[squid-users] (no subject)
MAB IT System
mab_itsystem at machaero.com
Thu Jul 10 10:39:31 UTC 2025
Dear Squid team,
I’m currently working on deploying Squid as a transparent proxy using
WCCPv2 with a Cisco ASA firewall.
The ASA selects a router ID x.x.x.x automatically and uses GRE
encapsulation. However, in my Squid configuration, I’m using
wccp2_forwarding_method gre.
I’ve confirmed that:
- UDP traffic on port 2048 between Squid and the ASA is working correctly.
- Squid receives WCCP messages (`HERE_I_AM`, `I_SEE_YOU`) but logs errors
like:
`ERROR: Ignoring WCCPv2 message: check failed: duplicate security
definition`
- ASA logs show that Squid is visible but marked as “NOT Usable” and gets
0% hash allocation.
- I’m running Squid version 5.9 on Linux Ubuntu.
Questions:
1. Is there a known issue when using `wccp2_forwarding_method gre` with
devices that support GRE?
2. Could Squid gracefully fallback or detect ASA’s redirect mode
automatically?
3. Is there a specific Squid version better suited for WCCPv2 with GRE only?
Any insights, suggestions, or recommended configuration would be greatly
appreciated.
Thank you for your support and great work on Squid.
Best regards,
Assoham AWOUTOU
MACHAERO
--
******************************************************************************
The information contained herein may be company confidential and
proprietary. The information is intended only for the use of the named
individual or entity. If you are not the intended recipient, the employee
or agent responsible for delivering it to the intended recipient, you are
hereby notified that any use, dissemination, distribution or copying of
this communication is strictly prohibited. If you have received this
communication in error, please notify the sender (and delete it from your
systems) immediately. The information herein is not warranted to be free of
virus or any other defect that may affect the recipient's computer system
and it is your responsibility to carry out appropriate virus checks of this
email and attachments (if any).
******************************************************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20250710/733aee7d/attachment.htm>
More information about the squid-users
mailing list