[squid-users] Squid with ASR9001

[Garth van Sittert | BitCo]

Would any of you Cisco experts know how to use ABF to route only http to a Squid server? ☺

        https://supportforums.cisco.com/document/145271/abf-acl-based-forwarding-asr9k

We’ve tested intercept on a Mikrotik successfully by marking http traffic and sending it through to a different routing table.  This works well on Mikrotik but we cannot find anything other than WCCP examples on Cisco.

This would be a good addition to the examples on http://wiki.squid-cache.org/ConfigExamples/Intercept/

Kind Regards
Garth



_____________________________________________
From: Eliezer Croitoru [mailto:eliezer at ngtech.co.il]
Sent: Tuesday, 25 October 2016 1:08 AM
To: 'Yuri Voinov' <yvoinov at gmail.com>
Cc: Garth van Sittert | BitCo <garth at bitco.co.za>; squid-users at lists.squid-cache.org
Subject: RE: [squid-users] Squid with ASR9001


I do not need them that much but I know they use a special Packet Forwarding IE routing engine to  overcome most of the issues that may arise by many routing policies.
It would work the same fine for a Linux based OS and  I am pretty sure that many of these do use these engines.

Eliezer


From: Yuri Voinov [mailto:yvoinov at gmail.com]
Sent: Tuesday, October 25, 2016 02:03
To: Eliezer Croitoru <eliezer at ngtech.co.il>
Cc: 'Garth van Sittert | BitCo' <garth at bitco.co.za>; squid-users at lists.squid-cache.org
Subject: Re: [squid-users] Squid with ASR9001


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

No, Juniper is not my area. :)

It is impossible to know everything :)

25.10.2016 4:48, Eliezer Croitoru пишет:
> By any chance do you have any
      experience\example with juniper interception?

      > They seems to do everything in the IP level policy and not
      Bridge level.

      >

      > Eliezer

      >

      > ----

      > Eliezer Croitoru <http://ngtech.co.il/lmgtfy/><http://ngtech.co.il/lmgtfy/>

      > Linux System Administrator

      > Mobile: +972-5-28704261

      > Email: eliezer at ngtech.co.il<mailto:eliezer at ngtech.co.il>

      >

      >

      > From: Yuri Voinov [mailto:yvoinov at gmail.com]

      > Sent: Tuesday, October 25, 2016 01:07

      > To: Eliezer Croitoru <eliezer at ngtech.co.il><mailto:eliezer at ngtech.co.il>

      > Cc: 'Garth van Sittert | BitCo' <garth at bitco.co.za><mailto:garth at bitco.co.za>;

      > squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org>

      > Subject: Re: [squid-users] Squid with ASR9001

      >

      >

      > Compared with PBR - definitely.

      >

      > IF OS TCP stack supports bridging - exactly.

      >

      > 25.10.2016 3:59, Eliezer Croitoru пишет:

      > > So what you are illustrating is

      >       that if we will handle the connection

      >

      >       > interception using bridge tables it would be much
      more

      >       efficient then Policy

      >

      >       > Based routing.

      >

      >       > I believe it’s very simple to implement in linux.

      >

      >

      >

      >       > Eliezer

      >

      >

      >

      >       > ----

      >

      >       > Eliezer Croitoru
      <http://ngtech.co.il/lmgtfy/><http://ngtech.co.il/lmgtfy/>

      > <http://ngtech.co.il/lmgtfy/><http://ngtech.co.il/lmgtfy/>

      >

      >       > Linux System Administrator

      >

      >       > Mobile: +972-5-28704261

      >

      >       > Email: eliezer at ngtech.co.il<mailto:eliezer at ngtech.co.il>
      <mailto:eliezer at ngtech.co.il><mailto:eliezer at ngtech.co.il>

      >

      >

      >

      >

      >

      >       > From: Yuri Voinov [mailto:yvoinov at gmail.com]

      >

      >       > Sent: Monday, October 24, 2016 22:01

      >

      >       > To: Eliezer Croitoru <eliezer at ngtech.co.il><mailto:eliezer at ngtech.co.il>

      > <mailto:eliezer at ngtech.co.il><mailto:eliezer at ngtech.co.il>

      >

      >       > Cc: 'Garth van Sittert | BitCo'
      <garth at bitco.co.za><mailto:garth at bitco.co.za>

      > <mailto:garth at bitco.co.za><mailto:garth at bitco.co.za> ;

      >

      >       > squid-users at lists.squid-cache.org<mailto:squid-users at lists.squid-cache.org>

      > <mailto:squid-users at lists.squid-cache.org><mailto:squid-users at lists.squid-cache.org>

      >

      >       > Subject: Re: [squid-users] Squid with ASR9001

      >

[BitCo Email Footer]<https://www.google.co.za/maps/place/Wedgewood+Office+Park/@-26.04982,28.0196914,17z/data=!3m1!4b1!4m5!3m4!1s0x142989bce6c63b3:0xc0b44878907297f4!8m2!3d-26.04982!4d28.0218801>

The information contained in this message is intended solely for the individual to whom it is specifically and originally addressed. This message and its contents may contain confidential or privileged information from BitCo. If you are not the intended recipient, you are hereby notified that any disclosure or distribution, is strictly prohibited. If you receive this email in error, please notify BitCo immediately and delete it. BitCo does not accept any liability or responsibility if action is taken in reliance on the contents of this information.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20161025/8585d723/attachment-0001.html>