[squid-users] Squid-cache.org won't redirect to www.squid-cache.org?
Hi, I accidentally access squid-cache.org and get 403 Forbidden error, and am wondering why NOT redirect to WWW.squid-cache.org automatically? I'm sorry if it's intention. ~Ned ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Squid-cache.org won't redirect to www.squid-cache.org?
Hi, The http://www.squid-cache.org/ domain web site is working fine. We have accessed the site a min ago. Regards, ViSolve Squid On 9/30/2014 1:47 PM, Neddy, NH. Nam wrote: Hi, I accidentally access squid-cache.org and get 403 Forbidden error, and am wondering why NOT redirect to WWW.squid-cache.org automatically? I'm sorry if it's intention. ~Ned ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Squid-cache.org won't redirect to www.squid-cache.org?
I had pointed this out few months back but I suppose it was not corrected or not considered necessary. Amm. On 09/30/2014 02:15 PM, Дмитрий Шиленко wrote: without www.* -- Forbidden You don't have permission to access / on this server. Visolve Squid писал 30.09.2014 11:42: Hi, The http://www.squid-cache.org/ domain web site is working fine. We have accessed the site a min ago. Regards, ViSolve Squid On 9/30/2014 1:47 PM, Neddy, NH. Nam wrote: Hi, I accidentally access squid-cache.org and get 403 Forbidden error, and am wondering why NOT redirect to WWW.squid-cache.org automatically? I'm sorry if it's intention. ~Ned ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Squid-cache.org won't redirect to www.squid-cache.org?
without www.* -- Forbidden You don't have permission to access / on this server. Some browsers (Chrome?) will help by prepending www on the front for you... if you type just squid-cache.org it will turn it into http://www.squid-cache.org and you won't see the problem. Maybe this only happens if you have previously visited www.squid-cache.org, or maybe it tests squid-cache.org first... not sure exactly. If you type http://squid-cache.org you will see what the OP means. James ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/30/2014 05:11 AM, Victor Sudakov wrote: Can you share the basic cache manager requests statistics and the up time for the service? (mgr:info) This would give us a basic idea of the load\requests needed to reproduce it. I am not Steve but in case you care to look at my statistics as well, I am attaching it. OK. The basic info states that the server is up for about 10+ hours. and passed in this period of time: 152054 request which is about 230-253 per minute. The cache is holding more then 20k objects and maximizing it's ram memory usage (less 0.6%). Considering that you are using 128MB for ram storage the service should be considered 128MB used as more then normal. In the log it states that the accounted memory: 403163 KB which is about 390MB in usage. 390 -128 = 262 so the only issue is about 250-260 MB which are being used and not for cache. the basic usage of squid is about 3MB if i'm not wrong but there are operational needs such as buffers and in transit stuff. So 255 MB to think about.. 500 FD which means about 300-350 connections doubles 64kb. then it's about 13-14 MB for in transit stuff. So there is about 241 MB which needs to be justified. These are the basics. Eliezer -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQEcBAEBAgAGBQJUKogaAAoJENxnfXtQ8ZQU/pUIAIh2Q1687fXSTsiUCO0jlnyO NOD7F250EcppFwrQ4GPzDvRiNWUhzJSVzncAzJWlgQbWmoCnsvwB0C7MUN6bSOBf ek0qmJi1m/xz1ePVFI1u1k/PfC4t2FTC8XM2zICSQKSkHIlV06EPNd5Km954bIYP C7kzSl9CHl34v3179S22rEt1hej4Q3FEVayvoATrrPdrmyWLE2lICJYFxqGEIPK4 ivzxdcpdVovR2AwCHeDqXrTB/wTrYaZz1TQWUZScCmPibd1oqGXd3gHefE1aOMwS ZsuBUZLfiTmaezBBeEqq8P3oWLIBh2mU1m4JogUbDixkrLpi4GaIFk+TIp9CTNw= =e8AJ -END PGP SIGNATURE- ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] ERROR: URL-rewrite
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hey Alejandro,
Can I ask where in the site have you taken this code from?
Using php as a helper is not such a good choice due to couple issues
it has with squid stdin\stdout emulation.
You'd better use perl\python\ruby\other then php unless you found a
solution to a bug that php developers consider a feature.
Also only squid 3.4 uses the OK rewrite-url=XYZ format and ERR
in squid 3.3 you use either a http://xyz; as it is or
302:http://xyz; for a redirection and a blank line for no change.
