[squid-users] Out of memory problem in huge cache

2008-09-24 Thread Itzcak Pechtalt
Hi, I have Squid 2.6 running on RedHat Linux with 8 GB memory, and configured according to Squid wiki recomendations in http://wiki.squid-cache.org/SquidFaq/SquidMemory#head-09818ad4cb8a1dfea1f51688c41bdf4b79a69991 However, it crashs every couple of hours with FATAL: xmalloc: Unable to allocate

Re: [squid-users] running squid on VERY low-end devices

2008-09-24 Thread John Doe
i have written a small external helper in perl and it seems to do the trick. #!/usr/bin/microperl while () { ($second, $minute, $hour, $dayOfMonth, $month, $yearOffset, $dayOfWeek, $dayOfYear, $daylightSavings) = localtime();

[squid-users] Custom header based authentication module

2008-09-24 Thread Christoph Rabel
Hi! I am rather new to squid and I hope my question is fine here. We have a single sign on service in our company, which essentially sets a custom header after authentication. Now, we would like to use this header for squid authentication too. So, a request which has a valid ssoheader should

[squid-users] Object becomes STALE: refresh_pattern min and max

2008-09-24 Thread BUI18
Hi - I have squid box with tons of disk for the cache_dir (hundreds of GB). I use wget to perform some pre-fetching of large video files. I've set the min and max age to 5 days and 7 days (in minutes). And although I have plenty of disk space available, I still receive TCP_REFRESH_MISS for

[squid-users] How to Cache aspx Pages?

2008-09-24 Thread BUI18
Hi - I need to cache aspx pages. I have read through the squid faq for caching dynamic content and have tried the following configuration, however, it does not seem to cache aspx pages with or without query strings. A sample link may look like this (this is not a working link) --

Re: [squid-users] Object becomes STALE: refresh_pattern min and max

2008-09-24 Thread Itzcak Pechtalt
On Wed, Sep 24, 2008 at 1:39 PM, BUI18 [EMAIL PROTECTED] wrote: Hi - I have squid box with tons of disk for the cache_dir (hundreds of GB). I use wget to perform some pre-fetching of large video files. I've set the min and max age to 5 days and 7 days (in minutes). And although I have

Re: [squid-users] Object becomes STALE: refresh_pattern min and max

2008-09-24 Thread Michael Alger
On Wed, Sep 24, 2008 at 03:39:16AM -0700, BUI18 wrote: I have squid box with tons of disk for the cache_dir (hundreds of GB). I use wget to perform some pre-fetching of large video files. I've set the min and max age to 5 days and 7 days (in minutes). And although I have plenty of disk

[squid-users] help with page faults

2008-09-24 Thread Nick Duda
What is the best way for me to figure out why every week Squid seems to spike on page faults causing everyone that is using the proxy server to experience slow browsing habits until the squid process is re-cycled. I run SNMP monitoring against squid and use the cacti squid templates so I know

Re: [squid-users] Object becomes STALE: refresh_pattern min and max

2008-09-24 Thread BUI18
Hi - Thanks for responding. URL for video file never changes. I did some more checking in the Squid logs and this is what I noticed: File Properties of video file (Pacific Daylight Time (PDT)) Created On: Monday, September 22, 2008, 8:59:35 AM Modified On: Monday, September 22, 2008, 8:59:35

Re: [squid-users] Object becomes STALE: refresh_pattern min and max

2008-09-24 Thread BUI18
Hi - I went through your same thinking as you described below. I checked the Expires header from the server and we do not set one. I checked via Fiddler web debug tool. I also verified with the dev guys here regarding no Expires header. I have set the min and max via refresh_pattern because

Re: [squid-users] Out of memory problem in huge cache

2008-09-24 Thread Amos Jeffries
Itzcak Pechtalt wrote: Hi, I have Squid 2.6 running on RedHat Linux with 8 GB memory, and configured according to Squid wiki recomendations in http://wiki.squid-cache.org/SquidFaq/SquidMemory#head-09818ad4cb8a1dfea1f51688c41bdf4b79a69991 However, it crashs every couple of hours with FATAL:

Re: [squid-users] Custom header based authentication module

2008-09-24 Thread Amos Jeffries
Christoph Rabel wrote: Hi! I am rather new to squid and I hope my question is fine here. We have a single sign on service in our company, which essentially sets a custom header after authentication. Now, we would like to use this header for squid authentication too. So, a request which has a

Re: [squid-users] How to Cache aspx Pages?

