socks.config

The socks.config file specifies:

SOCKS servers that the proxy must use to access specific origin servers, and the order in which the proxy goes through the SOCKS server list.

Origin servers that Content Gateway accesses directly, without going through a SOCKS server.


	Note It is recommended that all SOCKS configuration be performed in the Content Gateway manager.


	Important After you modify this file, you must restart the proxy.

Traffic that does not match a manually configured rule is handled via a default rule. A default rule is constructed for each SOCKS server with the default option enabled in the Socks Servers table. Default rules are created automatically and displayed on the SOCKS Server page. Default rules are not written in the socks.config file. The destination IP address is "All."

Format

To specify SOCKS servers that the proxy must use to reach specific origin servers, add rules to the socks.config file in the following format:

dest_ip=<ipaddress> socksparent="<alias1>" [round_robin=<value>]

Here:

<ipaddress> is the origin server IP address or range of IP addresses separated by - or /.

<alias1> is the alias name of the SOCKS server named in the SOCKS Servers list.

<value> is either strict if you want Content Gateway to try the SOCKS servers one by one, or false if you do not want round-robin selection to occur.

To specify origin servers that you want Content Gateway to access directly, without going through the SOCKS servers, enter a rule in socks.config in the following format:

no_socks <ipaddress>

Here, <ipaddress> is a comma-separated list of the IP addresses or IP address ranges associated with the origin servers that you want Content Gateway to access directly. Do not specify the all networks broadcast address: 255.255.255.255.


	Note Each rule in socks.config can consist of a maximum of 400 characters. The order of the rules in the socks.config file is not significant.

Examples

The following example configures the proxy to send requests to the origin servers associated with the range of IP addresses 123.15.17.1 - 123.14.17.4 through the SOCKS server aliases "alias1" and "alias2." Because the optional specifier round_robin is set to strict, the proxy sends the first request to alias1, the second request to alias2, the third request to alias1, and so on.

dest_ip=123.14.15.1 - 123.14.17.4

socksparent="alias; alias2" round_robin=strict

The following example configures the proxy to access the origin server associated with the IP address 11.11.11.1 directly, without going through the SOCKS server:

no_socks 11.11.11.1

The following example configures Content Gateway to access the origin servers associated with the range of IP addresses 123.14.15.1 - 123.14.17.4 and the IP address 113.14.18.2 directly, without going through the SOCKS server:

no_socks 123.14.15.1 - 123.14.17.4, 113.14.18.2