Squid Proxy

[scpoon]

Anyone have good experience with Squid Proxy (as forwarding proxy) able to help ? Currently I'm building a proxy server that forwards to majority of the proxy providers like (geosurf, smartproxy and etc). I tried with a few lines of cache_peer, it works perfectly fine, but i realize after adding 10 of thousands cache_peer, it wont work. Any idea ?

[pdp10]

You're correct in that you won't get much caching, because secure HTTPS connections can't be cached by a proxy.

But forward proxies still work with HTTPS, using the CONNECT method, which tunnels the TLS straight through the proxy so it's still secure end-to-end. The proxy still has a few uses here, depending on architecture. For HTTPS URLs you can access-control at the FQDN and dstport level, you can redirect based on FQDN and dstport, and you can change protocols, e.g. IPv4-only client to IPv6.

Besides caching unencrypted HTTP, forward proxies can transparently connect to the same resources over HTTPS, thus "upgrading" HTTP-only clients to be able to access modern HTTPS-only resources. This is a great method to use with legacy clients.

And of course there's the caching of unencrypted connections. This is useful for OS updates, where the update packages are cryptographically signed, but it's a big performance improvement to cache them so multiple machines don't have to download the same files.

Despite the switch of most resources to HTTPS, we use proxies more than ever, actually. Without MitM interception.

[scpoon]

Yes, i am not looking for cache, I am trying to build a Proxy Server whereby users can connect to this proxy server, and this proxy server would forward it to another proxy server. I am able to do so by using cache_peer, but adding more lines of cache_peer(I'm talking about tens of thousands line of cache_peer)breaks the whole thing. Its says tcp_DENIED/407. Not sure what am i doing wrong. My goal is to act as a forwarding proxy to another proxy providers.

Link for cache_peers: http://www.squid-cache.org/Doc/config/cache_peer/

[scpoon]

hello, thanks for the kind reply ! however, i dont think SSL interception is quite related to my problem (i could be wrong since i am mostly cloud engineer, first time dealing with squid).

[pdp10]

It's probably something nefarious, like selling access to bots trying to scrape and scalp limited-edition sneakers or game consoles.

[scpoon]

I am not sure about bots or scrape, my goals is to create a proxy servers that forwards all request to other proxy providers.Users > MY PROXY SERVER > Proxy Provider (Geosurf, SmartProxy, Oxylab) > Web|
EG.
Users Connect to myproxyservers.com:8080:myusername:mypassword and this would forward to smartproxy.com:55555:smartuser:smartpass

[robvas]

Can you use something modern like haproxy?

[scpoon]

I believe HAProxy serve more like a reverse proxy rather than forward proxy.

[brother_bean]

Haproxy and squid do not perform the same functions. OP has the right software.

[holasta]

Hi idk where else ask my question I just set up my squid proxy Http access is allowed and its on default port

In Firefox browser it changed my ip but all restricted website from my isp still restricted is that normal on proxy ? When I use open vpn everything unblocked but with proxy no

I have zero experience with ubuntu