On Tue, Feb 9, 2010 at 4:55 PM, David Cotter <davidcotter@xxxxxxxxx> wrote: > Mon, Feb 1, 2010 at 11:29 AM, Brian Mearns <mearns.b@xxxxxxxxx> wrote: >> On Mon, Feb 1, 2010 at 5:33 AM, Emmanuel Bailleul >> <Emmanuel.Bailleul@xxxxxxxxxxx> wrote: >>> >>> >>>> -----Message d'origine----- >>>> De : David Cotter [mailto:davidcotter@xxxxxxxxx] >>>> Envoyé : lundi 1 février 2010 11:30 >>>> À : users@xxxxxxxxxxxxxxxx >>>> Objet : Re: proxy chaining to squid >>>> >>>> n Mon, Feb 1, 2010 at 9:08 AM, Martin Barry <marty@xxxxxxxxxx> wrote: >>>> > $quoted_author = "David Cotter" ; >>>> >> >>>> >> I have two virtual hosts and a squid proxy running. I want to be able >>>> to use >>>> >> the squid proxy on port 80 though it is running on 3128. >>>> > >>>> > Why? If you describe a bit more exactly what you are trying to achieve >>>> it >>>> > would help us help you. >>>> > >>>> > >>>> >> This does not work I get an error when I set my browser to use >>>> >> 111.222.22.22:80 as proxy what I want is for apache to chain to squid. >>>> > >>>> > You almost certainly don't want to configure your browser to use Apache >>>> as a >>>> > generic proxy. >>>> > >>>> > >>>> >> GET /urlrequested.html HTTP/1.1 >>>> >> >>>> >> Host: localhost:3128 >>>> >> ... >>>> >> Invalid Request >>>> > >>>> > Well, it's an invalid request. Port numbers don't belong in host >>>> headers. >>>> > >>>> >>>> I have a server that runs a web site. I also want that server to host >>>> a squid http proxy for a different project - but squid has to be >>>> listening on port 80 and so does the web server. So What I am trying >>>> do do is send the request appropriately based on domain name. If is is >>>> xyz.com then send it to the web site otherwise chain it to squid. >>>> Thanks, >>>> David >>>> >>> >>> Hi, >>> >>> My previous replies have been rejected because tagged as spam ... hope this time it gets through ... >>> >>> If you need your Apache reverse proxy as a frontend, you should have a look at http://httpd.apache.org/docs/2.2/mod/mod_proxy.html#proxyremote as a forward proxy would be more effective than a reverse, the latter only forwards requests to configured origin servers. >>> Last, but it seems ok in your config, this "forward proxy" setup should be used in the default vhost (the first one listed). >>> >>> Regards >>> >>> Emmanuel >>> >> >> Do you want a forward proxy or reverse proxy? Based on your config, it >> looks like you have it set up for reverse proxy. But if you're >> configuring your browser to know about the proxy, then it's a forward >> proxy. Not sure if this is the specific problem you're seeing, but I >> think it will be eventually. >> >> Hope that helps, >> -Brian > > Hello I wish to ProxyRemote to squid excpet for when the domain > required is www.mydomain.com. THe below look ok but doesn't work. IOs > this possibe? > > Thanks, > David > > NameVirtualHost *:80 > Listen 80 > > <VirtualHost *:80> > ProxyRemote * http://localhost:8080 > </VirtualHost> > > <VirtualHost *:80> > ServerName www.mydomain.com > ProxyPass / http://localhost:82/ > ProxyPassReverse / http://localhost:82/ > </VirtualHost> > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > Do it in reverse, run the squid proxy on port 80, and force it to go to apache running on port 8080 for www.mydomain.com. Something *like* this should do the trick in squid (untested): # acl with the target domain acl local_sites dstdomain www.mydomain.com # real upstream cache cache_peer 10.0.0.1 parent 3128 0 proxy-only default # parent 'cache' is really apache cache_peer localhost parent 8080 0 # route requests where we want them to go cache_peer_access 10.0.0.1 deny local_sites cache_peer_access localhost deny !local_sites never_direct allow all You probably don't have an upstream proxy, so you will need to read the squid manual and extrapolate an equivalent configuration, where if the acl doesn't match it goes direct to the host. Cheers Tom --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|