Server :: Squid As Reverse Proxy - Too Slow ?

Mar 16, 2011

I've been using squid-cache for a long time for authentication/authorization. It has work fine for years, but now it starts working too slow only in one computer (the others, works fine).

It's configured as a reverse proxy.

I see it can be a DNS problem, but the computer is configured with the same dns servers in resolv.conf that the other computers have.

I use squid 2.6.stable14 on RHEL 4.4.

If I restart the service (service squid restart) it works fine, but 15-20 minutes later, the problem repeats.

View 1 Replies


ADVERTISEMENT

Server :: Reverse Proxy On Squid To Port 8080?

Apr 25, 2011

I have got a reverse proxy that is working just fine, it accepts requests on port 443 and port 80 and ONLY sends traffic upstream to port 80 to the apache server listening on localhost. I use the following config:

https_port 10.14.1.72:443 cert=/etc/squid/self_certs/site.crt key=/etc/squid/self_certs/site.key defaultsite=site vhost
cache_peer 127.0.0.1 parent 443 80 no-query originserver login=PASS
http_port 10.14.1.72:80 vhost

My problem is the following : The site should act differently in some occasions based on whether http or https was requested. So my idea is to setup second http vhost on apache listening to port 8080 and on that vhost I would server the https code. So is it possible to use SQUID to :

Send traffic destined for port 443 to localhost:8080
and
Send traffic destined for port 80 to localhost:80 ?

View 13 Replies View Related

Server :: Will Squid Work To Reverse Proxy Non-HTTP Traffic?

Aug 2, 2011

I have searched and searched for a reverse proxy solution for non-website traffic. TCP but not http, on ports other than 80, 443, 8080, etc. Basically I just need a TCP forwarder that works with multiple TCP servers, WITHOUT webpage caching features. I do not need or want any webpage caching. Can squid work as a reverse proxy for TCP traffic without http? The other program I came across in searching was HAproxy. Both programs are for http but I am curious if they would work for TCP servers that do not serve webpages.

View 2 Replies View Related

Server :: Will Squid Or HAproxy Work To Reverse Proxy Non-http Traffic

Apr 19, 2011

Will squid or HAproxy work to reverse proxy non-http traffic? I have searched and searched for a reverse proxy solution for non-website traffic. TCP but not http, on ports other than 80, 443, 8080, etc. Basically I just need a TCP forwarder that works with multiple TCP servers, WITHOUT webpage caching features. I do not need or want any webpage caching. Can squid work as a reverse proxy for TCP traffic without http? The other program I came across in searching was HAproxy. Both programs are for http but I am curious if they would work for TCP servers that do not serve webpages.

View 4 Replies View Related

Server :: Squid Reverse Proxy Server ?

Jul 22, 2011

I have done configuration of webserver and i want it to pick some information from application server,but i don want people to see that application server,please can someone tell me in detail on how to setup squid reverse proxy server so that each time people want to access my servers they can just see one server,i mean one server must act as a loadbalancer to other servers,let say a sum of up to three servers.I am using redhat 5 servers with apache 2,and squid version that i have is 2.6.

View 5 Replies View Related

Server :: Apache Reverse Proxy Slow In Serving HTTP Requests

Mar 18, 2010

A Linux (CentOS5.3) server is setup with apache reverse proxy. The reverse proxy server is opened to outside and an internal server is mapped to ProxyPass configuration. SSL certificate is also installed on the Apache reverse proxy server. The problem is, it is extremely slow in serving http requests through reverse proxy. There is no problem with server resources or bandwidth. When the internal server is directly accessed through Internet, there is no delay. The backend server and the reverse proxy server are also on the same switch (same subnet). When I searched the Net, there were recommendations to enable cache in Apache. I did so as follows in httpd.conf.

<IfModule mod_disk_cache.c>
CacheEnable disk /
CacheRoot "/var/cache/mod_proxy"
CacheDirLevels 5
CacheDirLength 3
</IfModule>

But still there is no progress. Do I want to enable cache in ssl.conf too? Or is there any other workaround to speed up Apache reverse proxy. Is there a way to check that caching is happening?

View 4 Replies View Related

Fedora Servers :: Reverse The Proxy With Squid?

