Skip to content

Commit 4031945

Browse files
squidadmsquidadm
committed
2026-01-04
1 parent cfb4ad6 commit 4031945

10 files changed

Lines changed: 443 additions & 0 deletions

File tree

‎squid-users/2026-January.txt‎

Lines changed: 85 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,85 @@
1+
From rubendibattista at gmail.com Sun Jan 4 01:35:40 2026
2+
From: rubendibattista at gmail.com (Ruben Di Battista)
3+
Date: Sun, 4 Jan 2026 02:35:40 +0100
4+
Subject: [squid-users] Running squid in a network namespace
5+
In-Reply-To: <CACnYWRcf9ufYxDXdEtEUXaKvxuVUFe+KStw8Qv0F+XvARVo06g@mail.gmail.com>
6+
References: <CACnYWRcf9ufYxDXdEtEUXaKvxuVUFe+KStw8Qv0F+XvARVo06g@mail.gmail.com>
7+
Message-ID: <CACnYWRfDjcXkbFq6VvsWCDv87-Ju4-36cJRZG1MSXtYPHhz-jQ@mail.gmail.com>
8+
9+
Hello,
10+
11+
I have a network namespace which runs a Wireguard VPN (only).
12+
13+
``
14+
? ip l
15+
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode
16+
DEFAULT group default qlen 1000
17+
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
18+
3: wg0: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1420 qdisc noqueue state
19+
UNKNOWN mode DEFAULT group default qlen 1000
20+
link/none`
21+
```
22+
23+
I'd like to run squid inside this network namespace. I normally do this
24+
using a systemd unit, for example for tinyproxy:
25+
26+
```
27+
? systemctl cat tinyproxy
28+
# /usr/lib/systemd/system/tinyproxy.service
29+
[Unit]
30+
Description=Tinyproxy Web Proxy Server
31+
After=network.target
32+
33+
[Service]
34+
Type=forking
35+
ExecStart=/usr/bin/tinyproxy -c /etc/tinyproxy/tinyproxy.conf
36+
ExecReload=/usr/bin/kill -USR1 $MAINPID
37+
PIDFile=/run/tinyproxy/tinyproxy.pid
38+
PrivateDevices=yes
39+
40+
[Install]
41+
WantedBy=multi-user.target
42+
43+
# /etc/systemd/system/tinyproxy.service.d/override.conf
44+
45+
[Service]
46+
NetworkNamespacePath=/run/netns/vpn
47+
BindReadOnlyPaths=/etc/netns/vpn/resolv.conf:/etc/resolv.conf:norbind
48+
49+
[Unit]
50+
After=vpn.service
51+
BindsTo=vpn.service
52+
```
53+
54+
55+
But if I do the same with the systemd unit of squid, it doesn't work. The
56+
proxy process still runs within the standard namespace (if I curl using the
57+
proxy, the IP is the one of the standard namespace)
58+
59+
Anyone got any ideas?
60+
61+
62+
--
63+
..
64+
/**\
65+
/****\
66+
/\****/\
67+
/ \**/ \
68+
/ \/ \
69+
/ /\ /\
70+
/ \ / \ / \
71+
/ \ / \/ \
72+
\ /\ /\ /
73+
\ / \ / \ /
74+
\/ \/ \/
75+
/\
76+
/ +\
77+
\+ /
78+
\/
79+
rdb.is
80+
Book a meeting with me:
81+
https://calendly.com/rdbisme
82+
-------------- next part --------------
83+
An HTML attachment was scrubbed...
84+
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20260104/6eba12cc/attachment.htm>
85+

‎squid-users/2026-January.txt.gz‎

1.16 KB
Binary file not shown.

‎squid-users/2026-January/027733.html‎

Lines changed: 132 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,132 @@
1+
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2+
<HTML>
3+
<HEAD>
4+
<TITLE> [squid-users] Running squid in a network namespace
5+
</TITLE>
6+
<LINK REL="Index" HREF="index.html" >
7+
<LINK REL="made" HREF="mailto:squid-users%40lists.squid-cache.org?Subject=Re%3A%20%5Bsquid-users%5D%20Running%20squid%20in%20a%20network%20namespace&In-Reply-To=%3CCACnYWRfDjcXkbFq6VvsWCDv87-Ju4-36cJRZG1MSXtYPHhz-jQ%40mail.gmail.com%3E">
8+
<META NAME="robots" CONTENT="index,nofollow">
9+
<style type="text/css">
10+
pre {
11+
white-space: pre-wrap; /* css-2.1, curent FF, Opera, Safari */
12+
}
13+
</style>
14+
