Hi everyone,
i have a small network- at peak with 25 clients and i want to use web proxy but it seems from the tutorial that I’ve come acrossthe authors were working on a routerOs installed on a PC and not a routerboard.
If that is the case, how do i connect an external PC that will be caching content to a RouterBoard since an RB has small drive space and besides because of constant read/write need of Cache doesn’t make an RB a good candidate. my RB is 951-2n
Please I wouldn’t like to use squid though just the built-in web proxy from mikrotik.
I think your mikrotik product RB951-2n is not support any Memory card or Usb stick.
So you have to need an external PC that will be caching content. Otherwise you can’t do it.
Now you will make a Squid server or External Mikrotik Web proxy server for giving your client this type of service. I will suggest you how to built a web proxy server. just tell me what do you want ?
if you want to build an external Mikrotik web server for caching,
so you have to need a pc which have P3 or P4 Processor, 2GB Ram, 2 hard disk
(one is for operating system & 2nd is for data caching), 2 Lan Card & Thermal casing.
then you will make a good web-proxy server.
Same HW config would result in a more capable squid-proxy-cache. As there is the opportunity to cache videos, for example. Or to improove disk-IO using aufs.
i have Mikrotik system in pc when i try web proxy it’s working fast but after some day’s come slow i disable web proxy internet back speed
i need to know web proxy in mikrotik bad or i have this problem only or need to make web proxy cache in another pc external and what configuration
i think the master pc have (2 LAN - 1WAN )
the second pc have 2 LAN
@ ba7abak
Actually Mikrotik Web-proxy is a Basic proxy-server. Not for customization proxy service.
So Master pc have (1 LAN - 2 WAN )
the second pc have 2 LAN (if it’s Mikrotik)
Otherwise second pc have to need (1 Lan - 1 WAN) [for Squid server]
@ reinerotto
New user can not properly setup & maintaince squid-proxy-cache. But you can easy install Mikrotik Web-proxy in a single pc with load balancing & failover. Actually here is topic web proxy for small network & minimum user.
New user can not properly setup & maintaince squid-proxy-cache.<
Users, new to Mikrotik, also can not properly set up a cache on MT
But, in principle you are correct, that setting up mikrotik proxy is simpler compared to squid.
So for very small networks, MT proxy/cache can be good enough. In case of increasing no of users, with higher throughput demands, squid is definitely the better choice. Or, in case you need to save as much traffic as possible, when having an expensive or low-bandwidth WAN (satellite, mobile, ISDN etc.). Because then also you can add further services very easily, like content filtering or ad removal. Or caching dynamic content, like youtube. Impossible to be done with MTs cache.
I have put countless number of hours in just getting ip-tables configuration to stay permanent after reboot of ubuntu yet all the online guide i’ve followed seems not to get it work. that’s why i don’ want to go through the squid ‘hussle’
I am wondering, why you had to fiddle around with iptables etc. I connected a MT-box to a squid-PC simply by defining the squid-PC to be an upstream (parent) proxy to the MT-proxy. This will force all http-traffic thru squid. squid-PC needs to be a router, too, of course.
It will be a hirarchical config then, MT to be the router (default gateway) for the LAN, not directly connected to WAN.
Then squid.conf can be more or less “default”, besides size of cache_dir.
Only usage of iptables I can image is for the protection of the ports of the squid-PC, to inhibit inbound connections from the WAN, besides port 22, basically.
So
LAN-with-clients-------MT-------------------squid-pc--------------------WAN
proxy (no cache) parent-proxy (cache)
The path to follow:
Set up MT with http-proxy (without cache) for your clients first.
Setup squid-PC (without active squid) as a router.
Disconnect MT from WAN, connect MT to squid-PC, connect squid-PC to WAN
Then configure squid, incl. caching, modify MT-proxy to use squid-PC as upstream.
regarding iptables on ubuntu: As a “brutal hack” you can edit something like this into crontab: @reboot /etc/iptables/firewall_up.sh
/etc/iptables/firewall_up.sh:
#!/bin/bash #started after boot, so we have to wait a bit for the systems upstart to be completed
sleep 180
iptables …
Coming from Open-SuSE originally, I also used this, until I figured out the “elegant” method. I know your pain
please install the Mikrotik Software in your pc. then you will active Web-proxy & activate your secondary hard disk for data caching.
Then what’s your method for your client pc’s ? I will solve your problem with your method or policy.
please show me your previous Router configuration.
/ ip address
add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 interface=Local
add address=192.168.2.1/24 network=192.168.2.0 broadcast=192.168.2.255 interface=Wan (Connected with Mikrotik & Proxy-server by Cross cable which is your Wan)
Don’t use “always from cache” for Mikrotik Web-proxy.
This is one kind of force command.
So it will be missing sometimes & user will be get an error page (By default).
Bcoz Mikrotik Web-proxy is a Basic Web-proxy.
