On 11/11/2011 12:00 p.m., Wilson Hernandez wrote:
Hello List.
I would like to know how I can use two squid servers to redirect
traffic for an especific page through the second squid server
connected to a different provider.
For ie:
squid2 ---- provider 1 (used for facebook.com
ONLY)
|
lan ---------------- |
|
squid1 ---- provider 2 (default server used
for everything except facebook)
I need to know how to use squid2 as a slave and what configuration do
I need on squid1 (master) in order for me to accomplish my task or the
rules need to be done with iptables?
The term master/slave terms may be where you are getting into trouble.
In HTTP terminology there are "parent/child" and "sibling" relationships
only. The parent/child relationship is a little different from
master/slave concept due to the two-way nature of the data flow. Child
is master of the request flow and slave for the reply flow. Parent is
master of the reply flow and slave for the request flow.
If I interpret your message right you are asking about squid2 as parent,
squid1 as child. Nothing special for squid2 config. This would be the
config for squid1:
# link squid1 to parent (data source) squid2
# see http://www.squid-cache.org/Doc/config/cache_peer/ for the
actual text
cache_peer squid2 parent ...
# specify that only facebook.com requests goes to squid2
acl FB dstdomain .facebook.com
cache_peer_access allow FB
cache_peer_access deny all
# specify that squid1 MUST NOT service facebook.com requests itself
never_direct allow FB
Alternatively you maybe could also do this with only one Squid server by
marking packets for facebook.com requests with tcp_outgoing_tos or
tcp_outgoing_address which the OS layer routing detects and sends to
provider 1 interface and blocks from accessing provider 2.
Amos