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
15+
16+
17+
</HEAD>
18+
<BODY BGCOLOR="#ffffff">
19+
<H1>[squid-users] Running squid in a network namespace</H1>
20+
<B>Ruben Di Battista</B>
21+
<A HREF="mailto:squid-users%40lists.squid-cache.org?Subject=Re%3A%20%5Bsquid-users%5D%20Running%20squid%20in%20a%20network%20namespace&In-Reply-To=%3CCACnYWRfDjcXkbFq6VvsWCDv87-Ju4-36cJRZG1MSXtYPHhz-jQ%40mail.gmail.com%3E"
22+
TITLE="[squid-users] Running squid in a network namespace">rubendibattista at gmail.com
23+
</A><BR>
24+
<I>Sun Jan 4 01:35:40 UTC 2026</I>
25+
<P><UL>
26+
27+
28+
<LI> <B>Messages sorted by:</B>
29+
<a href="date.html#27733">[ date ]</a>
30+
<a href="thread.html#27733">[ thread ]</a>
31+
<a href="subject.html#27733">[ subject ]</a>
32+
<a href="author.html#27733">[ author ]</a>
33+
</LI>
34+
</UL>
35+
<HR>
36+
<!--beginarticle-->
37+
<PRE>Hello,
38+
39+
I have a network namespace which runs a Wireguard VPN (only).
40+
41+
``
42+
&#10095; ip l
43+
1: lo: &lt;LOOPBACK,UP,LOWER_UP&gt; mtu 65536 qdisc noqueue state UNKNOWN mode
44+
DEFAULT group default qlen 1000
45+
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
46+
3: wg0: &lt;POINTOPOINT,NOARP,UP,LOWER_UP&gt; mtu 1420 qdisc noqueue state
47+
UNKNOWN mode DEFAULT group default qlen 1000
48+
link/none`
49+
```
50+
51+
I'd like to run squid inside this network namespace. I normally do this
52+
using a systemd unit, for example for tinyproxy:
53+
54+
```
55+
&#10095; systemctl cat tinyproxy
56+
# /usr/lib/systemd/system/tinyproxy.service
57+
[Unit]
58+
Description=Tinyproxy Web Proxy Server
59+
After=network.target
60+
61+
[Service]
62+
Type=forking
63+
ExecStart=/usr/bin/tinyproxy -c /etc/tinyproxy/tinyproxy.conf
64+
ExecReload=/usr/bin/kill -USR1 $MAINPID
65+
PIDFile=/run/tinyproxy/tinyproxy.pid
66+
PrivateDevices=yes
67+
68+
[Install]
69+
WantedBy=multi-user.target
70+
71+
# /etc/systemd/system/tinyproxy.service.d/override.conf
72+
73+
[Service]
74+
NetworkNamespacePath=/run/netns/vpn
75+
BindReadOnlyPaths=/etc/netns/vpn/resolv.conf:/etc/resolv.conf:norbind
76+
77+
[Unit]
78+
After=vpn.service
79+
BindsTo=vpn.service
80+
```
81+
82+
83+
But if I do the same with the systemd unit of squid, it doesn't work. The
84+
proxy process still runs within the standard namespace (if I curl using the
85+
proxy, the IP is the one of the standard namespace)
86+
87+
Anyone got any ideas?
88+
89+
90+
--
91+
..
92+
/**\
93+
/****\
94+
/\****/\
95+
/ \**/ \
96+
/ \/ \
97+
/ /\ /\
98+
/ \ / \ / \
99+
/ \ / \/ \
100+
\ /\ /\ /
101+
\ / \ / \ /
102+
\/ \/ \/
103+
/\
104+
/ +\
105+
\+ /
106+
\/
107+
rdb.is
108+
Book a meeting with me:
109+
<A HREF="https://calendly.com/rdbisme">https://calendly.com/rdbisme</A>
110+
-------------- next part --------------
111+
An HTML attachment was scrubbed...
112+
URL: &lt;<A HREF="http://lists.squid-cache.org/pipermail/squid-users/attachments/20260104/6eba12cc/attachment.htm">http://lists.squid-cache.org/pipermail/squid-users/attachments/20260104/6eba12cc/attachment.htm</A>&gt;
113+
</PRE>
114+
115+
<!--endarticle-->
116+
<HR>
117+
<P><UL>
118+
<!--threads-->
119+
120+
121+
<LI> <B>Messages sorted by:</B>
122+
<a href="date.html#27733">[ date ]</a>
123+
<a href="thread.html#27733">[ thread ]</a>
124+
<a href="subject.html#27733">[ subject ]</a>
125+
<a href="author.html#27733">[ author ]</a>
126+
</LI>
127+
</UL>
128+
129+
<hr>
130+
<a href="https://lists.squid-cache.org/listinfo/squid-users">More information about the squid-users
131+
mailing list</a><br>
132+
</body></html>

