Transparent Proxy

Hi guys, I was just wondering if anyone's configured a squid proxy using WCCP and a linux server. I cant seem to work out how to install/integrate wccp when installing squid.

In other words, is WCCP/WCCPv2 installed separately? If so, how? Or do you just do something like --enable-wccp during build? The latter didn't seem to work for me as after installation i did a squid -v | grep -i wccp and got nothing

any contributions appreciated.

thanks

Skylimit,

I've never used WCCP and just read about it - it seems really interesting! While I haven't had any experience on this, I did some research and found the following website which seems to have some useful information, take a look at it and let us know if it helped :

www.sublime.com.au/squid-wccp/

Good luck!

Thanks for the link Chris.

I stumbled on that link as well during my google search but got a bit confused at a point.

One thing I find confusing on that link is that wccp is enabled when building squid

BEFORE it is compiled. Thought it would have been the other way round. Will go through it again though and post if I get stuck.

Different question:

Have you any experience redirecting http requests to a Cisco router on a LAN to a proxy server on the Internet? Have seen a few threads using Policy-Based Routing but can't get it working. Is it "good practise" to have your proxy locally or remotely or it doesn;t really matter.

Thanks again

P.S: installing it on Ubuntu 11.04

Skylimit,

I always configure the proxy locally and rarely use Cisco Policy Base Routing for this purpose, however I believe it can be done.

What you can do is configure the router to accept HTTP packets only from the proxy, that way 'smart' clients removing their proxy from the browser's settings will be left without Internet and forced to use the proxy.

Alternatively as you mentioned, policy based routing (PBR)is another solution.

If you have any problems with PBR, let us know so we can help you with the configuration.

p.s PBR is extremely powerful - if you haven't played with it, I highly suggest you try it as it can be used in many different scenarios.

I have put WCCP with Squid on hold for the moment as my IOS doesn't support it.

Tried using PBR without luck. I suspect my access lists are conflicting as I can see matches. Also, the proxy listens on port 3128 so I'm not sure whether to use a static NAT or not?

I will post the config as soon as I can but it's something like this

thanks