Mar 14, 2011

I have a reverse proxy set up with squid. I'm going to try and explain what it's doing and I apologize for it being confusing, I'll do the best I can to describe my problem. First, it's for our phone system. We run a ShoreTel Voip system. The owner has decided he wants me to setup MCM (Mobile Call Manager), which from what I can see is an under developed, and almost impossible to get help with Shoretel software. But he's convinced he needs it for his Iphone. It's supposed to, in a nutshell, turn his Iphone into his work phone with all the advantages and doodads that come with it. Apparently, "they have an app for that". On the server side, I need to setup a reverse proxy back into the network on our phone server. Simple enough, I did this with squid. I used the following lines:

Code:

http_port 80 accel defaultsite=172.17.137.7
cache_peer http://172.17.137.7 parent 80 0 no-query originserver name=myAccel
acl our_sites dstdomain http://172.17.137.7

[code]....

Code:

always_direct allow all It most definitely is allowing traffic back to the phone server, the problem is, it hands out my internal server address to the outside client. So for instance, if I connect to the outside routable address with my phone, it will immediately change the url to http://172.17.137.7 which is the inside nat address of my phone server. Which of course doesn't work, since I couldn't browse to that address from the outside. It does however work from the inside of the network, obviously because 172.17.137.7 is accessible from the inside.

View 4 Replies View Related

Server :: Squid - Not Working Though Proxy And The Internet Explorer Is Getting Very Slow And Freezing The Computer

Nov 6, 2010

I have configured a squid proxy server with @2 eth in different network subnet and with site blocking and extn file download blocking. One eth0 for office wired network and another eth1 is for office wireless network for laptop use for guest and visitors.

The problem is [URL] is an Indian government website, which is not working though this proxy server and the Internet Explorer is getting very slow and freezing the computer. In alternate I have configured a another test server with squid proxy with out any security and test the same. the problem is still with the all the computer in the network. The above website is perfectly working with Gateway configuration in TCP/IP properties in Network Configuration in MS Windows XP computers but through squid proxy its not working.

View 3 Replies View Related

CentOS 5 Server :: Squid Proxy Configuration SQUID 2.6.STABLE21

Jan 17, 2011

I would like to ask some help and tutorial for setting up and how to configure squid proxy server in my (Home PC Server). I am a newbie in Linux Centos. I already installed in my system the CentOS 5.5 . Now, I want to configure it as my internet server, all of my 4 system running in Windows including the laptop I want to connect through my CentOS pc with username authentication. I assign all IP address by static. see tthe attachement in my set up. [url] I just want to know what I need to change and add in my squid config file. And how can I configure properly my CentOS with 2 LAN card as internet server.

View 1 Replies View Related

Ubuntu Servers :: Squid Proxy Very Slow For Web In Default Config?

Jan 10, 2010

I just set up squid for the first time. I have zero experience with proxy servers. I used this guide:[URL](I also looked at a few other guides such as this one:ttp://ubuntuforums.org/showthread.php?t=320733. However, I wanted to most barebones config to start with and the link I used was the simplest.)So now that I have it set up, I'm testing it with FoxyProxy. It is not working well. I went to speedtest.net. The download and ping tests were just as fast as without the proxy, but the upload test fails completely.Furthermore, many web pages load very slowly or not at all. So performance is very mixed, but mostly poor.

View 8 Replies View Related

Networking :: Squid Proxy Server On Ubuntu And WPAD - Proxy Auto Detection?

Dec 9, 2010

Currently my DHCP Server is working now what i want to have is auto detection of squid proxy in any browser but I still got an error in my dhcp server when I restart it.

My Config:

# DHCP configuration generated by Firestarter
ddns-update-style interim;
ignore client-updates;

[code]....

View 2 Replies View Related

Ubuntu Servers :: Squid Proxy 2.7 Stable 9 Slow Open 8 Facebook At Same Time?

Apr 22, 2011

everytime if more that 10-15 people using internet at same time squid proxy slow to responde everyweb just keep loading and here my squid proxy settings
1 nic
squid proxy 2.7 stable 9
ubuntu 64bit
intel duo core

[Code]...

View 1 Replies View Related

Server :: Reverse Proxy Solution For SSH?

Jan 25, 2011

I have a server in a corporate data center for a project. I have an SSH access to this machine at port 22.There are some virtual machines running on this server and then at the back of every thing many other Operating systems are working. Now Since I am behind the data centers firewall my supervisor asked me if I can do some thing by which I can give many people on Internet access to these virtual machines directly. I know if I were allowed to get traffic on port other than 22 then I can do a port forwarding. But since I am not allowed this so what can be a solution in this case.

