Forum Discussion

hc_andy_35682's avatar
hc_andy_35682
Icon for Nimbostratus rankNimbostratus
Mar 22, 2010

OneConnect and Proxy/Squid Load Balancing

Hi All,     We provide proxy services (http/https) to a large number of schools (each with their own static IP). Each school can have 1000's of connections to the virtual server at any time...
config
design
nitass's avatar
nitass
Icon for Employee rankEmployee
Jan 15, 2012
i am not much familiar with squid. wondering if there is any special when configuring https proxy i.e. port 3129. is it just another instance like port 3128? 

[root@ve1023:Active] config  b virtual bar1 list
virtual bar1 {
   snat automap
   pool foo1
   destination 172.28.19.79:3128
   ip protocol 6
   profiles {
      http {}
      tcp {}
   }
}
[root@ve1023:Active] config  b pool foo1 list
pool foo1 {
   members 172.28.19.251:3128 {}
}
[root@ve1023:Active] config  b virtual bar2 list
virtual bar2 {
   snat automap
   pool foo2
   destination 172.28.19.79:3129
   ip protocol 6
   profiles {
      http {}
      tcp {}
   }
}
[root@ve1023:Active] config  b pool foo2 list
pool foo2 {
   members 172.28.19.251:3129 {}
}


 curl -Ik https://www.google.com/ -x 172.28.19.79:3129
HTTP/1.0 200 Connection established

HTTP/1.1 200 OK
Date: Sun, 15 Jan 2012 04:40:45 GMT
Expires: -1
Cache-Control: private, max-age=0
Content-Type: text/html; charset=ISO-8859-1
Set-Cookie: PREF=ID=7d5331ea4cb18cc1:FF=0:TM=1326602445:LM=1326602445:S=XqerRof5YDSF_HmF; expires=Tue, 14-Jan-2014 04:40:45 GMT; path=/; domain=.google.com
Set-Cookie: NID=55=RAt7S2S7r0ObTTPxyMjBDgD32anR8fjyt-4_syPbnTIVIZNXsDp05oB0IvLlm-7Crd7Djrmw5ZJdWyKV5ADooEWHwEj6yzJGDADudQfx8i5mU6PvRa7JVEzdSFjzR2Cs; expires=Mon, 16-Jul-2012 04:40:45 GMT; path=/; domain=.google.com; HttpOnly
P3P: CP="This is not a P3P policy! See http://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Server: gws
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Transfer-Encoding: chunked


[root@ve1023:Active] config  ssldump -Aed -nni 0.0 port 3129
New TCP connection 1: 172.28.19.253(35339) <-> 172.28.19.79(3129)
1326602789.8656 (0.0030)  C>S
---------------------------------------------------------------
CONNECT www.google.com:443 HTTP/1.0
Host: www.google.com:443
User-Agent: curl/7.15.5 (i686-redhat-linux-gnu) libcurl/7.15.5 OpenSSL/0.9.8r zlib/1.2.3 libidn/0.6.5
Proxy-Connection: Keep-Alive

---------------------------------------------------------------

New TCP connection 2: 172.28.19.80(35339) <-> 172.28.19.251(3129)
1326602789.8667 (0.0010)  C>S
---------------------------------------------------------------
CONNECT www.google.com:443 HTTP/1.0
Host: www.google.com:443
User-Agent: curl/7.15.5 (i686-redhat-linux-gnu) libcurl/7.15.5 OpenSSL/0.9.8r zlib/1.2.3 libidn/0.6.5
Proxy-Connection: Keep-Alive

---------------------------------------------------------------