niXforums Forum Index
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   PreferencesPreferences   Log in to check your private messagesLog in to check your private messages   Log inLog in 
·  nixdoc.net ·  man pages ·  Linux HOWTOs ·  FreeBSD Tips ·  Forums
navigation Forum index » Apps » Squid
2.6S1 WCCP2 problems
Post new topic   Reply to topic Page 1 of 1 [13 Posts] View previous topic :: View next topic
Author Message
Shoebottom, Bryan
*nix forums addict


Joined: 14 Sep 2005
Posts: 58

PostPosted: Thu Jul 13, 2006 5:17 pm    Post subject: 2.6S1 WCCP2 problems Reply with quote

Hey,

I can't seem to get wccpv2 working in squid 2.6Stable1. My wccp config is as follows:
wccp2_router 10.10.101.1
wccp2_forwarding_method 1
wccp2_return_method 1
wccp2_service standard 0

My router only seems to see L2 redirection even though I have specified GRE/WCCP:
ROUTER#sho ip wcc we d
WCCP Cache-Engine information:
Web Cache ID: 10.10.101.3
Protocol Version: 2.0
State: NOT Usable
Redirection: L2
Packet Return: L2
Packets Redirected: 0
Connect Time: 00:00:29
Assignment: MASK


ROUTER#


After 30 seconds, the connect time for the cache restarts. I am running a 2.6.17 kernel which supports WCCP in the GRE module and have this loaded as gre0.



Has anyone else gotten this to work under the new 2.6 release yet? Anyone have any suggestions?

Thanks,
 Bryan
Back to top
Shoebottom, Bryan
*nix forums addict


Joined: 14 Sep 2005
Posts: 58

PostPosted: Fri Jul 14, 2006 6:27 pm    Post subject: RE: 2.6S1 WCCP2 problems Reply with quote

Does anyone have this problem on 2.6S1???
With debug on on the router I get this error:
Here_I_Am packet from 10.10.101.3 w/bad rcv_id 00000000


Any help would be appreciated.

Thanks,
Bryan


-----Original Message-----
From: Shoebottom, Bryan [mailto:BShoebottom@fanshawec.ca]
Sent: July 13, 2006 1:18 PM
To: squid-users@squid-cache.org
Subject: [squid-users] 2.6S1 WCCP2 problems

Hey,

I can't seem to get wccpv2 working in squid 2.6Stable1. My wccp config is as follows:
wccp2_router 10.10.101.1
wccp2_forwarding_method 1
wccp2_return_method 1
wccp2_service standard 0

My router only seems to see L2 redirection even though I have specified GRE/WCCP:
ROUTER#sho ip wcc we d
WCCP Cache-Engine information:
Web Cache ID: 10.10.101.3
Protocol Version: 2.0
State: NOT Usable
Redirection: L2
Packet Return: L2
Packets Redirected: 0
Connect Time: 00:00:29
Assignment: MASK


ROUTER#


After 30 seconds, the connect time for the cache restarts. I am running a 2.6.17 kernel which supports WCCP in the GRE module and have this loaded as gre0.



Has anyone else gotten this to work under the new 2.6 release yet? Anyone have any suggestions?

Thanks,
 Bryan
Back to top
Adrian Chadd
*nix forums beginner


Joined: 16 May 2002
Posts: 40

PostPosted: Sat Jul 15, 2006 2:04 am    Post subject: Re: 2.6S1 WCCP2 problems Reply with quote

On Fri, Jul 14, 2006, Shoebottom, Bryan wrote:
Quote:
Does anyone have this problem on 2.6S1???
With debug on on the router I get this error:
Here_I_Am packet from 10.10.101.3 w/bad rcv_id 00000000

You need to include the hardware/IOS version of the cisco you're talking to.
There's some versions which just don't plain work.



Adrian
Back to top
tino
*nix forums beginner


Joined: 10 Jul 2006
Posts: 6

PostPosted: Mon Jul 17, 2006 3:11 am    Post subject: Re: 2.6S1 WCCP2 problems Reply with quote

give me this data :
-cisco router version & ios version
-cisco runnning config
-kernel version
-iptables setting
-output of ifconfig
-when ./configure , your need add this options --enable_wccpv2

rgds,
Tino


----- Original Message -----
From: "Shoebottom, Bryan" <BShoebottom@fanshawec.ca>
To: <squid-users@squid-cache.org>
Sent: Saturday, July 15, 2006 1:27 AM
Subject: RE: [squid-users] 2.6S1 WCCP2 problems


Does anyone have this problem on 2.6S1???
With debug on on the router I get this error:
Here_I_Am packet from 10.10.101.3 w/bad rcv_id 00000000


Any help would be appreciated.

