All,
I got MikroTik and Squid configuration suggestion as picture attached.
and configuration in Mikrotik:
/ip firewall nat add chain=dstnat dst-address=192.168.100.1 protocol=tcp dst-port=80 action=dst-nat
to-addresses=172.16.5.1 to-ports=80
the idea is only http traffic will go to squid proxy server.
What is advantage and disadvantage to implement this configuration.
I need some comment, recommendation and suggestion from mikrotik expert.
Thanks,
Ruhanda
No expert but will give it a start. First of, don’t think you have to have two interfaces on you proxy in this scenario.
The main reason for a proxy is to speed up web page access. If you have got 10 users accessing News24, the first user would access the web site on the internet, at which time the proxy would cash the data. When the second user access News24, he will get his data from the proxy, that is at lan speeds and also, you would safe on actual internet data.
I have just installed Squid + TProxy =) one ethernet for Squid, two ethernets for RouterOS machine (Squid is on the same subnet as CPEs)
I’ll play with that setup (now Squid processes NATted addresses, I’d like to NAT after Squid)
Hi Chupaka. Let us know how it goes. Balancing few ADSL lines with PCC and that is the only solution that looks like it might work in this kind of scenario if i want to use a proxy. Which Linux did u use?
Thanks for all response,
the idea is not only speed up the http but also using different gateway to the internet but the bandwidth still manage by mikrotik.
I’m using RB1100 and core 2 duo PC+4GB RAM+500GB HDD with below mikrotik setup.
/ip fi nat add chain=dstnat protocol=tcp port=80 action=dst-nat to-addresses=172.16.5.1 to-ports=3128
/ip firewall mangle add chain=prerouting protocol=tcp dst-port=80 action=mark-routing new-routing-mark=http-proxy passthrough=no
/ip route add dst-address=0.0.0.0/0 gateway=172.16.5.1 check-gateway=ping routing-mark=http-proxy comment=“Proxy”
I will try this configuration on today, hopefully it works.
Chupaka,
Can you share your configuration? It will useful for me.
That’s something completely different, don’t need proxy for that, actually works better without proxy, unless you could get Tproxy working. Have a look at the wiki, lots of load balancing examples.