View previous topic :: View next topic |
Author |
Message |
Corona688 Veteran


Joined: 10 Jan 2004 Posts: 1204
|
Posted: Mon Aug 17, 2009 7:10 pm Post subject: Caching proxy for VPN |
|
|
We have a number of satellite connections in various locations. They serve a number of clients behind a NAT firewall with 192.168.x addresses, where x is unique to each installation. Each router runs openvpn and tinyproxy, the combination of which allows us to connect to the web interface of wireless equipment behind the firewall in a relatively secure way. For simplicity we use firefox + foxyproxy to dynamically choose which VPN proxy to connect to depending on IP address.
This system works fairly reliably but can be slow at times. In particular, the web interface of our remote wireless equipment can be frustratingly slow because it loads many javascript files which never, ever seem to get cached. I've considered using squid to do local caching of it since it can overide no-cache in various ways but then comes the problem of telling it to use basic HTTP proxies, and which proxies to use when, for what addresses.
For example, the proxy 172.16.0.114 would need to be used for all 192.168.9.x addresses as well as one real class-B address, 172.16.0.6 would have a different 192.168.x subnet and one more class-B address, and so forth. Any suggestions? I'm not sure where to start. _________________ Petition for Better 64-bit ATI Drivers - Sign Here
http://www.petitiononline.com/atipet/petition.html |
|
Back to top |
|
 |
jamapii l33t


Joined: 16 Sep 2004 Posts: 637
|
Posted: Mon Aug 17, 2009 8:48 pm Post subject: |
|
|
I think squid can do this with ACLs, cache_peer, cache_peer_access, always_direct and never_direct in squid.conf |
|
Back to top |
|
 |
Mad Merlin Veteran

Joined: 09 May 2005 Posts: 1155
|
|
Back to top |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|