Install Squid:
Code Block |
---|
yum \-y install squid |
In httpd.conf, make sure the Apache server only listens to port 80 on the localhost interface:
...
Code Block |
---|
/etc/init.d/shibd restart |
...
I have an "http_access allow all" directive in my configuration, in this instance. In the case of a regular web proxy, for use with clients connecting to a proxy for outbound requests, this would be a very bad idea. However, in this case we are proxying inbound requests to our Apache server only. By specifying the parent server as our Apache server, we have restricted the connections our cache can make, so that it can only connect to our Apache server. Further, we didn't want to restrict inbound traffic, on the premise that our users could be from anywhere.
...