Thanks,
Bryan


-----Original Message-----
From: Shoebottom, Bryan [mailto:BShoebottom@fanshawec.ca]
Sent: July 13, 2006 1:18 PM
To: squid-users@squid-cache.org
Subject: [squid-users] 2.6S1 WCCP2 problems

Hey,

I can't seem to get wccpv2 working in squid 2.6Stable1. My wccp config is
as follows:
wccp2_router 10.10.101.1
wccp2_forwarding_method 1
wccp2_return_method 1
wccp2_service standard 0

My router only seems to see L2 redirection even though I have specified
GRE/WCCP:
ROUTER#sho ip wcc we d
WCCP Cache-Engine information:
Web Cache ID: 10.10.101.3
Protocol Version: 2.0
State: NOT Usable
Redirection: L2
Packet Return: L2
Packets Redirected: 0
Connect Time: 00:00:29
Assignment: MASK


ROUTER#


After 30 seconds, the connect time for the cache restarts. I am running a
2.6.17 kernel which supports WCCP in the GRE module and have this loaded as
gre0.



Has anyone else gotten this to work under the new 2.6 release yet? Anyone
have any suggestions?

Thanks,
Bryan
Back to top
Adrian Chadd
*nix forums beginner


Joined: 16 May 2002
Posts: 40

PostPosted: Mon Jul 17, 2006 12:50 pm    Post subject: Re: 2.6S1 WCCP2 problems Reply with quote

On Mon, Jul 17, 2006, Shoebottom, Bryan wrote:
Quote:
I'm not going to say it's not a cisco problem because they seem to change their code with every release, but i only changed the cache configuration to use 2.6S1 and not 2.5S12. I will try the debug (all on our development network) and send in the results. Thanks for the suggestions.

Hopefully the logs will give us a hint as to why WCCP isn't working.

How much interest is there in getting Squid-2.6 and WCCPv2 working
well?




Adrian
Back to top
Adrian Chadd
*nix forums beginner


Joined: 16 May 2002
Posts: 40

PostPosted: Mon Jul 17, 2006 1:28 pm    Post subject: Re: 2.6S1 WCCP2 problems Reply with quote

On Mon, Jul 17, 2006, Shoebottom, Bryan wrote:
Quote:
Adrian,

The interest is 100%. If I can't get wccpv2 to work in 2.6, i will stay with 2.5. As for the debug, i will post what is in the cache.log file, i also got 5 core file for every time squid tried to start:

You need to fix this first before we try to fix WCCP2.

This error sounds like the diskd stuff isn't setup right - double-check your SYSV shared
memory and message queue configuration and get squid-2.6 stable.



Adrian

Quote:

FATAL: msgget failed
Squid Cache (Version 2.6.STABLE1): Terminated abnormally.
CPU Usage: 0.008 seconds = 0.004 user + 0.004 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 0
FATAL: msgget failed
Squid Cache (Version 2.6.STABLE1): Terminated abnormally.
CPU Usage: 0.004 seconds = 0.004 user + 0.000 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 0
FATAL: msgget failed
Squid Cache (Version 2.6.STABLE1): Terminated abnormally.
CPU Usage: 0.008 seconds = 0.004 user + 0.004 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 0
FATAL: msgget failed
Squid Cache (Version 2.6.STABLE1): Terminated abnormally.
CPU Usage: 0.004 seconds = 0.004 user + 0.000 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 0
FATAL: msgget failed
Squid Cache (Version 2.6.STABLE1): Terminated abnormally.
CPU Usage: 0.004 seconds = 0.004 user + 0.000 sys
Maximum Resident Size: 0 KB
Page faults with physical i/o: 0

Thanks,

Bryan Shoebottom CCNA
Network/UNIX Administrator
Network Services & Computer Operations
Fanshawe College



-----Original Message-----
From: Adrian Chadd [mailto:adrian@creative.net.au]
Sent: Mon 7/17/2006 8:50 AM
To: Shoebottom, Bryan
Cc: Jeremy Hall; squid-users@squid-cache.org
Subject: Re: [squid-users] 2.6S1 WCCP2 problems

On Mon, Jul 17, 2006, Shoebottom, Bryan wrote:
I'm not going to say it's not a cisco problem because they seem to change their code with every release, but i only changed the cache configuration to use 2.6S1 and not 2.5S12. I will try the debug (all on our development network) and send in the results. Thanks for the suggestions.

