[squid-users] issue with tcp_outgoing_address and external acl
Alberto Perez
alberto2perez at gmail.com
Thu Mar 5 21:35:22 UTC 2015
Thanks Amos for the link, I understand tcp_outgoing_address only
works with fast acl and external acls are slow.
In order to mitigate this fact and achieve my purpose of share traffic
among two links depending only of username, who can recommend me a
workaround?
I was working in mantaining of IPs for those users special, once the
user login or logout from captive portal I update the list if IPs to
be used as SRC acl combined with tcp_outgoing_address and worked like
a charm except for the fact that squid only notice this change if I
reload configuration, which is a heavy reason to consider another
solutions.
It is possible to setup a ttl for this SRC acl, how can I make squid
note the change in this list without reloading configuration.
Thanks a lot for the help.
Well, my only complaint about squid would be about the fact
On 3/5/15, Amos Jeffries <squid3 at treenet.co.nz> wrote:
> On 5/03/2015 4:25 p.m., Alberto Perez wrote:
>> Hi and thanks to all members in this community for the great support.
>>
>>
>> Im trying to send traffic for some users through a faster link using
>> tcp_outgoing_address, I found this directive very usefull and suitable
>> for this need.
>>
>> I use a captive portal and my squid only use autorization, so users
>> are not available with standard ident method.
>>
>> I wrote an acl to simulate ident process by reading to memory a list
>> of users from a file and matching external user returned by active
>> session external acl. For general purposes of autorization this work
>> fine.
>>
>> I found that tcp_outgoing_address works good with src ACLs but doesn't
>> work with this external acl, by the way, has huge ttl so squid doesn't
>> evaluate it on each request.
>>
>> Can anyone please tell me if this is possible, or point the right
>> direction to solve this.
>>
>> I will be glad to provide more information about my case if is needed.
>>
>
> Are you asking how to set this up? or complaining about a problem you
> found with it?
>
> The answer to both is in the FAQ:
> <http://wiki.squid-cache.org/SquidFaq/SquidAcl#Fast_and_Slow_ACLs>
>
>
> Amos
>
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
>
More information about the squid-users
mailing list