diff options
author | Dirk Steinkopf <dirk@steinkopf.net> | 2018-12-06 09:29:37 +0100 |
---|---|---|
committer | Dirk Steinkopf <dirk@steinkopf.net> | 2018-12-06 09:29:37 +0100 |
commit | 85b86563be702278166e70ec60e8d5572e3531f4 (patch) | |
tree | c712908be3561921574617eb56f49df212c845f0 /docs/services.rst | |
parent | 531f16f9334881c058c70fe0d2cea3bc720edfb3 (diff) | |
download | vyos-documentation-85b86563be702278166e70ec60e8d5572e3531f4.tar.gz vyos-documentation-85b86563be702278166e70ec60e8d5572e3531f4.zip |
T1060: Add command webproxy whitelist to bypass proxy based on source/destination address IP address.
Diffstat (limited to 'docs/services.rst')
-rw-r--r-- | docs/services.rst | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/docs/services.rst b/docs/services.rst index a621fffc..af245a44 100644 --- a/docs/services.rst +++ b/docs/services.rst @@ -1683,3 +1683,24 @@ The size of the proxy cache can be adjusted by the user. .. _Squid3: http://www.squid-cache.org/ .. _Squidguard: http://www.squidguard.org/ .. _`accel-ppp`: https://accel-ppp.org/ + +Bypassing the webproxy +^^^^^^^^^^^^^^^^^^^^^^ + +Some services don't work correctly when being handled via a web proxy. +So sometimes it is useful to bypass a transparent proxy: + +* To bypass the proxy for every request that is directed to a specific destination: + + :code:`set service webproxy whitelist destination-address 1.2.3.4` + + :code:`set service webproxy whitelist destination-address 4.5.6.0/24` + + +* To bypass the proxy for every request that is coming from a specific source: + + :code:`set service webproxy whitelist source-address 192.168.1.2` + + :code:`set service webproxy whitelist source-address 192.168.2.0/24` + + (This can be useful when a called service has many and/or often changing destination addresses - e.g. Netflix.) |