Hopefully the logs will give us a hint as to why WCCP isn't working.

How much interest is there in getting Squid-2.6 and WCCPv2 working
well?




Adrian

Back to top
tino
*nix forums beginner


Joined: 10 Jul 2006
Posts: 6

PostPosted: Wed Jul 19, 2006 12:25 am    Post subject: Re: 2.6S1 WCCP2 problems Reply with quote

RE: [squid-users] 2.6S1 WCCP2 problems http_port 3128 transparent
vhost vport=80
tcp_outgoing address 10.10.10.1
wccp2_router 10.10.10.2
wccp2_forwarding_method 1
wccp2_return_method 1
wccp2_service standard 0

As far I know, kernel 2.6.9 & up , you do need bringing up loopback0 at
cisco router (this is because wccp will use it as router identifier)

#at router :
interface lo0
ip address 172.0.0.1 255.255.255.252
no shut

#-at squid:
insmod ip_gre
ifconfig gre0 up
ip addr add 172.0.0.2 255.255.255.252 dev gre0

If you shut loopback0, wccp mechanism still alive at router, but no traffic
being redirected ( gre_tunnel is established between lo0<-->gre0 & via this
tunnel where web-traffic redirected)
Also put "ip wccp web-cache exclude in" in the router interface where squid
attached & make sure it is not same vlan where traffic redirected


regards
Tino
----- Original Message -----
From: Shoebottom, Bryan
To: tino ; squid-users@squid-cache.org
Sent: Tuesday, July 18, 2006 7:06 PM
Subject: RE: [squid-users] 2.6S1 WCCP2 problems


Tino,

Our lookback interface is not configured and never has been in the past for
caches to work. You do bring up an interesting point of the IP address of
the gre interface. In the past i have simply used an IP that is not on our
network, maybe i can't do that anymore. What wccp directives do you have
configured in your squid.conf?

Thanks,

Bryan



-----Original Message-----
From: tino [mailto:tino.kriswanto@gmail.com]
Sent: Mon 7/17/2006 8:17 PM
To: Shoebottom, Bryan; squid-users@squid-cache.org
Subject: Re: [squid-users] 2.6S1 WCCP2 problems

Hi, Bryan
what is your interface loopback0 status & ip address at L3 6500 ? It should
be in the same subnet with your gre0 ip address.

I'm running 6500 earlier version than yours (supervisor engine-1a & msfc1),
ip cef enable, & wccpv2 work ok with squid-2.6S1, I'm using kernel 2.6.15.7
with ip_gre loaded from kernel module.

It also work when I put squid-2.6.S1 with 3620 router, ios 12.2(t) &
as5300, ios 12.0.7(t)

also, make sure iptables loaded first before running squid

rgds,
Tino

----- Original Message -----
From: Shoebottom, Bryan <mailto:BShoebottom@fanshawec.ca>
To: tino <mailto:tino.kriswanto@gmail.com> ;
squid-users@squid-cache.org
Sent: Monday, July 17, 2006 7:29 PM
Subject: RE: [squid-users] 2.6S1 WCCP2 problems



-6500 running code 12.1(26)E
-ip wccp we redirect in configured on vlans
ip wccp web-cache
-2.6.17
-/sbin/iptables -t nat -A PREROUTING -i gre0 -p tcp -m tcp --dport
80 -j REDIRECT --to-ports 3128

eth0 Link encap:Ethernet HWaddr 00:14:C2:C3:3B:1D
inet addr:10.10.101.3 Bcast:10.10.101.7
Mask:255.255.255.248
inet6 addr: fe80::214:c2ff:fec3:3b1d/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:53302 errors:0 dropped:0 overruns:0 frame:0
TX packets:41745 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:7311146 (6.9 MiB) TX bytes:6586185 (6.2 MiB)
Interrupt:185

gre0 Link encap:UNSPEC HWaddr
00-00-00-00-BD-BF-A8-4C-00-00-00-00-00-00-00-00
inet addr:10.2.1.1 Mask:255.255.255.252
UP RUNNING NOARP MTU:1476 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:104 errors:0 dropped:0 overruns:0 frame:0
TX packets:104 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:19992 (19.5 KiB) TX bytes:19992 (19.5 KiB)



I have enabled wccp2 when configuring squid.

