[squid-users] Squid with wccp and gre return

[Eliezer Croitoru]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey There,

There are some parts which missing from your picture to me.
First I wanted to ask if you had the chance to look at what I have
written about the subject:
http://wiki.squid-cache.org/ConfigExamples/UbuntuTproxy4Wccp2

It might not answer your question but it's important to first
understand the scenario from both IP layer etc.

Your first email is a "Re" which I am not able track back into the
original thread.

If you can please describe you topology and not like this:
|   |
|   |  |   |   |   |   |   |
| Ubuntu 10.04 Transparent squid3 proxy using wccp2 on c...See my last
post for more defined questions = ID:37147216 ADSLMODEM-GATEWAY -->
2801-ROUTING-NAT --> 3550-L3-ACL-VLAN --> 3550-L2-SWIT... |
|  |


It's not clear to me and probably to some other.
It's cryptic and non informative.

Thanks,
Eliezer

On 11/02/2014 03:41 AM, Yogesh Gawankar wrote:
> Hello Amos Thanks for your reply.I don't think I explained my
> problem well
> 
> With wccp gre redirection, when the tcp syn reaches the cisco
> router that is set up for wccp redirection , it redirects it to the
> CE using  wccp gre. Squid will respond with syn-ack and send it
> back to the router again via wccp-gre. However this is not
> happening. it sends it back using regular Gre (same as wccp-gre but
> with no wccp header)
> 
> 
> Please refer to my attached capture  .I need to get squid to put
> that wccp header on the return packet.In squid.conf I already
> specified gre return. Are  you saying squid (too!) cannot do gre
> return for return traffic and does normal ip forwarding?
> 
> I got squid version 3 running on ubuntu.
> 
> Thanks and regards
> 
> Yogesh Gawankar
> 
> 
> On Sunday, November 2, 2014 6:52 AM, Amos Jeffries
> <squid3 at treenet.co.nz> wrote:
> 
> 
> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
> 
> On 2/11/2014 7:05 a.m., Yogesh Gawankar wrote:
>> Hello
>> 
>> 
>> I am trying to get squid to send return traffic to the cisco 
>> router via  a gre tunnel. I am observing that squid returns
>> traffic in gre tunnel  this is ip in ip gre not wccp-gre . The
>> firewall is dropping this packet as expected. I have gone through
>> many posts online so kindly respond if you know how to get it to
>> send return traffic via wccp-gre (not standard gre) or if you had
>> any suggestions for me in terms of linux  kernel change.
> 
> WCCP-GRE is for transmitting WCCP protocol control packets
> informing the router whether the proxy is still available or not.
> That is all.
> 
> The HTTP traffic from router to Squid (wccp_forwarding_method)
> goes through the GRE as if it were regular GRE.
> 
> The HTTP traffic from Squid to router (wccp_return_method and
> regular Squid->Internet connections) is normal traffic and needs
> routing as such instead of dropping or diverting back towards
> Squid.
> 
> Amos -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22
> (MingW32)
> 
> iQEcBAEBAgAGBQJUVYcUAAoJELJo5wb/XPRjYAwH/RQXc3S7bH5w/5lYdLyYRQ/H 
> Y2GT88IdeM8gz067OMkGR7lTwzIMK4EVmb9GEQJYhLNznZB8hFDYnNDmSL3spB9F 
> mxHYZ4BVlDTlMLi4qHf05mrpsdEodrhF9A3H8YmzXLWHx5sxyukLfR/R7UJlP14K 
> S9xZa3KhKE/SERNM8iwPggNdtzdjrBhs6U2AUhmpeNjEgEiOgkgT7XRm724hMj21 
> 9CH5kgGt4qiE5plPfSqTdyiJSBbQF5NL50g8/NSrQ4bRilTD9Fdf+kVRoSnscrAF 
> ViQKzc5L8s+3YMmVmXyynM0s4YPy5bj9Qgqi5nWjQG9gSBRLeedsyK1rdlcQmbQ= 
> =CQHA -----END PGP SIGNATURE----- 
> _______________________________________________ squid-users mailing
> list squid-users at lists.squid-cache.org 
> http://lists.squid-cache.org/listinfo/squid-users
> 
> 
> 
> 
> 
> 
> _______________________________________________ squid-users mailing
> list squid-users at lists.squid-cache.org 
> http://lists.squid-cache.org/listinfo/squid-users
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUVfB3AAoJENxnfXtQ8ZQUs1QH/jfWW/YdERQvb/jZCNj1kxrC
Cq3ryO4NrhcdQcJnUtdb4BqpdwLoTT4A7J3OXiCmbY2hIsD8cC6a1bwldsOaM7Sb
fAhoM1MfoFUvbGXcAZs9EPhbClpmXRfzNqn6JQlt4+xLdh8Fzb6OHj/KtsV//xBN
6uPCHZ7C+ONaXOPREz6ujuHGlWa6LbjGR1Dop1Z/N18w24qoZyajnLnyqfnUnlBl
iNc9MeKKPlXs6ojsdGuUdXKmjm4EBNfKAnejuWKI9UODLeJYGldIjYaCUMycLZ8p
/6LkH1xg/6mWNX30HuOtrHAVgey/VB91kEINrHZ2ZYmE27y3+9ZqSC4HFDAFdDg=
=9Hm6
-----END PGP SIGNATURE-----