Re: [squid-users] Transparent proxy and WCCP

Ok, I've tried loading it using 'modprobe ip_gre', but still nothing.

After that I recompiled the kernel to include GRE support (not as a
module). Still nothing seems to have changed.

Is there any additional configuration needed for GRE?

Also, since I'm using a Cisco router to do the traffic redirection, do I
still need to run the following command on the Squid box?
echo >1 /proc/sys/net/ipv4/ip_forward

Lastly, what can I use to check that GRE and iptables is working. Are
there any log files, test scripts, etc?

Thanks.

Henrik Nordstrom wrote:

>On Friday 09 May 2003 05.32, MunFai wrote:
>
>
>>it's compiled as a module, but i'm not sure whether it's loaded.
>>
>>
>
>Just try to load it.
>
>
>
>>but if the router (it's a Cisco) can 'see' the proxy server as
>>alive, so does that mean it's loaded already?
>>
>>
>
>No. The module is not used when the proxy server and router chats and
>agrees on activating the interception. The module is only used for
>processing the traffic intercepted by the router once they agree on
>using WCCP.
>
>
>* squid <-> router chats over UDP to agree on WCCP
>* When agreed, router will start intercepting port 80 traffic and
>encapsualte them in WCCP GRE for forwarding to the Squid server
>address.
>* The Squid server then needs to decapsulate the WCCP GRE packets to
>access the real client packets (WCCP module), and then intercept
>these client packets and forward them to the proxy application
>(iptables/ipfw rule)
>* Squid then gets the traffic and needs to accept and forward it as
>transparently proxied traffic.
>
>Regards
>Henrik
>
>
>
Received on Fri May 09 2003 - 03:57:56 MDT