Ralf Hildebrandt wrote:
* Hendrik Voigtl?nder <hendrik@xxxxxxxxxxxxxxxxx>:
Is it possible to make squid use a parent proxy, but fall back to e.g. direct if the parent is down?
Yes, with always_direct deny.
We use delay_pools to limit usage of the direct connection which is shared with other apps. Parent access is unlimited.
Could you provide a little bit more detail on hwo to set this up?
Background: Squid uses Dansguardian as parent proxy. If Dansguardian goes tits up (ohhh, yes it does) then Squid reports that it can't connect to it's parent proxy. In those cases it should fall back to NOT using the parent.
<squid-manual>
There is a similar, but opposite option named ' never_direct'. You need to be aware that "always_direct deny foo" is NOT the same thing as "never_direct allow foo".
</squid-manual>
e.g.: always_direct allow localservers always_direct deny all
You allow to contact only localserver direct, then deny everything else, therefore parent is used. If parent goes down, squid goes direct.
If you use delay pools and and the no-delay option in the parent-statement, delay pool are only active for direct connects.
<squid-manual>
With 'never_direct' you can use ACL elements to specify requests, which should NEVER be forwarded directly to origin servers.
</squid-manual>
