Re: [squid-users] How to filter response in squid-3.1.x?

2011-10-20 Thread Kaiwang Chen
2011/10/20 Amos Jeffries squ...@treenet.co.nz: On Thu, 20 Oct 2011 00:39:32 +0800, Kaiwang Chen wrote: 2011/10/19 Amos Jeffries: On Wed, 19 Oct 2011 05:15:22 +0800, Kaiwang Chen wrote: snip To only change the HTTP headers, there are some tricks you can do with the must-revalidate and/or

Re: [squid-users] Change cache_dir from ufs to aufs

2011-10-20 Thread Emmanuel Lacour
On Thu, Oct 20, 2011 at 11:06:42AM +1300, Amos Jeffries wrote: The Squid in-memory index indicates a file exists, but the disk does not have it. and in this case, what happens for the end user, squid fetch the file again from remote or issue an error?

Re: [squid-users] How to filter response in squid-3.1.x?

2011-10-20 Thread Amos Jeffries
On 20/10/11 20:11, Kaiwang Chen wrote: 2011/10/20 Amos Jeffriessqu...@treenet.co.nz: On Thu, 20 Oct 2011 00:39:32 +0800, Kaiwang Chen wrote: 2011/10/19 Amos Jeffries: On Wed, 19 Oct 2011 05:15:22 +0800, Kaiwang Chen wrote: snip To only change the HTTP headers, there are some tricks you

Re: [squid-users] Change cache_dir from ufs to aufs

2011-10-20 Thread Amos Jeffries
On 20/10/11 20:37, Emmanuel Lacour wrote: On Thu, Oct 20, 2011 at 11:06:42AM +1300, Amos Jeffries wrote: The Squid in-memory index indicates a file exists, but the disk does not have it. and in this case, what happens for the end user, squid fetch the file again from remote or issue an

Re: [squid-users] Change cache_dir from ufs to aufs

2011-10-20 Thread Emmanuel Lacour
On Thu, Oct 20, 2011 at 09:13:30PM +1300, Amos Jeffries wrote: I'm not entirely certain about the store background. I believe it fetched from remote. I hope ;)

Re: [squid-users] Squid Clustering

2011-10-20 Thread Matus UHLAR - fantomas
On 07.10.11 20:30, Momen, Mazdak wrote: How can I create a squid cluster that would ideally share log files and replicate config changes to each other? We have a load balancer that can handle sending requests to one or the other server but I would prefer to not have to have someone log into

Re: [squid-users] Non-transparent port works, transparent doesn't

2011-10-20 Thread Amos Jeffries
On 19/10/11 23:10, zozo zozo wrote: I.e. I can't put my transparent proxy to internet, I need it to be in same IP space as my network interface? You can put it anywhere you like. There are only two requirements: 1) NAT happens on the same OS. So Squid can have direct access to the

Re: [squid-users] Transparent / Standard mode comparative

2011-10-20 Thread Matus UHLAR - fantomas
Le mercredi 12 octobre 2011 à 09:46 +0530, nipun_mlist Assam a écrit : Squid in tproxy mode, doesn't work with HTTPS most probably. this applies in intercepting (previously incorrectly called transparent) mode too, no matter if you use tproxy or not. Secondly, it doesn't spoof the client

Re: [squid-users] Re: Recurrent crashes and warnings: Your cache is running out of filedescriptors

2011-10-20 Thread Matus UHLAR - fantomas
2011/10/11 11:18:39| /var/cache/swap.state.new: (28) No space left on device FATAL: storeDirOpenTmpSwapLog: Failed to open swap log. @Fred B: Could you post the result of df -h /var should be df -h /var/cache/swap.state On 11.10.11 15:53, Leonardo wrote: FilesystemSize Used

Re: [squid-users] Wrong country recognition on websites after Squid configured as transparent proxy

2011-10-20 Thread Matus UHLAR - fantomas
On 16.09.11 11:33, Piotr Pawlowski wrote: Thanks for the URL. Below you can find headers NameValue hostlocalhost:8177 I really wonder why does the script on server behing a proxy. But that's problem of the page, not yours duplicates deleted. - with

Re: [squid-users] Question about configuration directive http_port

2011-10-20 Thread Matus UHLAR - fantomas
On 17.10.11 11:25, - Mikael - wrote: Date: Mon, 17 Oct 2011 11:25:03 -0700 From: - Mikael - funactivit...@gmail.com To: squid-users@squid-cache.org Subject: Re: [squid-users] Question about configuration directive http_port Please post new mail with proper subject, if you are asking a new

[squid-users] Reverse HTTPs proxy caching the content

2011-10-20 Thread Brueck Timm Wolfgang
Hello all, my intention was to use squid as an https-cache meaning that it should split https-sessions to be able to read and to cache the web content. (client -https1- proxy -https2- web server) Therefore, I configured squid as a reverse https-proxy. The client receives the web-content from

