Re: [squid-users] Re: TPROXY surf as client

From: Amos Jeffries <squid3_at_treenet.co.nz>
Date: Sun, 22 Jun 2014 19:41:17 +1200

On 22/06/2014 6:55 p.m., Omid Kosari wrote:
> I want to create fake traffic for website with 1000 different ip's within few
> minutes . Something like you say to 1000 different clients/IPs to surf that
> site from 11:00 to 11:15 . I want to achieve this with help of squid tproxy
> and without need to disconnect users .

Squid is the wrong tool to be using here. You want to look at hacking
and attack tools - that is what you will be doing, and why it is illegal
in most cases.

>
> Squid is doing something like that with tproxy because users requests routed
> to it . so it could do that job if a script runs on squid box . I just don't
> know how to spoof requested source ip in that script .

Squid is only opening outbound socket, marking it with
setsockopt(IP_TRANSPARENT), then using bind() to set the outgoing IP.
Everything else is limited by normal TCP/IP and routing operations
within the network.

Note that Squid specifying the outgoing IP on any particular request is
a non-standard use of HTTP. Normal HTTP combines the client requests
into persistent connections. Causing a few long-lived TCP connections to
servers with a large number of pipelined transactions on each.
 For testing server capacity against TPROXY input it is suficient to
make the server listen on localhost interface and setup a tool like
Polygraph to use 127.0.*.* IPs for opening connections (or the fc00::*
range in IPv6).

Amos
Received on Sun Jun 22 2014 - 07:41:51 MDT

This archive was generated by hypermail 2.2.0 : Sun Jun 22 2014 - 12:00:04 MDT