2008-09-24 Thread Amos Jeffries
BUI18 wrote: Hi - I need to cache aspx pages. I have read through the squid faq for caching dynamic content and have tried the following configuration, however, it does not seem to cache aspx pages with or without query strings. A sample link may look like this (this is not a working link)

Re: [squid-users] help with page faults

2008-09-24 Thread Amos Jeffries
Nick Duda wrote: What is the best way for me to figure out why every week Squid seems to spike on page faults causing everyone that is using the proxy server to experience slow browsing habits until the squid process is re-cycled. I run SNMP monitoring against squid and use the cacti squid

Re: [squid-users] Object becomes STALE: refresh_pattern min and max

2008-09-24 Thread Amos Jeffries
BUI18 wrote: Hi - Thanks for responding. URL for video file never changes. What release of Squid? Did you check the Expires header properly from the transfer rather than from the (apparently untrustworthy) info in the store log? I did some more checking in the Squid logs and this is

RE: [squid-users] Tproxy iptables rules issue

2008-09-24 Thread Ritter, Nicholas
As Amos said, we are close to a solution, I am in the middle of load testing it to make sure things are ok. Loading testing it has been delayed a little more than planned because I am having that same annoying GRE tunnel problem I noted back in May. It appears that the GRE tunnel setup on the

Re: [squid-users] Custom header based authentication module

2008-09-24 Thread Christoph Rabel
Amos Jeffries wrote: Christoph Rabel wrote: To condense my question: Is it possible to specify which header information is given to the auth module? And to specify that no 407 but a redirect is sent? Not for auth modules. They only use the regular Proxy-Authentication: headers. Maybe

[squid-users] Squid-Authentification

2008-09-24 Thread pooner
Hi, i try to authentificate squid users against a hsql-db. I'm using a php-script which i have found. It seems to be okay, squid was working with it, authentification is ok. Now i have another script which connects to the database and gives a result-value (0=ok, 1 =err). If I modify the

[squid-users] FTP Read Only

2008-09-24 Thread Jonathan Chretien
Hello All. OS: Fedora 8 Squid: squid-2.6.STABLE19-1.fc8 I have a strange problem this morning. I was able via Windows Explorer or Internet Explorer to access our company FTP site by using ftp://username:[EMAIL PROTECTED] or ftp://[EMAIL PROTECTED] This morning, if I try to access this FTP

Re: [squid-users] Object becomes STALE: refresh_pattern min and max

2008-09-24 Thread Michael Alger
On Wed, Sep 24, 2008 at 05:29:52AM -0700, BUI18 wrote: I went through your same thinking as you described below. I checked the Expires header from the server and we do not set one. I checked via Fiddler web debug tool. I also verified with the dev guys here regarding no Expires header. I

[squid-users] round robin question

2008-09-24 Thread jeff donovan
greetings How could I go about load balancing two or more transparent proxy squid servers ? No caching invloved. This is strictly for access. i thought about dns round robin, but that didn't make sense since i am forwarding all connections to a single interface. any insight would be

Re: [squid-users] round robin question

2008-09-24 Thread Kinkie
On Wed, Sep 24, 2008 at 5:16 PM, jeff donovan [EMAIL PROTECTED] wrote: greetings How could I go about load balancing two or more transparent proxy squid servers ? No caching invloved. This is strictly for access. i thought about dns round robin, but that didn't make sense since i am

Re: [squid-users] running squid on VERY low-end devices

2008-09-24 Thread Leonardo Rodrigues Magalhães
John Doe escreveu: anyway, i would love to see something similar in C that could be compiled and run with less memory than perl requires unfortunelly i cant code even a 'hello world' in C !!! But i'll try that . shouldnt be too difficult. Here's a basic C example:

[squid-users] latency issues squid2.7 WCCP

2008-09-24 Thread Ryan Goddard
Squid 2.7.STABLE1-20080528 on Debian Linux 2.6.19.7 running on quad dual-core 2.6mhz Opterons with 32 gig RAM; 8x140GB disk partitions using WCCP L2 redirects transparently from a Cisco 4948 GigE switch Server has one GigE NIC for the incoming redirects and two GigE NICs for outbound http

Re: [squid-users] Out of memory problem in huge cache

2008-09-24 Thread Itzcak Pechtalt
My Squid isn't build with 64-bit support. My RedHat Linux support up to 4GB memory per process. I tested it on a short test program which tries to allocate memory until he fails and only after 4GB allocation I fail to continue allocation. thanks Itzcak On Wed, Sep 24, 2008 at 3:56 PM, Amos

Re: [squid-users] How to limit duration of SSL connections

2008-09-24 Thread Jason Voorhees
Right now I don't have access to squid's logs but I remember that there wasn't enough usable information. I'd block SSL connections to numeric IP but there are some websites (including Hotmail among others) that clients connect under the same pattern. I'll post again to the list when I have

Re: [squid-users] running squid on VERY low-end devices

2008-09-24 Thread John Doe
Nice John, thanks very much for that !! Got it compiled and running, no problem. Anyway, i found interesting that squid is reporting a high average service time for this do-almost-nothing external ACL (from cachemgr.cgi, external acl stats): any hint on that ??? Did you compare with the perl