RE: [squid-users] Squid isn't using persistent server-side connections upon POST/PUT/DELETE

2011-10-20 Thread Franz Kafka
Hello, thanks for your help. We followed your advice and built the newest Squid version (squid/3.2.0.13-20111019-r11381) - same issues. The option server_persistent_connections is ON. Also the FIN definitely stems from the Squid. The problem still is: Squid closes its server-side

Re: [squid-users] handing off usernames to parent proxies

2011-10-20 Thread E.S. Rosenberg
2011/10/19 Luis Daniel Lucio Quiroz luis.daniel.lu...@gmail.com: 2011/10/18 E.S. Rosenberg esr+sq...@g.jct.ac.il: Hi all, We currently have a setup with proxies that use NTLM authentication (we hope to upgrade to kerberos in the future) and based on the username send the user to one of

Re: [squid-users] handing off usernames to parent proxies

2011-10-20 Thread E.S. Rosenberg
2011/10/19 Amos Jeffries squ...@treenet.co.nz: On Tue, 18 Oct 2011 13:53:18 +0200, E.S. Rosenberg wrote: Hi all, We currently have a setup with proxies that use NTLM authentication (we hope to upgrade to kerberos in the future) and based on the username send the user to one of several parent

Re: [squid-users] Facebook page very slow to respond

2011-10-20 Thread Ed W
On 20/10/2011 06:11, Wilson Hernandez wrote: To tell you the truth I don't know whats the deal: bandwithd or squid but, is really getting in my nerve loosing users left and right every week I need to come up with a solution before my whole network goes down the drain You need to get

Re: [squid-users] How to filter response in squid-3.1.x?

2011-10-20 Thread Ed W
On 20/10/2011 09:11, Amos Jeffries wrote: On 20/10/11 20:11, Kaiwang Chen wrote: So Squid without the adapter will cache one copy of responses in only one encoding. Yes. Will Vary:Accept-Encoding request header enable multiply copies? No. It tells Squid there are multiple variants with

Re: [squid-users] handing off usernames to parent proxies

2011-10-20 Thread Ed W
On 20/10/2011 18:11, E.S. Rosenberg wrote: On the whole I just need the backend to know the username, or what 'browsing plan' the session is using, sometimes plans are also determined based on src IP (ie. certain stations aren't allowed to browse no matter who's logged in, or are supposed to

Re: [squid-users] handing off usernames to parent proxies

2011-10-20 Thread E.S. Rosenberg
2011/10/20 Ed W li...@wildgooses.com: On 20/10/2011 18:11, E.S. Rosenberg wrote: On the whole I just need the backend to know the username, or what 'browsing plan' the session is using, sometimes plans are also determined based on src IP (ie. certain stations aren't allowed to browse no

Re: [squid-users] How to filter response in squid-3.1.x?

2011-10-20 Thread Kaiwang Chen
2011/10/20 Amos Jeffries squ...@treenet.co.nz: On 20/10/11 20:11, Kaiwang Chen wrote: 2011/10/20 Amos Jeffriessqu...@treenet.co.nz: On Thu, 20 Oct 2011 00:39:32 +0800, Kaiwang Chen wrote: 2011/10/19 Amos Jeffries: On Wed, 19 Oct 2011 05:15:22 +0800, Kaiwang Chen wrote: snip To only

Re: [squid-users] How to filter response in squid-3.1.x?

2011-10-20 Thread Amos Jeffries
On 21/10/11 08:44, Kaiwang Chen wrote: 2011/10/20 Amos Jeffries: On 20/10/11 20:11, Kaiwang Chen wrote: 2011/10/20 Amos Jeffries: On Thu, 20 Oct 2011 00:39:32 +0800, Kaiwang Chen wrote: 2011/10/19 Amos Jeffries: On Wed, 19 Oct 2011 05:15:22 +0800, Kaiwang Chen wrote: snip while

[squid-users] Q: squid in the middle SSL-bump configuration

2011-10-20 Thread John H. Nyhuis
Hi, I'd appreciate some squid.conf assistance. I'm trying to to build a squid in the middle server that will bump a client's http request to https. This is not exposed to the real world; it's to help developers who need to capture and decrypt ssl encrypted web transactions in a dev

Re: [squid-users] Q: squid in the middle SSL-bump configuration

2011-10-20 Thread Will Roberts
On 10/20/2011 04:58 PM, John H. Nyhuis wrote: Hi, I'd appreciate some squid.conf assistance. I'm trying to to build a squid in the middle server that will bump a client's http request to https. This is not exposed to the real world; it's to help developers who need to capture and decrypt