say i have an apache server configured for ssl/non ssl virtual hosts and a proxy configured as follows (see squid.conf)
the ssl on each name based virtual host is configured on its own port (only 7 of the domains need this the rest are just media and other insignificant bits of data but domains 1-7 contain forms that require specific personal information that may be technically illegal to transmit without encryption)
if any additional information is needed just let me know
domain1 is port 443
domain2 is port 444
domain3 is port 445
domain6 is port 447
...
domain7 is port 449
my current squid.conf (actual domain names removed for security purposes)
http_port 80 vhost
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
cache_peer 192.168.0.20 parent 80 0 no-query default no-digest originserver name=www1
cache_peer 192.168.0.20 parent 80 0 no-query default no-digest originserver name=www2
cache_peer 192.168.0.20 parent 80 0 no-query default no-digest originserver name=www3
cache_peer 192.168.0.20 parent 80 0 no-query default no-digest originserver name=www4
cache_peer 192.168.0.20 parent 80 0 no-query default no-digest originserver name=www5
cache_peer 192.168.0.20 parent 80 0 no-query default no-digest originserver name=www6
cache_peer 192.168.0.20 parent 80 0 no-query default no-digest originserver name=www7
cache_peer 192.168.0.20 parent 80 0 no-query default no-digest originserver name=www8
cache_peer 192.168.0.20 parent 80 0 no-query default no-digest originserver name=www9
cache_peer_domain www1 .domain1.org
cache_peer_domain www2 .domain2.com
cache_peer_domain www3 .domain3.com
cache_peer_domain www4 .domain4.com
cache_peer_domain www5 .domain5.com
cache_peer_domain www6 .domain6.com
cache_peer_domain www7 .domain7.com
cache_peer_domain www8 .domain8.com
cache_peer_domain www9 .domain9.com
acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl SSL_ports port 443 # https
acl SSL_ports port 444 # https
acl SSL_ports port 445 # https
acl SSL_ports port 446 # https
acl SSL_ports port 447 # https
acl SSL_ports port 448 # https
acl SSL_ports port 449 # https
#acl SSL_ports port 563 # snews
#acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 444 # https
acl Safe_ports port 445 # https
acl Safe_ports port 446 # https
acl Safe_ports port 447 # https
acl Safe_ports port 448 # https
acl Safe_ports port 449 # https
#acl Safe_ports port 70 # gopher
#acl Safe_ports port 210 # wais
#acl Safe_ports port 1025-65535 # unregistered ports
#acl Safe_ports port 280 # http-mgmt
#acl Safe_ports port 488 # gss-http
#acl Safe_ports port 591 # filemaker
#acl Safe_ports port 777 # multiling http
#acl Safe_ports port 631 # cups
#acl Safe_ports port 873 # rsync
#acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
icp_access allow localnet
icp_access deny all
hierarchy_stoplist cgi-bin ?
access_log /var/log/squid/access.log squid
acl apache rep_header Server ^Apache
acl 192.168.0.20 dstdomain .domain1.org
acl 192.168.0.20 dstdomain .domain2.com
acl 192.168.0.20 dstdomain .domain3.com
acl 192.168.0.20 dstdomain .domain4.com
acl 192.168.0.20 dstdomain .domain5.com
acl 192.168.0.20 dstdomain .domain6.com
acl 192.168.0.20 dstdomain .domain7.com
acl 192.168.0.20 dstdomain .domain8.com
acl 192.168.0.20 dstdomain .domain9.com
http_access allow 192.168.0.20
http_access allow manager localhost
http_access allow manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
http_access deny all
broken_vary_encoding allow apache
hosts_file /etc/hosts
coredump_dir /var/spool/squid
cache_effective_user user
cache_effective_group user
---------- Post updated 02-25-10 at 05:14 PM ---------- Previous update was 02-24-10 at 07:02 PM ----------
nvm i figured out how this might work with virtual ip addresses