Thanks,
Bryan


-----Original Message-----
From: tino [mailto:tino.kriswanto@gmail.com]
Sent: Sun 7/16/2006 11:11 PM
To: Shoebottom, Bryan; squid-users@squid-cache.org
Subject: Re: [squid-users] 2.6S1 WCCP2 problems

give me this data :
-cisco router version & ios version
-cisco runnning config
-kernel version
-iptables setting
-output of ifconfig
-when ./configure , your need add this options --enable_wccpv2

rgds,
Tino


----- Original Message -----
From: "Shoebottom, Bryan" <BShoebottom@fanshawec.ca>
To: <squid-users@squid-cache.org>
Sent: Saturday, July 15, 2006 1:27 AM
Subject: RE: [squid-users] 2.6S1 WCCP2 problems


Does anyone have this problem on 2.6S1???
With debug on on the router I get this error:
Here_I_Am packet from 10.10.101.3 w/bad rcv_id 00000000


Any help would be appreciated.

Thanks,
Bryan


-----Original Message-----
From: Shoebottom, Bryan [mailto:BShoebottom@fanshawec.ca]
Sent: July 13, 2006 1:18 PM
To: squid-users@squid-cache.org
Subject: [squid-users] 2.6S1 WCCP2 problems

Hey,

I can't seem to get wccpv2 working in squid 2.6Stable1. My wccp
config is
as follows:
wccp2_router 10.10.101.1
wccp2_forwarding_method 1
wccp2_return_method 1
wccp2_service standard 0

My router only seems to see L2 redirection even though I have
specified
GRE/WCCP:
ROUTER#sho ip wcc we d
WCCP Cache-Engine information:
Web Cache ID: 10.10.101.3
Protocol Version: 2.0
State: NOT Usable
Redirection: L2
Packet Return: L2
Packets Redirected: 0
Connect Time: 00:00:29
Assignment: MASK


ROUTER#


After 30 seconds, the connect time for the cache restarts. I am
running a
2.6.17 kernel which supports WCCP in the GRE module and have this
loaded as
gre0.



Has anyone else gotten this to work under the new 2.6 release yet?
Anyone
have any suggestions?

Thanks,
Bryan
Back to top
Henrik Nordstrom
*nix forums Guru


Joined: 01 Feb 2005
Posts: 2377

PostPosted: Wed Jul 19, 2006 2:04 pm    Post subject: Re: 2.6S1 WCCP2 problems Reply with quote

ons 2006-07-19 klockan 07:25 +0700 skrev tino:
Quote:
RE: [squid-users] 2.6S1 WCCP2 problems http_port 3128 transparent
vhost vport=80

why vhost and vport=80? These are for accelerator/reverse proxy mode,
not Internet proxies.. The transparent keyword takes care of all which
is needed in transparent interception.


Quote:
#-at squid:
insmod ip_gre
ifconfig gre0 up
ip addr add 172.0.0.2 255.255.255.252 dev gre0

I would say it's better to create a new GRE tunnel for the router.

ip tunnel add wccp mode gre remote ip.of.router
ip addr add proxy.server.ip/32 dev wccp
ip link set wccp up

and intercepted packets redirected by the router should be coming in on
the virtual wccp interface, where they can easily be redirected to Squid

iptables -t nat -A PREROUTING -i wccp -p tcp -j REDIRECT --to 3128

You quite likely also need to disable reverse-path lookups on the wccp
interface

echo 0 >/proc/sys/net/ipv4/conf/wccp/rp_filter


IP forwarding does not need to be enabled.

Regards
Henrik
Back to top
Bryan Shoebottom
*nix forums beginner


Joined: 19 Jul 2006
Posts: 2

PostPosted: Wed Jul 19, 2006 7:50 pm    Post subject: Re: 2.6S1 WCCP2 problems Reply with quote

Tino,

Thanks for your config, i added the vhost and vport=80 options to my
config, but i am still having the same problems. As for lo0 on the
router, i have never had to setup this up in the past but i tried it
anyway and it made no difference. When i have talked to the Cisco guys
before they stated that WCCP simply needs an IP and will grab any
configured IP on the router, it doesn't matter. I think i am going to
submit a bug, i don't know why squid is sending back a bad id.