‎squid-users/2026-January/author.html‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2+
<HTML>
3+
<HEAD>
4+
<title>The squid-users January 2026 Archive by author</title>
5+
<META NAME="robots" CONTENT="noindex,follow">
6+
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
7+
</HEAD>
8+
<BODY BGCOLOR="#ffffff">
9+
<a name="start"></A>
10+
<h1>January 2026 Archives by author</h1>
11+
<ul>
12+
<li> <b>Messages sorted by:</b>
13+
<a href="thread.html#start">[ thread ]</a>
14+
<a href="subject.html#start">[ subject ]</a>
15+
16+
<a href="date.html#start">[ date ]</a>
17+
18+
<li><b><a href="https://lists.squid-cache.org/listinfo/squid-users">More info on this list...
19+
</a></b></li>
20+
</ul>
21+
<p><b>Starting:</b> <i>Sun Jan 4 01:35:40 UTC 2026</i><br>
22+
<b>Ending:</b> <i>Sun Jan 4 01:35:40 UTC 2026</i><br>
23+
<b>Messages:</b> 1<p>
24+
<ul>
25+
26+
<LI><A HREF="027733.html">[squid-users] Running squid in a network namespace
27+
</A><A NAME="27733">&nbsp;</A>
28+
<I>Ruben Di Battista
29+
</I>
30+
31+
</ul>
32+
<p>
33+
<a name="end"><b>Last message date:</b></a>
34+
<i>Sun Jan 4 01:35:40 UTC 2026</i><br>
35+
<b>Archived on:</b> <i>Sun Jan 4 01:35:56 UTC 2026</i>
36+
<p>
37+
<ul>
38+
<li> <b>Messages sorted by:</b>
39+
<a href="thread.html#start">[ thread ]</a>
40+
<a href="subject.html#start">[ subject ]</a>
41+
42+
<a href="date.html#start">[ date ]</a>
43+
<li><b><a href="https://lists.squid-cache.org/listinfo/squid-users">More info on this list...
44+
</a></b></li>
45+
</ul>
46+
<p>
47+
<hr>
48+
<i>This archive was generated by
49+
Pipermail 0.09 (Mailman edition).</i>
50+
</BODY>
51+
</HTML>
52+

