Traffic redirection to squid

[gc38398]

I want to experiment with the squid proxy server and I want to redirect web traffic (just outgoing port 80) from one of my hosts (10.1.1.120) to squid (port 23002) on (10.0.3.40). It's not clear where to make this change.

It looks like I'd have to add a custom firewall rule to do this and you can't do it through the GUI. I already have SSH access to the router (AC3200), so getting in to change any files is easy enough.

Eventually, I'll try redirecting all web traffic to squid.

 

[ColinTaylor]

You'd normally set it in the proxy settings on the client PC. For example, in Windows it's: Internet options > Connections > LAN settings > Proxy server

 

[gc38398]

You'd normally set it in the proxy settings on the client PC. For example, in Windows it's: Internet options > Connections > LAN settings > Proxy server

I guess I should have said transparent proxy.

 

[ColinTaylor]

I guess I should have said transparent proxy.

For testing you could just issue the appropriate command from the router's command line via SSH.

To make it permanent you'll want a nat-start script. https://github.com/RMerl/asuswrt-merlin/wiki/User-scripts

Something based on this but using interface br0 and your squid's IP address.

 

[unsynaps]

You can do it through IPTABLES. There are tons of docs online how to do it. Did it with a linux box I had years ago.

The thing is so much is HTTPS now caching servers are kinda useless.

 

[ColinTaylor]

The thing is so much is HTTPS now caching servers are kinda useless.

Same here. We used to use squid in a very large organisation where I worked but stopped about 10 years ago. Even with HTTP so much page content is dynamically created nowadays that it just wasn't worth the effort (especially considering that each PC's browser has its own cache). The only scenario where I can imagine that it might make a difference is if your internet pipe is really small, like ADSL or mobile, when even a tiny saving could help.

 

[Nullity]

I think squid can still be used with HTTPS but you would need to add your own self-signed squid CA to your browser's trusted cert list.