Re: [Rabbit-proxy-users] HTTPS

[Robert O. <ro...@kh...>]

Costa Tsaousis wrote:

>I am testing RabbIT2 for providing my users with an Internet Accelerator.
>I have about 10.000 modems to serve 
>
Ok, bigger than I expected.

>It is not necessary to chain proxy SSL, but how
>can I tell this to RabbIT2?
>  
>
Currently you can not, but you tell the clients to
use another proxy for ssl. Having a proxy chain for ssl
introduce latency and that is one of the things you want
to minimize for a proxy accellerator (that is why you
have keepalive/persistent connections in HTTP/1.1).
Since none of the proxies in the chain can cache the
content it does not make much sense to have a chain for ssl.
Client setup instructions may be simpler and your firewall
setup may also be easier.

I will look more at rabbit and see if I can fix the
problem you have, so hopefully you wont have to
tell rabbit anything.

> <>Up to now, I plan the whole setup as follows: ...
> What do you think?

Well your setup makes sense. It is a bigger setup
than I expected and for big sites you want
redundancy and failover. So having squid for
caching and load balancing seems wise.
Having 1.5 TB of cache for rabbit is also something
I would recomend against (rabbit was not designed for
that size it was designed to handle a couple of GB,
may work for a bit more, but that is untested). So having
the netcaches behind rabbit seems like a good idea.

And to be honest, I have not handled that many clients
myself with any proxy so you are probably better qualified
to design the setup.

Have fun
/robo