[Scottish] Sharing a Linux Proxy Server across networks

Colin McKinnon scottish at mailman.lug.org.uk
Mon Feb 24 09:58:02 2003


apostolus@blueyonder.co.uk wrote:

>I have a simple query here that someone might be able to help me with.  I have a lInux Server (SuSE) with Squid running on 192.168.10.1..  I have windows clients that access the outside world thru' the proxy but would now like to split the clients into three separate networks..  I know I can just change the workgroup name but want to be able to hide all services on each of the three networks but still allow access to all thru'' the proxy server..  is this possible without compromising the integrity of the individual win networks..
>
Yes. You could keep the same IP addresses and set the scope id (1). Or 
you could use three ip subnets and set up ip aliases on the interface of 
the proxy (2). Or you could use subnets and three seperate network cards 
(3). Or you could set up routers to converge the subnets onto the proxy 
(4). If I spent some more time thinking about it, there are probably 
other ways of doing it as well (OK so (1) is a bit silly). Are they 
running on the same phyiscal ethernet segment? Are individual machines 
likely to move between subnets?  Is each sub-net to be completely 
isolated apart from the shared proxy (no common printers / PDCs / mail 
server / ...?) ? Is network bandwidth an issue? Number of clients?

Colin