Thanks,
Bryan

On Tue, 2006-07-18 at 20:25 -0400, tino wrote:
Quote:
RE: [squid-users] 2.6S1 WCCP2 problems http_port 3128
transparent
vhost vport=80
tcp_outgoing address 10.10.10.1
wccp2_router 10.10.10.2
wccp2_forwarding_method 1
wccp2_return_method 1
wccp2_service standard 0

As far I know, kernel 2.6.9 & up , you do need bringing up loopback0
at
cisco router (this is because wccp will use it as router identifier)

#at router :
interface lo0
ip address 172.0.0.1 255.255.255.252
no shut

#-at squid:
insmod ip_gre
ifconfig gre0 up
ip addr add 172.0.0.2 255.255.255.252 dev gre0

If you shut loopback0, wccp mechanism still alive at router, but no
traffic
being redirected ( gre_tunnel is established between lo0<-->gre0 & via
this
tunnel where web-traffic redirected)
Also put "ip wccp web-cache exclude in" in the router interface where
squid
attached & make sure it is not same vlan where traffic redirected


regards
Tino
----- Original Message -----
From: Shoebottom, Bryan
To: tino ; squid-users@squid-cache.org
Sent: Tuesday, July 18, 2006 7:06 PM
Subject: RE: [squid-users] 2.6S1 WCCP2 problems


Tino,

Our lookback interface is not configured and never has been in the
past for
caches to work. You do bring up an interesting point of the IP
address of
the gre interface. In the past i have simply used an IP that is not
on our
network, maybe i can't do that anymore. What wccp directives do you
have
configured in your squid.conf?

Thanks,

Bryan



-----Original Message-----
From: tino [mailto:tino.kriswanto@gmail.com]
Sent: Mon 7/17/2006 8:17 PM
To: Shoebottom, Bryan; squid-users@squid-cache.org
Subject: Re: [squid-users] 2.6S1 WCCP2 problems

Hi, Bryan
what is your interface loopback0 status & ip address at L3 6500 ? It
should
be in the same subnet with your gre0 ip address.

I'm running 6500 earlier version than yours (supervisor engine-1a &
msfc1),
ip cef enable, & wccpv2 work ok with squid-2.6S1, I'm using kernel
2.6.15.7
with ip_gre loaded from kernel module.

It also work when I put squid-2.6.S1 with 3620 router, ios 12.2(t) &
as5300, ios 12.0.7(t)

also, make sure iptables loaded first before running squid

rgds,
Tino

----- Original Message -----
From: Shoebottom, Bryan <mailto:BShoebottom@fanshawec.ca
To: tino <mailto:tino.kriswanto@gmail.com> ;
squid-users@squid-cache.org
Sent: Monday, July 17, 2006 7:29 PM
Subject: RE: [squid-users] 2.6S1 WCCP2 problems



-6500 running code 12.1(26)E
-ip wccp we redirect in configured on vlans
ip wccp web-cache
-2.6.17
-/sbin/iptables -t nat -A PREROUTING -i gre0 -p tcp -m tcp
--dport
80 -j REDIRECT --to-ports 3128

eth0 Link encap:Ethernet HWaddr 00:14:C2:C3:3B:1D
inet addr:10.10.101.3 Bcast:10.10.101.7
Mask:255.255.255.248
inet6 addr: fe80::214:c2ff:fec3:3b1d/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:53302 errors:0 dropped:0 overruns:0
frame:0
TX packets:41745 errors:0 dropped:0 overruns:0
carrier:0
collisions:0 txqueuelen:1000
RX bytes:7311146 (6.9 MiB) TX bytes:6586185 (6.2
MiB)
Interrupt:185

gre0 Link encap:UNSPEC HWaddr
00-00-00-00-BD-BF-A8-4C-00-00-00-00-00-00-00-00
inet addr:10.2.1.1 Mask:255.255.255.252
UP RUNNING NOARP MTU:1476 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:104 errors:0 dropped:0 overruns:0 frame:0
TX packets:104 errors:0 dropped:0 overruns:0
carrier:0
collisions:0 txqueuelen:0
RX bytes:19992 (19.5 KiB) TX bytes:19992 (19.5 KiB)



I have enabled wccp2 when configuring squid.

