Re: [squid-users] tcp_outgoing_address?

On 12/10/2013 10:38 a.m., Beto Moreno wrote:
> Them I have get help from my firewall, right?

Yes. It is no use Squid separating traffic into from-yyy.* and
from-xxx.* groups if the firewall and routing layer is sending
everything out ISP1. At most upper layer software like Squid can send IP
address, TOS/DiffServ or iptables MARK labels to the kernel as hints to
aid routing decisions. It cannot make those decisions itself.

Please read that link which was supplied earlier.

Amos

> On Fri, Oct 11, 2013 at 12:28 PM, Alex Domoradov wrote:
>>> does this setting tcp_outgoing_address can help me?
>> yes, it does, but you need to configure PBR (Policy Base Routing). You
>> can find more at
>> http://lartc.org/howto/lartc.rpdb.multiple-links.html#AEN298
>>
>> acl user_of_dep1 src 192.168.1.0/24
>> acl user_of_dep2 src 192.168.2.0/24
>> acl user_of_dep3 src 192.168.3.0/24
>>
>> tcp_outgoing_address xxx.xxx.xxx.xxx user_of_dep1
>> tcp_outgoing_address yyy.yyy.yyy.yyy user_of_dep2
>>
>> On Fri, Oct 11, 2013 at 9:24 PM, Beto Moreno <pamrtj_at_gmail.com> wrote:
>>> Hi.
>>>
>>> My friends, I have a server with 2 ISP, I want to move some users to
>>> use ISP-1 and others ISP-2, does this setting tcp_outgoing_address can
>>> help me?
>>>
>>> Squid 3.1.x.
>>>
>>> I want this:
>>>
>>> user-1 gw-1->isp-1
>>> user-2 gw-2->isp-2
>>>
>>> Thanks.
Received on Sat Oct 12 2013 - 01:41:56 MDT