Squid: Forward Cascading Authentication Proxy

Or alternatively referred to as ‘cascading authentication proxy’ is a proxy that sits behind another proxy. Thus allowing any other component who does not have credential to access the original proxy, to be able to use that proxy through the forward authenticating proxy.

Similar to feature found in the desktop proxy product CCProxy.  The following is the squid base configuration  for such a proxy. As usual, replace $VARIABLE with its corresponding values directly in the configuration file.

# port to use
http_port $SQUID_PORT
 
# upstream BASIC authentication
cache_peer $PROXY_HOST parent $PROXY_PORT 0 no-query default proxy-only login=$PROXY_USER:$PROXY_PASSWORD
 
# ACL
 
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl all src 0.0.0.0/0.0.0.0
 
http_access allow all
never_direct allow all
icp_access deny all
 
# LOGGING
cache_log $LOG_DIR_PATH/cache.log
cache_store_log $LOG_DIR_PATH/store.log
 
#caching
cache_dir ufs $CACHE_DIR_PATH 10 1 1
 
#cache_effective_user squid
#cache_effective_group wheel
 
#no local caching
maximum_object_size 0 KB
minimum_object_size 0 KB
 
# specify uncachable requests
acl all src 0.0.0.0/0.0.0.0
no_cache deny all

Leave a Reply

Spam protection by WP Captcha-Free