The people who would like to connect might be complete idiots.Who may be happy just by opening putty at their machines or may be even filezilla.I have configured an Apache Reverse Proxy for redirecting the Internet traffic to the virtual machines on these hosts.But I am not clear as for SSH what can I do.So is there some thing equivalent to an Apache Reverse Proxy which can do similar work for SSH in this situation.I do not have firewall in my hands or any port other than 22 open and in fact even if I request they wont allow to open.2 times SSH is not some thing that my supervisor wants.

View 8 Replies View Related

CentOS 5 Server :: 5.6 - Reverse Proxy With SSL

Aug 24, 2011

I've been struggling with this for a couple of days now. I'm trying to setup a reverse proxy with SSL. The config works when it's not using SSL, but as soon as I setup the virtualhost for 443, I get a ERR_CONNECTION_REFUSED in my browser.

The setup is that it's a CentOS 5.6 running Apache 2.2.3. I was configuring it via this guide: [URL]

This server is acting as a reverse proxy for a Windows server running Apache. Currently, I'm just trying to get the manager page from the Windows server to go through the reverse proxy. Here's the virtual host section of my httpd.conf file on the reverse proxy:

<VirtualHost *:443>
ServerName aspwebview.vtinfo.com
SSLEngine On
SSLCertificateFile /etc/httpd/ssl/star_vtinfo.com.crt

[Code]....

Thoughts? Is there anything I have to do on the Windows server (maybe in the connector section of server.xml)?

View 13 Replies View Related

Server :: Trying To Configure Apache Reverse Proxy

Oct 4, 2010

I have a question to masters of Apache. In my operating system (CentOS 5) I have installed two Apaches. One is Apache (port 80) from repository where I planning to configure proxy and second one is Apache integrated(port 8090) with KnowledgeTree software. The problem is that when I am trying to configure proxy reverse it simply doesn't work.

This is link to KnowledgeTree software:
- http://127.0.0.1:8090/knowledgeTree

This link I would like to rewrite with proxy like this:
https://myserver.com/knowledgeTree
(HTTPS dont forget)

In my ssl.conf in VirtualHost part I have created something like this:
Code:
<IfModule mod_proxy.c>
<Proxy *>
Order allow,deny
Allow from all
</Proxy>

ProxyRequests off
ProxyPass /knowledgeTree http://127.0.0.1:8090/knowledgeTree
ProxyPassReverse /knowledgeTree http://127.0.0.1:8090/knowledgeTree
<Location /knowledgeTree/>
ProxyPassReverse /
</Location>
</IfModule>

When I am trying to connect I see only: Unable to connect. Firefox can't establish a connection to the server at ifdocu.contaxt.biz:8090.

View 4 Replies View Related

Server :: Apache Reverse Proxy With MS Sharepoint

Mar 22, 2011

I am trying to configure a reverse proxy server that can act as a reverse proxy for ms sharepoint server that uses https. Usually when I accessed the sharepoint server at [URL], I will be prompted to enter active directory login. But what was "500 internal server error" and in error.log: failed to enable ssl support for 10.10.1.1 (sharepoint.mycompany)

View 2 Replies View Related

Server :: How To Install Nginx As Reverse Proxy

Jul 2, 2011

I want Install nginx As Reverse Proxy for Apache

View 5 Replies View Related

Server :: Setup Reverse Proxy With Proxy_mod To Port 443 On IIS Server

Aug 30, 2010

We currently have a SUSE Apache2 reverse proxy server setup to reverse proxy (proxy_mod) our GroupWise Web Access server. Our SUSE box is located at www.domain.com. Our GroupWise Web Access server is located internally and is called GWMail. We are in the process of migrating from Novell to Windows, so we will have an exchange server with OWA access running on a Windows Server 2008 IIS7 box. That one will be called EXMail internally. Right now when someone goes to www.domain.com/gw/webacc it goes to the GWMail internal server from the outside world. This was all set up by previous techs who used Linux more.

We would like to set up reverse proxy to be able to reverse proxy to the Exchange Server from the outside world. Unfortunately the snag we are running into is that Exchange needs to run on port 443, and forwarding to port 443 has been a little tricky. I've read elsewhere we need to implement a generic TCP proxy, such as IPtables. what we need to do to get our SUSU Apache2 server to be able to reverse proxy to our Exchange server on port 443. For the save of argument lets call our SUSE server ExtranetServer. Below is our default-configuration.conf file's configuration:

[Code]....

