Cameron Knowlton wrote:
I think I'm more confused than ever.
I have 2 IP addresses on my computer, running over a single ethernet interface (EN0). I need to balance http GET requests coming from my machine across those 2 IP addresses, such that the remote server (let's call it coolstuff.com) sees the requests as coming from 2 different IPs.
How can I configure Squid to do so?
tcp_outgoing_addr is the only way to determine the Squid sending IP via
squid.conf.
tcp_outgoing_tos can send additional hints for the OS to use in its
routing logic. But is only a hint. The routing logic needs additional
configuration to use it.
thanks for your help,
Cameron Knowlton
At 3:37 PM +1300 09/11/16, Amos Jeffries wrote:
One thing I think needs to be made clear balance_on_multiple_ip ONLY makes
squid select different remote serve IPs from the DNS results of looking up
that domain name per-request. It does nothing towards the OS selection of
Squids' outgoing IP.
For example; say example.com has 2 IPs (*.1 and *.2). With that setting
turned on.
Squid fetch http://example.com/ from *.1.
A second client request for http://example.com will fetch from *.2
instead.
A third client request will fetch from *.1, etc etc.
Squids outgoing IP will be the system default for all three+ requests.
Hm, re-reading I see this was a badly worded example. As bad as the text
it was meant to explain. Sorry :(
This might be more expressive...
Imagine:
Squid box has IPs (1.1.1.1 and 1.1.1.2)
Web Server has IPs (10.1.2.3 and 10.1.2.4)
"balance_on_multiple_ip on" causes this:
Client #1 -> Squid (1.1.1.1) -> Web Server (10.1.2.3)
Client #2 -> Squid (1.1.1.1) -> Web Server (10.1.2.4)
Client #3 -> Squid (1.1.1.1) -> Web Server (10.1.2.3)
Client #4 -> Squid (1.1.1.1) -> Web Server (10.1.2.4)
...
instead of this:
Client #1 -> Squid (1.1.1.1) -> Web Server (10.1.2.3)
Client #2 -> Squid (1.1.1.1) -> Web Server (10.1.2.3)
...
Better?
Amos
On Mon, 16 Nov 2009 10:09:29 +0800, "Network Administrator"
<admin@xxxxxxxxxxxxxx> wrote:
Hi Cameron,
You could try it on the kernel level, theres a good howto (lartc.org) on
multiple internet connection (a crude but effective load balancing
style).
Cheers,
Nats
-----Original Message-----
From: Cameron Knowlton [mailto:cameron@xxxxxxxxx]
Sent: Monday, November 16, 2009 8:16 AM
To: squid-users@xxxxxxxxxxxxxxx
Subject: Re: squid proxy - multiple outgoing IP addresses
Thanks, Landy, this looks like great information.
I'm not running a load balanced machine, so I'm guessing this won't work
for
me? I have multiple IPs on the same ethernet interface:
24.69.1.2
24.69.1.3
I'm trying to run the proxy on port 8080 over both of those local IPs.
Soon, I may opt for a load balanced machine at my new installation, but
I
need to overcome my initial proof of concept with the single interface.
I feel close, can anyone point me in the right direction?
thanks much,
cameron knowlton
At 7:00 AM -0800 09/11/14, Landy Landy wrote:
I´m running a squid server on a load balance machine with two dsl lines
with
balance_on_multiple_ip on
option and it work flawlessly.
--- On Fri, 11/13/09, Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote:
From: Amos Jeffries <squid3@xxxxxxxxxxxxx>
Subject: Re: squid proxy - multiple outgoing IP
addresses
To:
Cc: squid-users@xxxxxxxxxxxxxxx
Date: Friday, November 13, 2009, 7:21 PM
Cameron Knowlton wrote:
I'm trying to configure Squid to run over multiple IP
addresses. I found the following configuration code that
supposedly manages the task, but I can't seem to get it
working:
acl ip1 myip 24.69.1.2
acl ip2 myip 24.69.1.3
tcp_outgoing_address 24.69.1.2 ip1
tcp_outgoing_address 24.69.1.3 ip2
The above depends on what your http_port and/or https_port
settings are. And what IPs are assigned to the machine.
NP: myip ACL type does not work reliably on interception
proxies. Only of regular forward-proxies and
reverse-proxies.
Amos
-- Please be using
Current Stable Squid 2.7.STABLE7 or 3.0.STABLE20
Current Beta Squid 3.1.0.14
--
Cameron Knowlton
iGods Internet Marketing
cameronk@xxxxxxxxx
P: 250.382.0226
http://www.knowledgevine.net
---------------------------------------------------
This message is solely intended to the person(s)
indicated on the header and has been scanned for
viruses and dangerous content by MailScanner. If
any malware detected on this transmission, please
email the postmaster at admin@xxxxxxxxxxxxxxx
Providing Quality Catholic Education for the Masses
for more info visit us at http://www.sscrmnl.edu.ph
__________ Information from ESET NOD32 Antivirus, version of virus
signature
database 4610 (20091115) __________
The message was checked by ESET NOD32 Antivirus.
http://www.eset.com
__________ Information from ESET NOD32 Antivirus, version of virus
signature
database 4610 (20091115) __________
The message was checked by ESET NOD32 Antivirus.
http://www.eset.com
---------------------------------------------------
This message is solely intended to the person(s)
indicated on the header and has been scanned for
viruses and dangerous content by MailScanner. If
any malware detected on this transmission, please
email the postmaster at admin@xxxxxxxxxxxxxxx
Providing Quality Catholic Education for the Masses
for more info visit us at http://www.sscrmnl.edu.ph
--
Please be using
Current Stable Squid 2.7.STABLE7 or 3.0.STABLE20
Current Beta Squid 3.1.0.14