‎squid-users/2026-January/date.html‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2+
<HTML>
3+
<HEAD>
4+
<title>The squid-users January 2026 Archive by date</title>
5+
<META NAME="robots" CONTENT="noindex,follow">
6+
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
7+
</HEAD>
8+
<BODY BGCOLOR="#ffffff">
9+
<a name="start"></A>
10+
<h1>January 2026 Archives by date</h1>
11+
<ul>
12+
<li> <b>Messages sorted by:</b>
13+
<a href="thread.html#start">[ thread ]</a>
14+
<a href="subject.html#start">[ subject ]</a>
15+
<a href="author.html#start">[ author ]</a>
16+
17+
18+
<li><b><a href="https://lists.squid-cache.org/listinfo/squid-users">More info on this list...
19+
</a></b></li>
20+
</ul>
21+
<p><b>Starting:</b> <i>Sun Jan 4 01:35:40 UTC 2026</i><br>
22+
<b>Ending:</b> <i>Sun Jan 4 01:35:40 UTC 2026</i><br>
23+
<b>Messages:</b> 1<p>
24+
<ul>
25+
26+
<LI><A HREF="027733.html">[squid-users] Running squid in a network namespace
27+
</A><A NAME="27733">&nbsp;</A>
28+
<I>Ruben Di Battista
29+
</I>
30+
31+
</ul>
32+
<p>
33+
<a name="end"><b>Last message date:</b></a>
34+
<i>Sun Jan 4 01:35:40 UTC 2026</i><br>
35+
<b>Archived on:</b> <i>Sun Jan 4 01:35:56 UTC 2026</i>
36+
<p>
37+
<ul>
38+
<li> <b>Messages sorted by:</b>
39+
<a href="thread.html#start">[ thread ]</a>
40+
<a href="subject.html#start">[ subject ]</a>
41+
<a href="author.html#start">[ author ]</a>
42+
43+
<li><b><a href="https://lists.squid-cache.org/listinfo/squid-users">More info on this list...
44+
</a></b></li>
45+
</ul>
46+
<p>
47+
<hr>
48+
<i>This archive was generated by
49+
Pipermail 0.09 (Mailman edition).</i>
50+
</BODY>
51+
</HTML>
52+

‎squid-users/2026-January/index.html‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
thread.html

‎squid-users/2026-January/subject.html‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2+
<HTML>
3+
<HEAD>
4+
<title>The squid-users January 2026 Archive by subject</title>
5+
<META NAME="robots" CONTENT="noindex,follow">
6+
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
7+
</HEAD>
8+
<BODY BGCOLOR="#ffffff">
9+
<a name="start"></A>
10+
<h1>January 2026 Archives by subject</h1>
11+
<ul>
12+
<li> <b>Messages sorted by:</b>
13+
<a href="thread.html#start">[ thread ]</a>
14+
15+
<a href="author.html#start">[ author ]</a>
16+
<a href="date.html#start">[ date ]</a>
17+
18+
<li><b><a href="https://lists.squid-cache.org/listinfo/squid-users">More info on this list...
19+
</a></b></li>
20+
</ul>
21+
<p><b>Starting:</b> <i>Sun Jan 4 01:35:40 UTC 2026</i><br>
22+
<b>Ending:</b> <i>Sun Jan 4 01:35:40 UTC 2026</i><br>
23+
<b>Messages:</b> 1<p>
24+
<ul>
25+
26+
<LI><A HREF="027733.html">[squid-users] Running squid in a network namespace
27+
</A><A NAME="27733">&nbsp;</A>
28+
<I>Ruben Di Battista
29+
</I>
30+
31+
</ul>
32+
<p>
33+
<a name="end"><b>Last message date:</b></a>
34+
<i>Sun Jan 4 01:35:40 UTC 2026</i><br>
35+
<b>Archived on:</b> <i>Sun Jan 4 01:35:56 UTC 2026</i>
36+
<p>
37+
<ul>
38+
<li> <b>Messages sorted by:</b>
39+
<a href="thread.html#start">[ thread ]</a>
40+
41+
<a href="author.html#start">[ author ]</a>
42+
<a href="date.html#start">[ date ]</a>
43+
<li><b><a href="https://lists.squid-cache.org/listinfo/squid-users">More info on this list...
44+
</a></b></li>
45+
</ul>
46+
<p>
47+
<hr>
48+
<i>This archive was generated by
49+
Pipermail 0.09 (Mailman edition).</i>
50+
</BODY>
51+
</HTML>
52+

0 commit comments

Comments
 (0)