Home / server / Questions / 70305
Accepted
jackhab
Asked: 2009-10-02 01:09:48 +0800 CST

transparent Web-cache proxy acting as network bridge

  • 772

Is there Web cache proxy which connects as a network bridge so it intercepts GET requests from client and redirects them to other Web server? (Without having to configure clients to use the proxy)

  Client              _________________
        \            |                 |
Client--- Network--- |eth0  Proxy  eth1|--- Internet
        /            |_________________|       \
  Client                                        \____________
                                                | Web cache  |
                                                |____________|

Thanks.

web-server

2 Answers

  1. Squid can do it. By default it would proxy it to the actual web-server but you can always configure it to route things elsewhere.

    • 2
  2. Best Answer

    You try to setup transparent proxying to the "web cache" if you are using Linux you can do something like this:

    On your "eth0 Proxy eth1" box:

    $ iptables -t mangle -A PREROUTING -j ACCEPT -p tcp --dport 80 -s web-cache-box
$ iptables -t mangle -A PREROUTING -j MARK --set-mark 3 -p tcp --dport 80
$ ip rule add fwmark 3 table 2
$ ip route add default via web-cache-box dev eth1 table 2

    Then on "Web cache" box:

    $ iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128

    The example above use policy routing. We mark all packages with destination port 80 and not from the web-cache-box with "3", when it's time for a routing decision we have added a rule telling packages with mark "3" should go to table "2" and in table "2" we set a default gateway which is the "web-cache". When package comes to the "web-cache" the packet is redirected to the Squid/XX port and in my example 3128. All this without rewriting/NATing.

    etc.

    • 2