About Squid Multistage Proxy Configuration

·Multistage proxy settings

I would like to use a specific IP(A) for B only.
For instructions in 1, define IPs together in acl and

cache_peer PROXY HOST TYPE HTTP PORT ICP PORT ICP OPTION

This recognition can be configured with the above content.
Other than that, I would like to refuse communication.
I'm worried that rejecting it might have any other impact because it's also used when other IPs communicate.

We assume the following information.
Squid heard that the rules apply from above, so
I understand that there is no problem even if I reject it uniformly, but
Do you know if there is any problem with this setting?

http_access deny acl definition(A)

linux squid

2022-09-29 22:13

1 Answers

Access control and forwarding to the higher proxy are separate.
cache_peer does not automatically allow it.

First of all, you should check the operation of access control only.

Defining acl(A)
Defining acl(B)
Allow http_access allow(A)(B)#(A) and (B)
http_access deny(A)#Reject Other (A)

http_access allow (other allowed acl)
    :
http_access deny all

The cache_peer transfer to the higher proxy is correct, but cache_peer_access configuration is required to transfer only (A) but not anything else.

2022-09-29 22:13

If you have any answers or tips

Popular Tags

python x 4647

android x 1593

java x 1494

javascript x 1427

c x 927

c++ x 878

ruby-on-rails x 696

php x 692

python3 x 685

html x 656