On Mon, 03 May 2010 15:24:30 -0430, Robert Marcano
<robert_at_marcanoonline.com> wrote:
> On 05/03/2010 03:07 PM, Henrik Nordström wrote:
>> mån 2010-05-03 klockan 21:59 +1200 skrev Amos Jeffries:
>>
>> Donẗ forget to add whildcard interface name syntax such as ppp+ or
>> similar, as used for many dialup or vpn network configurations sharing
>> the exact same dynamic ip problem.
>>
>> But generally my recommendation is to not use tcp_outgoing_address and
>> instead rely on routing to pick the most suitable interface.
>
> I understand, but we are using tcp_outgoing_address because it supports
> ACLs and we route some users to a dedicated ISP exclusive to them. It
ACL list checking can be duplicated trivially now.
> breaks server side persistent connections so we disable it, but I think
> it could be theoretically possible to have server side persistent
> connections in Squid is changed to keep track of the outgoing address
> and group those connections accordingly
AKA, connection pinning.
Doing that with a readable configuration would be the challenge there.
Amos
Received on Tue May 04 2010 - 02:49:44 MDT
This archive was generated by hypermail 2.2.0 : Tue May 04 2010 - 12:00:06 MDT