You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@trafficserver.apache.org by Susan Hinrichs <sh...@verizonmedia.com> on 2021/04/12 13:33:43 UTC

Re: [E] Passing ftp, ftps etc. to Squid?

My understanding is that the FTP proxy support in ATS was removed some
time back, so you will need to route your ftp traffic to another
proxy.

I can think of three options
1.  Use a different DNS name to resolve to the address of your FTP proxy.
2.  Run your FTP proxy on the same machine as ATS.  The OS will
deliver your port 21 traffic to the FTP proxy.
3. Use the DNAT action of iptables to forward FTP packets that arrive
on your ATS box to the address of your FTP proxy server.

On Sun, Apr 11, 2021 at 11:13 AM Randy DuCharame <ra...@ad5gb.com> wrote:
>
> Greetings,
>
> I seem to be stuck.  I'm always using the latest from 'master' and
> almost never have problems with it.  The problem I'm having is between
> my ears LOL.  I can't seem to figure out how to get ATS to hand off
> forward ftp, ftps, sftp requests to Squid.  I've not found the 'magic
> sauce' to get ATS to proxy these protocols itself (yet) so am wondering
> if someone can help - or at least point me in the right direction.  ATS
> is so much faster with http/https so I don't want to switch back to
> Squid outright.  Normally for me, the usual RTFM exercise solves
> problems such as this but I'm gettin' old and the firmware is beginning
> to experience bit rot I'm afraid.  (It sucks to get old people.
> Don't
> do it!)  :D
>
> Many TIA for any pointers.
>
> --
> Randall DuCharme (Radio AD5GB)
> Powered by Open Source software.
>

Re: [E] Passing ftp, ftps etc. to Squid?

Posted by Randy DuCharame <ra...@ad5gb.com>.
Thanks Susan,

I  think 2 might work.  I was hoping I could configure ATS to pass it 
off to another machine but the volume should in reality be small enough 
to not be a real issue.  Port forwarding is also a possibility I hadn't 
considered but if ATS can't be configured to hand off the request that's 
probably the easiest way to separate the proxies on different hosts.

Thank you kindly!!


On 4/12/2021 8:33 AM, Susan Hinrichs wrote:
> My understanding is that the FTP proxy support in ATS was removed some
> time back, so you will need to route your ftp traffic to another
> proxy.
>
> I can think of three options
> 1.  Use a different DNS name to resolve to the address of your FTP proxy.
> 2.  Run your FTP proxy on the same machine as ATS.  The OS will
> deliver your port 21 traffic to the FTP proxy.
> 3. Use the DNAT action of iptables to forward FTP packets that arrive
> on your ATS box to the address of your FTP proxy server.
>
> On Sun, Apr 11, 2021 at 11:13 AM Randy DuCharame <ra...@ad5gb.com> wrote:
>> Greetings,
>>
>> I seem to be stuck.  I'm always using the latest from 'master' and
>> almost never have problems with it.  The problem I'm having is between
>> my ears LOL.  I can't seem to figure out how to get ATS to hand off
>> forward ftp, ftps, sftp requests to Squid.  I've not found the 'magic
>> sauce' to get ATS to proxy these protocols itself (yet) so am wondering
>> if someone can help - or at least point me in the right direction.  ATS
>> is so much faster with http/https so I don't want to switch back to
>> Squid outright.  Normally for me, the usual RTFM exercise solves
>> problems such as this but I'm gettin' old and the firmware is beginning
>> to experience bit rot I'm afraid.  (It sucks to get old people.
>> Don't
>> do it!)  :D
>>
>> Many TIA for any pointers.
>>
>> --
>> Randall DuCharme (Radio AD5GB)
>> Powered by Open Source software.
>>
-- 
Randall DuCharme (Radio AD5GB)
Powered by Open Source software.