View 12 Replies View Related

Server :: Apache Vhost With Reverse Proxy And Redirection

Jan 6, 2010

Here my setup of Apache :
I have two virtual hosts on separate IP and on both I am using port :80 one is main website domain.name and another webmail.domain.name. And to get full link path I am using index.html with redirection derectives. My question how I can setup each Vhost to he is own redirection directive to set two full link like:
when type webmail.domainname -----> redirect to webmail.domainname/horde/imp/file.php
and www.domainname ------> redirect to www.domainname/csr/
Right now working only one of this Vhosts, just problem to separate them when I type www.domainname -----> apache redirect to webmail.domainname.

index.html
<html>
<head>
<title>WebSite</title>
<meta http-equiv="REFRESH" content="1;url=http://www.domainname/csr/"></HEAD>
<BODY>REDIRECTION</BODY>
</HTML> .....

View 8 Replies View Related

Server :: Reverse Proxy Unable To Configure Properly

Apr 22, 2010

I am using a reverse proxy on Debian Lenny and using apache2.

I have a site
Code:

And a site

Code:

Two files in
Code:

Code:

But the problem is [url]and [url]are both pointing to [url] I am unable to find why.I do not want to touch apache2.conf so want to go by having a VirtualHost site1.[url]

View 3 Replies View Related

Server :: URL Redirection In Reverse Proxy Apache2 Environment

Apr 28, 2010

I have a webserver apache2 on debian Lenny. I am using gateway as Dom0 and rest of the operating systems are different Dom's .Using a xen virtualization setup.

I want to have a few websites
http://site1.myserver.com
http://myserver.com
and http://myserver.com/site2
I did set up a reverse proxy environment for doing this.

Code:
Dom0 LAN IP ----> 192.168.1.1 Gateway (where reverse proxy is set)
DomU1 LAN IP ----> 192.168.1.13 (here myserver.com and site1.myserver.com both are hosted.)
Domu2 LAN IP ----> 192.168.1.17 myserver.com/site2 is here.

Configuration on Dom0 of sites site1.myserver.com and myserver.com
Virtual Host Configurations on Dom0 in /etc/apache2/sites-enabled/myserver.com (on gateway)

Code:
<VirtualHost *:80>
ServerAdmin webmaster@localhost
ServerName myserver.com
ProxyRequests off
<Proxy *>
Order deny,allow
Allow from all .....

View 10 Replies View Related

Networking :: Tuning For High Throughput Reverse-proxy Server?

Jan 18, 2011

I have an enormous quadcore machine with 16gb ram and dual gigabit NICs. It used to be for MySQL but we have upgraded the whole database infrastructure so now this server is left floating. I had the great idea of turning this into a reverse-proxy (using apache mod_proxy) and it really handles a ton of requests. But I have a feeling that we are not getting the most use out of what it can offer.

Our traffic consists of a few thousand very small (less than 10 byte) ajax calls per second, and frequently I find we are running out of kernel allocated network stack to handle all the requests. Often we get the kern.log warning "possible SYN flooding on port 80. Sending cookies." and other things like this. Obviously we are not getting SYN flooded, we just have very high demand.

So far I have found a few kernel tuning guides to tell the kernel to allocate more of the base system memory for networking but every guide I have found has been for the purpose of increasing the performance between WAN links (direct backbones between offices etc) and usually with very large file sizes being the priority. One such example (and great) write up is here:

cyberciti.biz/faq/linux-tcp-tuning/

I was hoping some people could provide further input, such as along the lines of disabling nf_conntrack (to speed up socket set up/tear down time) or anything that will speed up a high throughput proxy like mine. Any links to studies or benchmarks between different configurations or hardware gets extra points!

View 7 Replies View Related

Server :: Use A Reverse Proxy To Forward A Lot Of Websites Via 1 Central Place?

Oct 8, 2010

We use a reverse proxy to forward a lot of websites via 1 central place.so hould forward to an internal server.I already managed to forward a lot of website correctly, except for this one:hen I type:ttp://blablahblah/smt/webtier-7-11 it doesn't work correctly, but How can I make the first url to work ?

ProxyPass /smt http://192.168.10.38:8080
ProxyPassReverse /smt http://192.168.10.38:8080
ProxyPassMatch ^/((smt|webtier-7.11)(/.*)?)?$ http://192.168.10.38:8080/$1

[code]....

View 5 Replies View Related

Server :: Css And Java Script Is Broken Zope Running Behind An Apache Reverse Proxy?