All The Bests,
Eliezer
On 09/29/2014 12:39 PM, Alejandro Martinez wrote:
the redirector code is this (code taken from squid site):
$temp = array(); stream_set_timeout(STDIN, 86400);
while ( $input = fgets(STDIN) ) { $temp = split(' ', $input); $url
= $temp[0]; if ( $url == http://www.google.com; ) { echo OK
rewrite-url=http://192.168.1.10/block.php \n; } else { echo ERR
\n; } }
Thanks
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
iQEcBAEBAgAGBQJUKpBVAAoJENxnfXtQ8ZQUqu8H/ifHq2l8BrrSb5JIo7xf4ijw
1jRbFt37ApmrEFMmaiZVErEvAyi8miHqjmlgeLLA+efXydCIISbBZHOsDdOima+3
gshG9gaceJ54zP0dGiPL1pCRioGY16R2JQh7nhWz/scSEVcmB1UQ4bHmrkpsJ9Y2
OHwf/cuSGbYXtgzHsavDmNYdUp+UpJ0KtoealP35UmqizRW5OSA4YqusEPwxG1oj
HRqHocPE9Lb0BMIkBjZDbWs9DMRYAvx6p5JJaCB0VpwpXBa8oIMB5Fke6AjoAwBn
5k9nWo2myvQ+raa1WHldJF7xaUbFNVB2VFDt3Rw48PEVP+YJKIjlAZWpXzuZcnI=
=XWQb
-END PGP SIGNATURE-
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Eliezer Croitoru wrote: Attaching two cachemgr reports: right after squid restart and several hours later (grown to 816M in SIZE). I am not very good at calculating what I do not know how to yet! What I do understand is that Cumulative allocated volume: 22.198 GB means that this is what was used ever by squid for this uptime. Since I am not such a good calculator and the data exists already lets lets try and see the next output of: mgr:mem mgr:info I have already restarted squid several times since I obtained the reports attached to the previous mail. The mgr:mem and mgr:info info reports don't have to be from the same process, do they? And is there a way to obtain mgr:info etc from the command line, not from a browser? and top -n 1 -b|egrep proxy|squid|PID Which should give a nice output of the squid process memory consumption. - -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQEcBAEBAgAGBQJUKqD+AAoJEA2k8lmbXsY0IP4H/2IjJUN4Gi7h0L58W3RvEthQ 8qkR7KoAKQHpeJ/BAQLehUM5W3M4DInJvxezfjrJIo6tS1UgzsoB9Gv012YcHU7J JwQi/8zofnw4kjLeXnEJrIh4yTl5u46zQQARG+iyDjd1oRr4AMtO8zu84+gz1oc8 18Dsyjt5g9HV2ErsCkmSmKpIIVo/sU/PBj3Wsa4g386FCBMB7UkzRP3TrnwqFbgc vrEZ3xKfZHm7AB16L7gURw64kp1Rs26rdcm4JVnkzlMrYziAZmWfZcQeeJILAFmM wLwOdQLj19OFpxS5wfo/L1yux3oLcBxLS15Rdw8w+RoYptWFPeSY/pfD5Er4Mzo= =Tjgd -END PGP SIGNATURE- ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
[squid-users] 301 Error in squid - followed by 302
When i use squid and get headers like, HTTP/1.1 301 Moved Permanently Location: http://www.hotmail.com/ squid ends up in a endless loop. ERR_TOO_MANY_REDIRECTS Some say to use u url_rewriter or location_rewrite, but how and where to read more about this. or is it that simple that squid can't handle this type of redirect? /Mr Cincinati ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] leaking memory in squid 3.4.8 and 3.4.7.
