<div dir="ltr">it doesnt look that way if you read the last bullet point<div><br></div><div><a href="http://www.crypt.gen.nz/papers/cisco_squid_wccp.html">http://www.crypt.gen.nz/papers/cisco_squid_wccp.html</a><br></div><div><br></div><div>it seems that the application might well have to be able to spoof the source address and therefore have some form of awarness<br><br>its also eluded to here</div><div><br></div><div><a href="https://networklessons.com/network-services/cisco-wccp-squid-transparent-proxy/">https://networklessons.com/network-services/cisco-wccp-squid-transparent-proxy/</a><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 22 June 2015 at 11:32, W.C.A. Wijngaards <span dir="ltr"><<a href="mailto:wouter@nlnetlabs.nl" target="_blank">wouter@nlnetlabs.nl</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA256<br>
<br>
Hi Yuri,<br>
<br>
On 09/06/15 12:12, Yuri Voinov wrote:<br>
> <a href="http://www.cisco.com/c/en/us/td/docs/app_ntwk_services/waas/acns/v55/c" rel="noreferrer" target="_blank">http://www.cisco.com/c/en/us/td/docs/app_ntwk_services/waas/acns/v55/c</a><br>
<span class="">onfiguration/local/guide/55ldg/wccpch.html#wp1353686<br>
><br>
><br>
><br>
> <a href="http://i.imgur.com/WSSL3kF.png" rel="noreferrer" target="_blank">http://i.imgur.com/WSSL3kF.png</a><br>
><br>
> Just FYI.<br>
><br>
> So, the question is same.<br>
<br>
</span>My guess is that the machine is offering DNS resolution in addition to<br>
the WCCP service.  And the DNS and WCCP do not really interact (apart<br>
from DNS lookups or using spare CPU cycles), so you are free to use<br>
any DNS resolver you want.<br>
<br>
Best regards,<br>
   Wouter<br>
<span class=""><br>
<br>
><br>
> Note: I've already used route map to intercept port 53 queries and<br>
> point it to Unbound instance. But WCCP has lower router CPU load<br>
> and more effective.<br>
><br>
> _______________________________________________ Unbound-users<br>
> mailing list <a href="mailto:Unbound-users@unbound.net">Unbound-users@unbound.net</a><br>
> <a href="http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users" rel="noreferrer" target="_blank">http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users</a><br>
<br>
</span>-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v2<br>
<br>
iQIcBAEBCAAGBQJVh+RUAAoJEJ9vHC1+BF+NhUEP/j1ChaHD7+Y09c5CZPu792pL<br>
5V2AauBl1t2ZV9eBn+6FOjCIqqfA/DSLgSCUElFdEkxDc4p/qhdavt8HOdmo/H9b<br>
0YQMYCtOtvSpdbDGQDMoTkmY9bB9b2cZXERNxtpIokDNvLta2RTW96jOWGuhRlyF<br>
YHSiO2um1ERe19w75wsayAny4WO5ch4A/c0kx+fGHf7eNqKdCmkf02iTAc4+y7mk<br>
mOMibpaBMZvtq7W+9EyOJ3MeZPsyZrQCM33JtmoRl+OSaJMWGYks2rS2osm/SIOo<br>
bZaMiZcnObJ759KqVvfvZxVW0F3eC+dfBdX/GFoYyZmgqMUCFxzf0RLhjvnqK7lK<br>
pacSaYACrtlzd7GZRnE/t/YrvdepER1n0HKlwuuO0QzZ4qahKCXsgnMBxUie+LJD<br>
x5MM+w4qI+jFXLYYEZWD71WRXn1i61xa5Lx1btsLPhfe/rbREXMPCp38we5Aa0AV<br>
FFwnfrHVpKtxmq5ogVcT3wxxzZshnpDDX78e0YTybPoBvNkTTRO3yAkk1PPJf9IR<br>
t06xfuxcw2SedWlllQTKtdQ06ilRFrRVw/jk6aOxH6TD+7+nnaFa4h2L2B+yUNUQ<br>
Ql54jXx7QYtXaz0LrmDuaXRwV2IAdrZioRnC5B2VFewckmopm1CcHbpHbJIAGJGi<br>
ZTJkXlaLBF7scCJt+5UO<br>
=wOs1<br>
-----END PGP SIGNATURE-----<br>
<div class="HOEnZb"><div class="h5">_______________________________________________<br>
Unbound-users mailing list<br>
<a href="mailto:Unbound-users@unbound.net">Unbound-users@unbound.net</a><br>
<a href="http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users" rel="noreferrer" target="_blank">http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users</a><br>
</div></div></blockquote></div><br></div>