Jun 7, 2010

a reverse proxy scenario

Code:

Server A Server B (Zope Application)
Public IP 192.168.1.5

On the first one that is A in Apache vhost file I made

Code:

ProxyPass / http://192.168.1.5:8080/VirtualHostBase/http/192.168.1.5:8080/virtual_hosting/VirtualHostRoot/eduCommons
ProxyPassReverse / http://192.168.1.5:8080/VirtualHostBase/http/192.168.1.5:8080/virtual_hosting/VirtualHostRoot/eduCommons

but the CSS and images on internet which people are accessing are broken while it is running perfectly fine if I access on LAN.

Code:

[URL]

I have checked the documentation page and here also but still the problem persists.Also on LAN if the same is accessed like this

Code:

[URL] then CSS and Java script is broken. It is an eduCommons CMS. Which I am trying to access via internet.

View 1 Replies View Related

Server :: How To Tell Squid To Use ISA Proxy

Jul 25, 2011

i want to setup squid proxy server at my home. my service provider has ISA server install on its machine. in windows as a client we have to enter proxy settings manually to IE and firefox. but now in squid where i have to define to use this proxy settings. and what about /etc/resolv.conf . my service provider's connection settings are stated as under.:

IP ADDR= 192.168.1.x
subnet mask=255.255.255.0
Proxy= 192.168.1.1 port= 8080

View 1 Replies View Related

Ubuntu :: Reverse Proxy Setup - Pass Multiple Domains Thruough One Server To Various Hosts On Local Network

Apr 13, 2011

I'm trying to pass multiple dpmains thru one ubuntu server to various hosts on my local network.

[url] should be sent to the /var/www folder on the local host.

[url] should be forwarded to an IIS box on my local network (owa.nunya.local)

[url] should be sent to another ubunto box on my local network (smtp.biznet.net)

I have tried placing VirtualHost entries in /etc/apache2/sites-available/default and [url]and [url] both work but [url] gets forwarded to the c:inetpub folder on the IIS box.

View 2 Replies View Related

Server :: How To Do Squid Proxy Tuning

Jan 20, 2011

we having more than 5000 users and will have 7 squid proxy servers with high end configuration upto 4gb ram n 320*5 HD in rhel4&5 most of them complaining that at peak hours their browsing speed is slow but we are having 1gbpgs link at peak hours i.e when established connections r flowing more than 550 browsing gets slow how to do fine tuning are squid is only responsible to access upto 600 connections

View 2 Replies View Related

Server :: Make Squid 2.6 Stable As Transparent Proxy Server?

Dec 22, 2010

I want to make a transparent squid proxy server in centos. The squid proxy version is 2.6 stable. I made a normal squid server but want to make it transparent so that users do not need to enter the proxy settings in web browser. Even i searched about this on google but not getting it properly.I have two lan cards on centos system. ETH1 used for LAN and ETH2 used for WAN. And in this squid.conf i written "http_port 172.16.31.1:3128 transparent" and i also added a rule in iptables which is "iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 3128" but still i have to enter proxy settings at client's web browser to use internet

View 4 Replies View Related

Fedora Servers :: Squid 3.1.1 Proxy Server Will Not FTP

May 11, 2010

I have 4 servers running squid/3.1.1 proxy server. Since the latest version I can no longer FTP. I have posted this problem in multiple places but have received almost no response. I've found several other post to this problem throughout the Internet which have also gone unanswered. So, once again, I thought I'd give it a try. As I said "I have 4 servers running the newest version of Squid". When I try to access an ftp, any ftp, I receive an error (check attached image). This was never a problem until just recently. Squid should work perfectly find with ftp, it is not a strictly http proxy.

I turned my firewall off just to make sure, still had the same issue. If I jump directly on the server itself with no proxy settings set in the browser it will work fine. As soon as I set the browser setting to access the Squid software I get the same error. I've included my squid config (which is unchanged from the default settings), maybe somebody better versed than myself can point out an obvious flaw. Everything else seem to work just fine, it's only FTP that's a problem.

View 3 Replies View Related

Ubuntu :: Setting Up Squid Proxy Server?

Dec 28, 2010

I followed this guide: [URL] and restart the Squid Server with no errors but when I try to SSH into it:

Code:

ssh -L 8080:squidserver:8080 user@squidserver

It just hangs there for a long time, not timing out and eventually (after a long wait) I get this:

Code:

ssh_exchange_identification: Connection closed by remote host

What could be the problem? I can SSH normally into the computer, but not into the proxy server. Do I need to forward the 8080 port on that network?

View 2 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved