RE: [squid-users] squid+WCCPv2+GRE

Please be aware of the security implications of using the ip_wccp
module. Because you can only use one or the other (gre or wccp module)
you will not be able to use GRE and will accept wccp packets from any
host.
I also had intermittent problems with this setup, large POSTs (attaching
a file to hotmail, etc.) wouldn't go through. Changing to a 2.6.9+
kernel and using the wccpv2 patch solved my problems and I've been
running with this configuration for approx 2 months now with no
problems.

Thanks,
 Bryan
 

-----Original Message-----
From: Awie [mailto:awie@nangura.net]
Sent: June 3, 2006 4:56 AM
To: Shoebottom, Bryan; Dean Albano
Cc: squid-users@squid-cache.org
Subject: Re: [squid-users] squid+WCCPv2+GRE

If you do not need WCCP v2 features, try WCCP v1 that your can use
ip_wccp
module. I've used v1 since 5 years ago with a very satisfied result.

Thx & Rgds,

Awie

----- Original Message -----
From: "Shoebottom, Bryan" <BShoebottom@fanshawec.ca>
To: "Dean Albano" <dean.albano@121media.com>
Cc: <squid-users@squid-cache.org>
Sent: Saturday, June 03, 2006 01:33
Subject: RE: [squid-users] squid+WCCPv2+GRE

> I had a lot of problems trying to use a 2.4 kernel, try a 2.6.9 or
> higher.
>
> Thanks,
> Bryan
>
>
> -----Original Message-----
> From: Dean Albano [mailto:dean.albano@121media.com]
> Sent: June 2, 2006 12:27 PM
> To: Shoebottom, Bryan
> Cc: squid-users@squid-cache.org
> Subject: Re: [squid-users] squid+WCCPv2+GRE
>
> Sorry, I should have stated that. We are using kernel 2.4.21-37.EL.
> The ip_gre module is loaded.
>
> Dean J. Albano
> Network Integration Consultant
> dean.albano@121media.com
> 264 W. 40th Street 16th Fl.
> New York, NY 10018
>
> tel: 646-217-0598
> fax: 212 937-5237
>
>
>
> On Jun 2, 2006, at 12:24 PM, Shoebottom, Bryan wrote:
>
> Do you have the ip_gre module loaded? Are you using a 2.6.9 or newer
> kernel?
>
> Thanks,
> Bryan
>
>
> -----Original Message-----
> From: Dean Albano [mailto:dean.albano@121media.com]
> Sent: June 2, 2006 12:14 PM
> To: squid-users@squid-cache.org
> Subject: [squid-users] squid+WCCPv2+GRE
>
> We are using squid (Version 2.5.STABLE14+module1.0) with WCCP v2
> compiled in to transparently redirect http. The problem seems to be
> that the GRE headers are not being removed. The access log does not
> show incoming requests. The tcpdump trace shows that the GRE packets
> are being sent to the cache server, but no packets are flowing from
> the server.
>
> Any ideas as to what we are doing wrong?
>
> Dean J. Albano
> Network Integration Consultant
> dean.albano@121media.com
>
>
>
>
>
>
Received on Sat Jun 03 2006 - 04:52:09 MDT