[squid-users] ip-based ACL under transparent mode

Amos Jeffries squid3 at treenet.co.nz
Thu Dec 31 05:25:30 UTC 2015


On 2015-12-31 18:02, xxiao8 wrote:
> Under transparent mode, is it possible to get client's IP and assign a
> specific ACL rule to it?

The "src" ACL matches client IP. Always.

<http://wiki.squid-cache.org/SquidFaq/SquidAcl#How_do_I_allow_my_clients_to_use_the_cache.3F>

> is it possible to use the client-IP-address
> as a variable in redirector scripts?

<http://wiki.squid-cache.org/Features/AddonHelpers#URL_manipulation>

> Basically when transparent mode
> is used we don't have the "user" for each requests and I'm thinking if
> I can extract the IP of client request and use that to distinguish
> them, at an IP level though. I want to proxy clients differently.

It is almost always a bad idea to do it with redirector (especially if 
you actually mean re-writer). But you have omitted any explanation of 
what you mean by "differently", so we can't help with the actual problem 
you are trying to solve.

Amos



More information about the squid-users mailing list