Thanks,
Bryan


-----Original Message-----
From: tino [mailto:tino.kriswanto@gmail.com]
Sent: Sun 7/16/2006 11:11 PM
To: Shoebottom, Bryan; squid-users@squid-cache.org
Subject: Re: [squid-users] 2.6S1 WCCP2 problems

give me this data :
-cisco router version & ios version
-cisco runnning config
-kernel version
-iptables setting
-output of ifconfig
-when ./configure , your need add this options
--enable_wccpv2

rgds,
Tino


----- Original Message -----
From: "Shoebottom, Bryan" <BShoebottom@fanshawec.ca
To: <squid-users@squid-cache.org
Sent: Saturday, July 15, 2006 1:27 AM
Subject: RE: [squid-users] 2.6S1 WCCP2 problems


Does anyone have this problem on 2.6S1???
With debug on on the router I get this error:
Here_I_Am packet from 10.10.101.3 w/bad rcv_id 00000000


Any help would be appreciated.

Thanks,
Bryan


-----Original Message-----
From: Shoebottom, Bryan [mailto:BShoebottom@fanshawec.ca]
Sent: July 13, 2006 1:18 PM
To: squid-users@squid-cache.org
Subject: [squid-users] 2.6S1 WCCP2 problems

Hey,

I can't seem to get wccpv2 working in squid 2.6Stable1. My
wccp
config is
as follows:
wccp2_router 10.10.101.1
wccp2_forwarding_method 1
wccp2_return_method 1
wccp2_service standard 0

My router only seems to see L2 redirection even though I have
specified
GRE/WCCP:
ROUTER#sho ip wcc we d
WCCP Cache-Engine information:
Web Cache ID: 10.10.101.3
Protocol Version: 2.0
State: NOT Usable
Redirection: L2
Packet Return: L2
Packets Redirected: 0
Connect Time: 00:00:29
Assignment: MASK


ROUTER#


After 30 seconds, the connect time for the cache restarts. I
am
running a
2.6.17 kernel which supports WCCP in the GRE module and have
this
loaded as
gre0.



Has anyone else gotten this to work under the new 2.6 release
yet?
Anyone
have any suggestions?

Thanks,
Bryan







Back to top
Bryan Shoebottom
*nix forums beginner


Joined: 19 Jul 2006
Posts: 2

PostPosted: Wed Jul 19, 2006 7:54 pm    Post subject: Re: 2.6S1 WCCP2 problems Reply with quote

Henrik,

I will give that a shot. Is there any reason why this isn't in the FAQ?
This is the first place i checked when my config didn't work.

Thanks,
Bryan

On Wed, 2006-07-19 at 10:04 -0400, Henrik Nordstrom wrote:
Quote:
ons 2006-07-19 klockan 07:25 +0700 skrev tino:
RE: [squid-users] 2.6S1 WCCP2 problems http_port 3128 transparent
vhost vport=80

why vhost and vport=80? These are for accelerator/reverse proxy mode,
not Internet proxies.. The transparent keyword takes care of all which
is needed in transparent interception.


#-at squid:
insmod ip_gre
ifconfig gre0 up
ip addr add 172.0.0.2 255.255.255.252 dev gre0

I would say it's better to create a new GRE tunnel for the router.

ip tunnel add wccp mode gre remote ip.of.router
ip addr add proxy.server.ip/32 dev wccp
ip link set wccp up

and intercepted packets redirected by the router should be coming in on
the virtual wccp interface, where they can easily be redirected to Squid

iptables -t nat -A PREROUTING -i wccp -p tcp -j REDIRECT --to 3128

You quite likely also need to disable reverse-path lookups on the wccp
interface

echo 0 >/proc/sys/net/ipv4/conf/wccp/rp_filter


IP forwarding does not need to be enabled.

Regards
Henrik
Back to top
tino
*nix forums beginner


Joined: 10 Jul 2006
Posts: 6

PostPosted: Thu Jul 20, 2006 12:27 am    Post subject: Re: 2.6S1 WCCP2 problems Reply with quote

Yes,
check your rp_filter=0

Be sure to try your squid in non-transparent (fill the proxy in client
browser) is work well

You also had to search topics in web
http://www.squid-cache.org/mail-archive/squid-users/200502/0909.html

rgds,
Tino
----- Original Message -----
From: "Bryan Shoebottom" <bshoebottom@fanshawec.ca>
To: "Henrik Nordstrom" <henrik@henriknordstrom.net>
Cc: "tino" <tino.kriswanto@gmail.com>; <squid-users@squid-cache.org>
Sent: Thursday, July 20, 2006 2:54 AM
Subject: Re: [squid-users] 2.6S1 WCCP2 problems


Quote:
Henrik,

I will give that a shot. Is there any reason why this isn't in the FAQ?
This is the first place i checked when my config didn't work.

