Transparency + Authentication.

We're running squid-2.2.STABLE4 on Sun Solaris 2.6.

There are 2 parents and no siblings. Access is restricted to users on
site, by using the IP addresses. We do not yet enforce use of the cache.

We now need to run:

     - Transparent caching - To force people on site to use the cache.

 and - Authentication - To let people at home use the proxy to
                             access IP-authenticated services such as
                             online journals.

The authenticating-squid would always fetch docs directly, so that our
IP address would be on the request. The other squid would fetch docs
via our parents, or directly, as necessary.

Can this be done by running squid twice, say on ports 8080 and 8081
(with separate cache directories) ? The transparent cache would use
8080, and authentication 8081.

If so, would you make the 2 caches siblings, or make the authenticating
squid be the child of the other one ? Or ... ?

Is this the way to go, or is there some other way of doing this ?

Pat.
Pat Newby, IT and Computing Services (ITCS),
           University of East Anglia, Norwich, NR4 7TJ, UK.
Received on Thu Jan 27 2000 - 07:01:02 MST