Proxy for vrf transparent traffic

[Abhisheka15]

I need help for a Specific customer project. Currently we have MPLS with DC Singapore for the Intranet traffic & proxy >firewall for internet local Breakout.

now for a specific team 10 users we need to build separate network peering using VRF & local break out proxy >firewall.

we don’t want to spend money on proxy box so we proposed Squid proxy (if someone can recommend any easy solution for transparent proxy & its deployment? ). This proxy will be in global routing table & carry the internet traffic of vrf towards existing firewall. We cannot use existing proxy (as company standard).

[amojarra]

Hi @Abhisheka15 

in situations like this, I strongly advise umbrella. 

you can check this link for more information: Learn how to evaluate a cloud security provider - Cisco Umbrella

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++   If you find this answer helpful, please rate it as such  ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++

[Abhisheka15]

Umbrella does not suits our environment require investment. Squid seems free or minimum configuration solution.

[Flavio Miranda]

Hi

 Another open source solution is Dansguardian. I used in the past but not sure how it is now a days.

"This proxy will be in global routing table & carry the internet traffic of vrf towards existing firewall. "

One point that calls my attention it this statement here. It would be interesting if you could draw a simple diagram on what you are planning to do so that people here can comment.  The way you put it, seems to me that the Proxy will take data from the VRF and transfer to the Global Routing Table ?  The firewall will have an interface on this brand new VRF you are putting this 10 users on ?

Are you using routing leak?  Does this 10 users will have communication with Singapure?

[M02@rt37]

Hello @Abhisheka15,

I suggest HAProxy that excels at handling high volumes of traffic and distributing requests to backend servers.