My lab is setup as such:
Hypervisor host
Squid VM
Test VM 1 (windows)
Test VM 2 (windows)
Test VM 3 (windows)
I have my proxies setup in the squid config. On the test vms I have the windows proxy settings pointing to the squid IP and port. If I check the public IP on that vm it shows up as the proxy IP. And in the proxy logs I see traffic going out.
The issue I'm having is that some external services are seeing the hosts public IP for the test vms and not the proxy ip.
Squid config:
# First proxy
http_port 3127
acl port3127_acl myport 3127
cache_peer PROXYIP parent 9229 0 proxy-only no-query no-digest login=USERNAME:PASSWORD
cache_peer_access PROXYIP allow port3127_acl
cache_peer_access PROXYIP deny all
never_direct allow port3127_acl
never_direct allow all
http_access allow port3127_acl
# Deny caching on all proxies (optional)
cache deny all
# Default access control
http_access deny all
dns_nameservers 127.0.0.1
forwarded_for off
request_header_access X-Forwarded-For deny all
I'm not exactly sure how squid handles all dns traffic. I feel like this might be a dns issue. I tried using google dns and the squid server ip as dns on the test vms but same issue.
I started to mess around with dnsmasq installed on squid but I'm not sure if I'm going down the right path or not.
Hypervisor host
Squid VM
Test VM 1 (windows)
Test VM 2 (windows)
Test VM 3 (windows)
I have my proxies setup in the squid config. On the test vms I have the windows proxy settings pointing to the squid IP and port. If I check the public IP on that vm it shows up as the proxy IP. And in the proxy logs I see traffic going out.
The issue I'm having is that some external services are seeing the hosts public IP for the test vms and not the proxy ip.
Squid config:
# First proxy
http_port 3127
acl port3127_acl myport 3127
cache_peer PROXYIP parent 9229 0 proxy-only no-query no-digest login=USERNAME:PASSWORD
cache_peer_access PROXYIP allow port3127_acl
cache_peer_access PROXYIP deny all
never_direct allow port3127_acl
never_direct allow all
http_access allow port3127_acl
# Deny caching on all proxies (optional)
cache deny all
# Default access control
http_access deny all
dns_nameservers 127.0.0.1
forwarded_for off
request_header_access X-Forwarded-For deny all
I'm not exactly sure how squid handles all dns traffic. I feel like this might be a dns issue. I tried using google dns and the squid server ip as dns on the test vms but same issue.
I started to mess around with dnsmasq installed on squid but I'm not sure if I'm going down the right path or not.
_______________________________________________ squid-users mailing list squid-users@xxxxxxxxxxxxxxxxxxxxx https://lists.squid-cache.org/listinfo/squid-users
