[squid-users] X-Forwarded-For and cache_peer_access

From: Michael Graham <mgraham_at_bloxx.com>
Date: Mon, 15 Jul 2013 15:31:41 -0400

Hi all,

I'm having a problem getting squid to select the upstream proxy based on
the source address set in the X-Forwarded-For header.

Here is the appropriate lines from my squid.conf:

follow_x_forwarded_for allow all
acl forwardTrafficSubnet1 src 172.21.120.0/24
cache_peer 172.21.120.24 parent 8881 0 proxy-only no-query
cache_peer_access 172.21.120.24 deny forwardTrafficSubnet1
never_direct deny forwardTrafficSubnet1
cache_peer_access 172.21.120.24 allow all
never_direct allow all

(I'm only using allow all for testing I promise!)

But I am always getting forwarded to the parent peer even when I am
coming from a machine on forwardTrafficSubnet1.

As anyone has any success with this?

Thanks,

-- 
Michael Graham <mgraham_at_bloxx.com>
Received on Mon Jul 15 2013 - 19:31:57 MDT

This archive was generated by hypermail 2.2.0 : Tue Jul 16 2013 - 12:00:17 MDT