I realy hope that some of you can be so kind to use some time to help me.
We are bunch of people (110-170) who share a low bandwidht satellite connection to the internet. To optimize the user experience I have desided to make a web caching proxy. I am not interrested in making any sort of filtering/restrictions with the proxy, I only want to use it for caching web sites, windows updates etc. I have decided to use squid as our proxy server but I am having some problems.
Here is our setup/configuration:
First of I installet ebtables and bridge-utils with apt-get
I then edited the /etc/network/interfaces file to look like this:
source /etc/network/interfaces.d/* # The loopback network interface auto lo iface lo inet loopback
Then i created a rc.local file in /etc/rc.local, in order to make a transparent bridged configuration and route trafic to squid.
My rc.local file:
#!/bin/sh -e brctl addbr br ifconfig eno1 0.0.0.0 promisc up ifconfig enp1s10 0.0.0.0 promisc up brctl addif br0 eno1 brctl addif br0 enp1s10 ip link set br0 up ip addr add 10.234.124.4/24 brd + dev br0 route add default gw 10.234.124.200 dev br0 ebtables -t broute -A BROUTING -p IPv4 --ip-protocol 6 --ip-destination-port 80 -j redirect --redirect-target ACCEPT iptables -t nat -A PREROUTING -i br0 -p tcp --dport 80 -j REDIRECT --to-port 8080
Then i installed squid3. Here is where hell broke loose! after a lot of testing i ended up with this squid.conf file:
cache allow all maximum_object_size 6 GB cache_dir ufs /media/squid/cache 180000 16 256 cache_mem 2 GB http_port 8080 transparent http_access allow all
The result is that a few http sites loads fine and are shown correct on client pc's. I can see in /var/log/squid/access.log that squid are trying to cache the web site, but im not sure if the sites get cached. Others http sites like cnn.com and a lot of other sites just keep loading, and never show the site.
Here is an example from /var/log/squid/access.log on two sites that wont load:
1480732656.840 2142 10.234.124.6 TCP_MISS/301 326 GET http://apple.com/ - ORIGINAL_DST/184.108.40.206 text/html 1480706099.842 1973 10.234.124.6 TCP_MISS/301 550 GET http://cnn.com/ - ORIGINAL_DST/220.127.116.11 -
And here is an example on a site that loads fine (rejseplanen.dk):
I have started to go blind on this problem. I realy hope that any of you guys can help me out.