rustysquid 1.2.0

High-performance HTTP caching proxy optimized for embedded systems and routers
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62

#!/bin/sh /etc/rc.common
# RustySquid init script for OpenWrt
# Place this file in /etc/init.d/rustysquid on the router

START=95
STOP=10

USE_PROCD=1
PROG=/tmp/rustysquid
PIDFILE=/var/run/rustysquid.pid

start_service() {
    procd_open_instance
    procd_set_param command $PROG
    procd_set_param respawn
    procd_set_param pidfile $PIDFILE
    procd_set_param stdout 1
    procd_set_param stderr 1
    procd_set_param env RUST_LOG=rustysquid=info
    procd_close_instance
    
    # Wait for service to start
    sleep 2
    
    # Configure transparent proxy rules
    setup_firewall
}

stop_service() {
    # Remove transparent proxy rules
    cleanup_firewall
}

setup_firewall() {
    # Remove any existing rules first
    iptables -t nat -D PREROUTING -i br-lan -p tcp --dport 80 -j REDIRECT --to-port 3128 2>/dev/null || true
    iptables -t nat -D PREROUTING -i br-lan -p tcp --dport 443 -j REDIRECT --to-port 3128 2>/dev/null || true
    
    # Add transparent proxy rules for HTTP/HTTPS traffic from LAN
    iptables -t nat -A PREROUTING -i br-lan -p tcp --dport 80 -j REDIRECT --to-port 3128
    iptables -t nat -A PREROUTING -i br-lan -p tcp --dport 443 -j REDIRECT --to-port 3128
    
    # Allow traffic to the proxy port
    iptables -D INPUT -p tcp --dport 3128 -j ACCEPT 2>/dev/null || true
    iptables -A INPUT -p tcp --dport 3128 -j ACCEPT
    
    logger -t rustysquid "Transparent proxy rules configured"
}

cleanup_firewall() {
    # Remove transparent proxy rules
    iptables -t nat -D PREROUTING -i br-lan -p tcp --dport 80 -j REDIRECT --to-port 3128 2>/dev/null || true
    iptables -t nat -D PREROUTING -i br-lan -p tcp --dport 443 -j REDIRECT --to-port 3128 2>/dev/null || true
    iptables -D INPUT -p tcp --dport 3128 -j ACCEPT 2>/dev/null || true
    
    logger -t rustysquid "Transparent proxy rules removed"
}

reload_service() {
    cleanup_firewall
    setup_firewall
}