[squid-users] GENEVE?

[Jonas Steinberg]

Amos:

Your logic to me is very sound and frankly I had no idea that Squid did not handle the tunneling aspect of the network stack and furthermore it makes sense that a router or firewall would be the right appliance to implement such a protocol as the appliance requiring me to have some GENEVE-aware appliance will work with basically any firewall or router (because many support GENEVE).  At this point “I’m over it” as the kids say because it seems convoluted, tangential and I suppose even anti-patterned to implement such a feature on Squid.  In any event I’m glad to have gotten a thorough and serious response.

Eliezer:

I have no use case.  My cloud provider has written a software-defined “appliance” meant to integrate with firewalls and routers.  I was complaining that I had no way to integrate it with my DNS filtering workflows (Squid).  They told me “Hey, if it’ll support GENEVE then you can make it work.”  So I simply came here to ask.

I mean…if anyone has any ideas of how I can get something to work without buying anything expensive I’d certainly be grateful!

Jonas Steinberg
Software Engineer
3M HIS (remote)

From: Eliezer Croitor <ngtech1ltd at gmail.com>
Date: Wednesday, August 26, 2020 at 7:05 PM
To: Jonas Steinberg <jsteinberg at mmm.com>, "squid-users at lists.squid-cache.org" <squid-users at lists.squid-cache.org>
Subject: [EXTERNAL] RE: [squid-users] GENEVE?

Hey Jonas,

What would you expect from Squid to be able to support GENEVE?
Squid works with any tunnel the OS support:

  *   GRE
  *   IPIP/IP6IP
  *   VXLAN
  *   Others( https://developers.redhat.com/blog/2019/05/17/an-introduction-to-linux-virtual-interfaces-tunnels/)

From Squid point of view you on packets and connections there is no need to handle any level of the network stack like tunneling.

What would you want to try and use GENEVE for with squid?
The only setup I know about which Squid care about the actual tunnel(GRE) in a way is with WCCP.

I would be happy to hear about GENEVE and Squid usage.

Thanks,
Eliezer

----
Eliezer Croitoru
Tech Support
Mobile: +972-5-28704261
Email: ngtech1ltd at gmail.com<mailto:ngtech1ltd at gmail.com>

From: squid-users <squid-users-bounces at lists.squid-cache.org> On Behalf Of Jonas Steinberg
Sent: Tuesday, August 25, 2020 9:43 PM
To: squid-users at lists.squid-cache.org
Subject: [squid-users] GENEVE?

Do recent versions of Squid support GENEVE?

Thank you,

Jonas Steinberg
Software Engineer
3M HIS (remote)
(702) 807-9888

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20200827/06ee08b5/attachment-0001.htm>