Squid bind to CARP interface
-
I've installed two servers with pfSense 1.2-RC2 and using carp on the WAN and LAN interface. I installed squid package and on the config screen, it only allows me to choose to bind to the LAN, WAN and SYNC interfaces. I'll be using RADIUS authentication, so I can't use squid in transparent mode.
There is a way to bind squid to the CARP interface? This will make my squid proxies work in high availability, since the users are going to point to the LAN CARP VIP address on the squid port.
For now, I changed to transparent mode, and my users point to the LAN CARP VIP on port 80 and works fine, because the traffic is redirected to 127.0.0.1 on squid port.
Without the transparent mode, squid binds to 127.0.0.1:3128 and also the LAN ip address:3128 and I need to bind to the CARP_VIP:3128.
-
On transparent mode squid can't access to 127.0.0.1 and without carp
Perhaps may be create some rule for sovling this problem?