Thanks,
Bryan

On Wed, 2006-07-19 at 10:04 -0400, Henrik Nordstrom wrote:
ons 2006-07-19 klockan 07:25 +0700 skrev tino:
RE: [squid-users] 2.6S1 WCCP2 problems http_port 3128 transparent
vhost vport=80

why vhost and vport=80? These are for accelerator/reverse proxy mode,
not Internet proxies.. The transparent keyword takes care of all which
is needed in transparent interception.


#-at squid:
insmod ip_gre
ifconfig gre0 up
ip addr add 172.0.0.2 255.255.255.252 dev gre0

I would say it's better to create a new GRE tunnel for the router.

ip tunnel add wccp mode gre remote ip.of.router
ip addr add proxy.server.ip/32 dev wccp
ip link set wccp up

and intercepted packets redirected by the router should be coming in on
the virtual wccp interface, where they can easily be redirected to Squid

iptables -t nat -A PREROUTING -i wccp -p tcp -j REDIRECT --to 3128

You quite likely also need to disable reverse-path lookups on the wccp
interface

echo 0 >/proc/sys/net/ipv4/conf/wccp/rp_filter


IP forwarding does not need to be enabled.

Regards
Henrik
Back to top
Henrik Nordstrom
*nix forums Guru


Joined: 01 Feb 2005
Posts: 2377

PostPosted: Thu Jul 20, 2006 2:51 pm    Post subject: Re: 2.6S1 WCCP2 problems Reply with quote

ons 2006-07-19 klockan 15:54 -0400 skrev Bryan Shoebottom:

Quote:
I will give that a shot. Is there any reason why this isn't in the FAQ?

Lack of people having time to update the FAQ?

Regards
Henrik
Back to top
Henrik Nordstrom
*nix forums Guru


Joined: 01 Feb 2005
Posts: 2377

PostPosted: Thu Jul 20, 2006 3:17 pm    Post subject: Re: 2.6S1 WCCP2 problems Reply with quote

ons 2006-07-19 klockan 15:50 -0400 skrev Bryan Shoebottom:

Quote:
before they stated that WCCP simply needs an IP and will grab any
configured IP on the router, it doesn't matter. I think i am going to
submit a bug, i don't know why squid is sending back a bad id.

Perhaps your problem matches bug #1584? "Cache unable to register with
WCCPv2" <url:http://www.squid-cache.org/bugs/show_bug.cgi?id=1584>

Note: Bug #1584 is about an IOS issue where IOS incorrectly rejects WCCP
control channel packets as duplicates if their IP level packet ID is 0.
For correct operation IOS should be looking at the WCCP message ID, not
the IP packet ID. The IP packet ID should be ignored completely, only
relevant in handling of fragmented IP packets which is not the case
here.

Regards
Henrik
Back to top
Google

Back to top
Display posts from previous:   
Post new topic   Reply to topic Page 1 of 1 [13 Posts] View previous topic :: View next topic
The time now is Mon Dec 01, 2008 9:29 pm | All times are GMT
navigation Forum index » Apps » Squid
Jump to:  

Similar Topics
Topic Author Forum Replies Last Post
No new posts Winbind problems for ADS authentication nlinley networking 1 Tue Sep 19, 2006 9:22 am
No new posts problems using oddmuse with mod_perl2 inside apache2.2 pe... Fergus McMenemie Perl 0 Fri Jul 21, 2006 9:48 am
No new posts Problems with make-kpkg and skas patch Todd A. Jacobs Debian 0 Fri Jul 21, 2006 12:30 am
No new posts Problems with relay control Félix Martos Trenado Postfix 3 Thu Jul 20, 2006 3:33 pm
No new posts again a newbie... :( compiler problems Thorsten Kaben C++ 18 Thu Jul 20, 2006 2:52 am

Loans | Debt Management | Proxy | Loans | Mortgage Calculator
Copyright © 2004-2005 DeniX Solutions SRL
 
Other DeniX Solutions sites: Unix/Linux blog |  electronics forum |  medicine forum |  science forum | 
Privacy Policy


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.3563s ][ Queries: 16 (0.1769s) ][ GZIP on - Debug on ]