[squid-users] Squid + WCCPv2 + Tproxy

From: Sekar <[email protected]>
Date: Tue, 06 Feb 2007 12:35:29 +0530

Hello all,

We have Installed squid-2.6STABLE9 and configured the WCCPv2. The
configuration works with just WCCPv2, but when TPROXY is configured it
doesn't work. We just followed the contents in
http://wiki.squid-cache.org/SquidFaq/InterceptionProxy#head-5887c3744368f290e63fda47fd1e4715c9bdbc9b

The squid configuration details and router details are given below.

    http_port 3128 transparent tproxy
    tcp_outgoing_address SQUID-IP
    wccp2_router ROUTER-IP
    wccp_version 4
    wccp2_forwarding_method 1
    wccp2_return_method 1
    wccp2_assignment_method 1
    wccp2_service dynamic 80
    wccp2_service_info 80 protocol=tcp flags=src_ip_hash priority=240
    ports=80
    wccp2_service dynamic 90
    wccp2_service_info 90 protocol=tcp flags=dst_ip_hash,ports_source
    priority=240 ports=80

Router Version:

    Cisco 7206 VXR 12.3(16a) IP IOS

Router configuration:

    ip wccp version
    interface <interface y/x>
    ip wccp 80 redirect in
    ip wccp 90 redirect out

Linux GRE tunnel:

    ip tunnel add wccp dev eth0 mode gre remote ROUTER-IP
    ip addr add SQUID-IP/32 dev wccp
    ip link set wccp up

sysctl.conf:

    echo 0 >/proc/sys/net/ipv4/conf/wccp/rp_filter
    echo 1 >/proc/sys/net/ipv4/ip_forward

Iptables:

    iptables -t tproxy -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j
    TPROXY --on-port 3128

I get a message saying "request sent" in Links Browsers but doesn't seem
to get the page

What may be the reason. Please help me to solve this problem.

Thanks in advance,
-Sek
Received on Tue Feb 06 2007 - 00:05:31 MST

This archive was generated by hypermail pre-2.1.9 : Thu Mar 01 2007 - 12:00:01 MST