[squid-users] Centralized Squid - design and implementation

[Jason Haar]

On 18/11/14 16:07, Carlos Defoe wrote:
> As for my scenario, I also use wpad to configure some exceptions, some
> clients that will use a completely different proxy, etc...
Our "wpad.dat" is actually a PHP script which tests that the "official"
proxy (per client subnet) is actually working (with caching of the
results for performance reasons of course), if not it flicks them off to
another site's proxy server. Much better than trying to do dynamic DNS
tricks with a local HAproxy. ie if you have actually lost local Internet
access due to an ISP outage, HAproxy isn't going to help. But if WPAD
knows that a WAN-connected proxy is still working - why not point your
users at that instead

We've been doing this for 10+ years, 99% of the time it's never needed,
but when it's needed, it works :-)

-- 
Cheers

Jason Haar
Corporate Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1