[squid-users] Video players not proxy aware

2008-09-24 Thread Steven Engebretson
Good morning, I am having an issue with squid 2.6 stable 19. Many video players on the Mac are not proxy aware, and fail to show a login screen for the new video window. Is there a simple way to resolve this from squid, rather then putting an an acl in for each domain, with an allow? We do

Re: [squid-users] Custom header based authentication module

2008-09-24 Thread Amos Jeffries
Christoph Rabel wrote: Amos Jeffries wrote: Christoph Rabel wrote: To condense my question: Is it possible to specify which header information is given to the auth module? And to specify that no 407 but a redirect is sent? Not for auth modules. They only use the regular Proxy-Authentication:

[squid-users] HDD Configuration Recommendations

2008-09-24 Thread Chris Nighswonger
Hi all, I'm preparing to move my squid to new hardware. I have two 500GB SATA HDD's in the new box which will be used to store squid's cache on. Any suggestions on the best raid config for these guys so as to maximize performance? Regards, Chris -- Christopher Nighswonger Faculty Member

Re: [squid-users] FTP Read Only

2008-09-24 Thread Amos Jeffries
Jonathan Chretien wrote: Hello All. OS: Fedora 8 Squid: squid-2.6.STABLE19-1.fc8 I have a strange problem this morning. I was able via Windows Explorer or Internet Explorer to access our company FTP site by using ftp://username:[EMAIL PROTECTED] or ftp://[EMAIL PROTECTED] This morning, if I

RE: [squid-users] Insert Header or Footer into retrieved pages?

2008-09-24 Thread Rodre Ghorashi-Zadeh
Hello, ICAP solution seems good, however there are no open source/GPL icap servers out there, except for the the one at http://icap-server.sourceforge.net , which hasn't been maintained since 2002 and is based on Python 2.1. I downloaded and installed/set it up and although I could put

RE: [squid-users] HDD Configuration Recommendations

2008-09-24 Thread Jorge Bastos
I advice a RAID5, wheter it's soft or hardware raid. -Original Message- From: Chris Nighswonger [mailto:[EMAIL PROTECTED] Sent: quarta-feira, 24 de Setembro de 2008 18:18 To: Squid Users Subject: [squid-users] HDD Configuration Recommendations Hi all, I'm preparing to move my

RE: [squid-users] HDD Configuration Recommendations

2008-09-24 Thread Jorge Bastos
Forgot to say, you'll need one more disk -Original Message- From: Chris Nighswonger [mailto:[EMAIL PROTECTED] Sent: quarta-feira, 24 de Setembro de 2008 18:18 To: Squid Users Subject: [squid-users] HDD Configuration Recommendations Hi all, I'm preparing to move my squid to new

RE: [squid-users] Insert Header or Footer into retrieved pages?

2008-09-24 Thread Alex Rousskov
On Wed, 2008-09-24 at 10:26 -0700, Rodre Ghorashi-Zadeh wrote: Does anyone know where I can get the reference icap server mentioned here: http://wiki.squid-cache.org/Features/ICAP with a 404 URL of http://www.icap-forum.org/spec/icap-server10.tar.gz ? Tried the Internet Archive? If you cannot

Re: [squid-users] Object becomes STALE: refresh_pattern min and max

2008-09-24 Thread BUI18
My Squid Version is 2.6/STABLE14 Here's my refresh_pattern from squid.conf #Suggested default: refresh_pattern ^ftp: 144020% 10080 refresh_pattern ^gopher:14400% 1440 #The following line will ignore a client no-cache header #refresh_pattern -i \.vid$ 0

Re: [squid-users] Insert Header or Footer into retrieved pages?

2008-09-24 Thread Philipp Rusch - New Vision-IT
Alex Rousskov schrieb: On Wed, 2008-09-24 at 10:26 -0700, Rodre Ghorashi-Zadeh wrote: Does anyone know where I can get the reference icap server mentioned here: http://wiki.squid-cache.org/Features/ICAP with a 404 URL of http://www.icap-forum.org/spec/icap-server10.tar.gz ? Tried the

RE: [squid-users] Insert Header or Footer into retrieved pages?

2008-09-24 Thread Rodre Ghorashi-Zadeh
You can also wait for eCAP work to be completed. I am supposed to commit the missing bits by September 29. HTH, Alex. Hello Rodre, http://www.icap-forum.org/documents/other/icap-server10.zip they changed the URL ... Hello Thanks for the responses guys. I will experiment

Re: [squid-users] Insert Header or Footer into retrieved pages?

2008-09-24 Thread Amos Jeffries
Alex Rousskov schrieb: On Wed, 2008-09-24 at 10:26 -0700, Rodre Ghorashi-Zadeh wrote: Does anyone know where I can get the reference icap server mentioned here: http://wiki.squid-cache.org/Features/ICAP with a 404 URL of http://www.icap-forum.org/spec/icap-server10.tar.gz ? Tried the