[squid-users] Maxconn Parameter behaviour with NAT

[Murat Balkan]

Hi Squid experts,

Can you please tell me if below scenario is possible to be implemented in Squid?

<--> User 1 enters the proxy, browses some pages.
<--> User 2 tries to enter, and he receives a reject.
<--> User1 stops browsing pages.
<--> User2 tries to enter, but because the TTL is not expired for the first user, he is rejected again.
<--> After the TTL, User2 is able to connect.

Thanks a lot,

Murat



-----Original Message-----
From: squid-users [mailto:squid-users-bounces at lists.squid-cache.org] On Behalf Of Matus UHLAR - fantomas
Sent: Friday, January 15, 2016 3:13 AM
To: squid-users at lists.squid-cache.org
Subject: Re: [squid-users] Maxconn Parameter behaviour with NAT

On 14.01.16 16:58, Murat Balkan wrote:
>I want to limit the users with the Maxconn parameters. But the users 
>are  NATed behind a public IP address.  Is squid just looking at the IP 
>address  or can it also use the username to figure out if it should 
>apply the  maxconn?

maxconn uses clients' addresses as described. That means, when more users are NATted behind one IP, squid can't differ between them.

you can use maxuser for their usernames as they are autenticated to squid.

--
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
42.7 percent of all statistics are made up on the spot. 
_______________________________________________
squid-users mailing list
squid-users at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users