Search squid archive

Re: TLS passthrough

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thank you Amos and Rafael,

Using the LinuxDnat approach worked great as well.

On Sat, Sep 30, 2023 at 5:18 AM Amos Jeffries <squid3@xxxxxxxxxxxxx> wrote:
On 30/09/23 11:06, Fernando Giorgetti wrote:
> If someone has already done that, with the client running in a different
> machine, I would love to know how.


There are several ways;

  1) run Squid on the gateway router for your network, or

  2) place Squid in a DMZ between the LAN gateway and WAN gateway.

  3) setup a custom route+gateway for port 80 and 443 LAN traffic as the
Squid machine. Excluding traffic from that machine itself.


>
> In case Squid runs on the same machine used as a network gateway to the
> client machine, I suppose the config would be similar, but if it's not
> running on the same machine used as the gateway, then it would be nice
> to see how.
>

That would be (1). See
<https://wiki.squid-cache.org/ConfigExamples/Intercept/LinuxDnat> for
how to configure the gateway router running Squid.

The configuration difference between the at-source (aka, on client
machine) you are/were using is just some iptables rules.


HTH
Amos
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.squid-cache.org/listinfo/squid-users
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux