebook.com requests itself
   never_direct allow FB

Alternatively you maybe could also do this with only one Squid server by
marking packets for facebook.com requests with tcp_outgoing_tos or
tcp_outgoing_address which the OS layer routing detects and sends to
provider 1 interface and blocks from accessing provider 2.

Amos
Received on Fri Nov 11 2011 - 00:06:09 MST