[squid-users] hiding web server port

Amos Jeffries squid3 at treenet.co.nz
Sat Nov 1 14:47:13 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 1/11/2014 6:39 p.m., Joel Mestres wrote:
> hello everyone! I'm trying to configure squid 2.7 so it works with
> a web server (another machine different from squid proxy server) 
> running apache2 on port 8082 (for instance). Squid is installed on 
> debian. Now I have squid with http_port 3128 transparent but I
> don't figure out how can I achive my goal. The idea is "hide" the
> port to clients. I was able to achive this without squid, with
> iptables.... redirecting 80 to 8082 and 8082 to 80. So is it
> possible to do something like this using squid proxy. Thanks a lot
> for your help!

Squid does support this for use in CDN networks. BUT, it is generally
not a good idea to do so in HTTP. The server often embeds the port it
is listening on in URLs generated. That can happen in various places
in the HTTP headers and even the object body content being delivered.

Can you upgrade to squid3 package?

Also, why are you using transparent?

Amos
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)

iQEcBAEBAgAGBQJUVPJxAAoJELJo5wb/XPRjzVkIAIwtNinl6m10UMllzkoo0dYd
ma4ivgmyPUJqhRL12Wq/EhHDASil/vIlV6jpTqNVT2mcvLtH8Za/iRkfY2/RMcpf
ZfTQcMqA2HoWduvjc+0iZH4rurY2GPdr+5y+ulkWcxGRJzRuAXjbEDxQQoiZ3TC3
Hh32R9NGtnuDAO6lADqlslIndq74uCAxAFiO0sYEgiMEIa6Q/l4slr1zfB6uOKEM
QA0Ab7UoQ07vPTIYl4dZWzx8pt5GT5JQXrdWXbLFsU5DuD022NRSx3Ekxj9GkyFZ
X03aD/ElE8ShOKFPG6jPsAaYDk/heoEp2GMx3t32fjbG70bYjU74nQQ4YgQu4+w=
=dXlo
-----END PGP SIGNATURE-----


More information about the squid-users mailing list