Re: [squid-users] help with zph_mode in squid 2.7

On 3/05/2014 11:46 a.m., Soporte Técnico wrote:
> Hi people, i had a couple of freebsds boxes with squid 2.7 transparent mode
> running, i recently see zph configuration directive, i didn´t know about
> that.
>
> The question is: zph override source ip from cached HIT object?

No. ZPH does nothing with IPs. All it does is set the TOS/DiffServ value
on packets leaving Squid.

>
> I had no mikrotik hardware runing together, so i had firewall rules (ipfw)
> that allow traffic in my internal network, if i enable zph as:
>
> #ZPH CONFIGURATION
> zph_mode tos
> zph_local 0x30
>
>
> Cached objects are going to have source ip origin with my squid box ip?

Cached objects do not have IPs.

*Packets* will follow the rules you setup for the "transparent"
interception. If you make those rules depend on the TOS value set by ZPH
then you have done the interception wrong - *all* traffic returning to
the client from Squid needs TOS marking, not just the packets containing
HIT objects.

Amos
Received on Sat May 03 2014 - 10:22:27 MDT