summaryrefslogtreecommitdiff
path: root/docs/services.rst
diff options
context:
space:
mode:
authorDirk Steinkopf <dirk@steinkopf.net>2018-12-06 09:29:37 +0100
committerDirk Steinkopf <dirk@steinkopf.net>2018-12-06 09:29:37 +0100
commit85b86563be702278166e70ec60e8d5572e3531f4 (patch)
treec712908be3561921574617eb56f49df212c845f0 /docs/services.rst
parent531f16f9334881c058c70fe0d2cea3bc720edfb3 (diff)
downloadvyos-documentation-85b86563be702278166e70ec60e8d5572e3531f4.tar.gz
vyos-documentation-85b86563be702278166e70ec60e8d5572e3531f4.zip
T1060: Add command webproxy whitelist to bypass proxy based on source/destination address IP address.
Diffstat (limited to 'docs/services.rst')
-rw-r--r--docs/services.rst21
1 files changed, 21 insertions, 0 deletions
diff --git a/docs/services.rst b/docs/services.rst
index a621fffc..af245a44 100644
--- a/docs/services.rst
+++ b/docs/services.rst
@@ -1683,3 +1683,24 @@ The size of the proxy cache can be adjusted by the user.
.. _Squid3: http://www.squid-cache.org/
.. _Squidguard: http://www.squidguard.org/
.. _`accel-ppp`: https://accel-ppp.org/
+
+Bypassing the webproxy
+^^^^^^^^^^^^^^^^^^^^^^
+
+Some services don't work correctly when being handled via a web proxy.
+So sometimes it is useful to bypass a transparent proxy:
+
+* To bypass the proxy for every request that is directed to a specific destination:
+
+ :code:`set service webproxy whitelist destination-address 1.2.3.4`
+
+ :code:`set service webproxy whitelist destination-address 4.5.6.0/24`
+
+
+* To bypass the proxy for every request that is coming from a specific source:
+
+ :code:`set service webproxy whitelist source-address 192.168.1.2`
+
+ :code:`set service webproxy whitelist source-address 192.168.2.0/24`
+
+ (This can be useful when a called service has many and/or often changing destination addresses - e.g. Netflix.)