NTPT wrote:
it is not for applicaions that need to know an IP address of the client,
but for web traffic acceleration and traffic shaping purposees.
Intercepting proxy is "all or nothing scenario" on ISP site and
customers can not voluntairy switch it on/off themselfs.
My idea is to allow users to set proxy in their browser to use (or not)
our SQUID server, but we need their IP addresses to be preserved by
squid (like in intercepting + tproxy scenario) for traffic shaping and
control purposes.
Okay. Assuming you are using standard QoS traffic shaping techniques you
actually want to get Squid to set the TOS field values for you.
http://www.squid-cache.org/Doc/config/tcp_outgoing_tos/
This can be set for any of the fast accessible request details. You want
to look at client IPs (src ACL) or receiving port (myport, myportname)
Amos
# ------------ Původní zpráva ------------
# Od: Amos Jeffries <squid3@xxxxxxxxxxxxx>
# Předmět: Re: Transparent but not intercepting proxy
# Datum: 10.1.2009 03:50:18
# ----------------------------------------
# NTPT wrote:
# > Hi all.
# > # > Is it possible to run SQUID proxy server in transparent mode
without
# interception ? ie SQUID pass original address of the client (tproxy
patch), but
# clients connections are not intercepted automatically and user have to
set # proxy server manually in his browser ? # # No.
# See X-Forwarded-For: header if you ave an application that needs to #
detect the client behind a proxy. Sometimes also Client-IP:
# # Amos
# -- # Please be using
# Current Stable Squid 2.7.STABLE5 or 3.0.STABLE11
# Current Beta Squid 3.1.0.3
# # #
--
Please be using
Current Stable Squid 2.7.STABLE5 or 3.0.STABLE11
Current Beta Squid 3.1.0.3