On 29.09.14 13:39, Eliezer Croitoru wrote: Hey Steve, Can you share the basic cache manager requests statistics and the up time for the service? (mgr:info) This is with 8 workers and was restarted this morning, about 6 hours ago. As you can see, it's using about 5GB at the moment - as mentioned, there is no caching enabled for this configuration so there doesn't seem much reason for it to grow so large. Squid Object Cache: Version 3.4.6 Build Info: Start Time: Tue, 30 Sep 2014 08:33:01 GMT Current Time: Tue, 30 Sep 2014 14:14:28 GMT Connection information for squid: Number of clients accessing cache: 2545 Number of HTTP requests received: 926815 Number of ICP messages received:0 Number of ICP messages sent:0 Number of queued ICP replies: 0 Number of HTCP messages received: 0 Number of HTCP messages sent: 0 Request failure ratio: 0.00 Average HTTP requests per minute since start: 2714.3 Average ICP messages per minute since start:0.0 Select loop called: 33693001 times, 5.219 ms avg Cache information for squid: Hits as % of all requests: 5min: 0.0%, 60min: 0.0% Hits as % of bytes sent:5min: 3.5%, 60min: 4.4% Memory hits as % of hit requests: 5min: 0.0%, 60min: 0.0% Disk hits as % of hit requests: 5min: 0.0%, 60min: 0.0% Storage Swap size: 0 KB Storage Swap capacity: 0.0% used, 0.0% free Storage Mem size: 2168 KB Storage Mem capacity:0.0% used, 0.0% free Mean Object Size: 0.00 KB Requests given to unlinkd: 0 Median Service Times (seconds) 5 min60 min: HTTP Requests (All): 0.06557 0.06988 Cache Misses: 0.06629 0.07171 Cache Hits:0.0 0.0 Near Hits: 0.0 0.0 Not-Modified Replies: 0.0 0.0 DNS Lookups: 0.00012 0.0 ICP Queries: 0.0 0.0 Resource usage for squid: UP Time:20487.255 seconds CPU Time: 3177.711 seconds CPU Usage: 15.51% CPU Usage, 5 minute avg:11.44% CPU Usage, 60 minute avg: 12.40% Maximum Resident Size: 19930960 KB Page faults with physical i/o: 6 Memory usage for squid via mallinfo(): Total space in arena: 5014812 KB Ordinary blocks: 5004965 KB 2620 blks Small blocks: 0 KB 0 blks Holding blocks: 82080 KB 48 blks Free Small blocks: 0 KB Free Ordinary blocks:9847 KB Total in use:9847 KB 0% Total free: 9847 KB 0% Total size:5096892 KB Memory accounted for: Total accounted: 447132 KB 9% memPool accounted: 447132 KB 9% memPool unaccounted: 4649760 KB 91% memPoolAlloc calls: 528851610 memPoolFree calls: 531832922 File descriptor usage for squid: Maximum number of file descriptors: 131072 Largest file desc currently in use:209 Number of file desc currently in use: 754 Files queued for open: 0 Available number of file descriptors: 130318 Reserved number of file descriptors: 800 Store Disk files open: 0 Internal Data Structures: 510 StoreEntries 510 StoreEntries with MemObjects 408 Hot Object Cache Items 0 on-disk objects For comparison, almost all of the http (but none of the https) requests that go through the proxy above are then sent through a second proxy which does do some caching, but no fancy stuff like ICAP or ssl bumping - the caching proxy has been running for 18 days and has a far smaller process size (again, 8 workers): Squid Object Cache: Version 3.4.6 Build Info: Start Time: Fri, 12 Sep 2014 08:48:50 GMT Current Time: Tue, 30 Sep 2014 14:18:35 GMT Connection information for squid: Number of clients accessing cache: 1 Number of HTTP requests received: 19496669 Number of ICP messages received:0 Number of ICP messages sent:0 Number of queued ICP replies: 0 Number of HTCP messages received: 0 Number of HTCP messages sent: 0 Request failure ratio: 0.00 Average HTTP requests per minute since start: 742.7 Average ICP messages per minute since start:0.0 Select loop called: 763795228 times, 2.062 ms avg Cache information for squid: Hits as % of all requests: 5min: 13.1%, 60min: 12.8% Hits as % of bytes sent:5min: 7.0%, 60min: 4.7% Memory hits as % of hit requests: 5min: 0.0%, 60min: 0.0% Disk hits as % of hit requests: 5min: 16.4%, 60min:
[squid-users] redirect all ports to squid
It's possible to redirect all ports to squid ? thru iptables ? For example port 25 smtp,143 imap, etc... Can squid handle that. In transparent mode. smime.p7s Description: S/MIME cryptographic signature ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] redirect all ports to squid
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Indeed using SSL-BUMP it's possible but(a bit but).. It will not be able to handle non http\https traffic just like that. It will require more then just squid setup and it might be a better idea to find a better solution for you rather then using squid. If you find one that can do it the right way please send me a link. Eliezer On 09/30/2014 07:41 PM, hadi wrote: It's possible to redirect all ports to squid ? thru iptables ? For example port 25 smtp,143 imap, etc... Can squid handle that. In transparent mode. -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQEcBAEBAgAGBQJUKuzFAAoJENxnfXtQ8ZQUVLAH/23Exs+zStTsI8ltn7LcZ0x6 RL1l46e68anl/hSGbeAU5FUDT3IcTmHzmnLyjQC/0VHegBHzzCn0a3lcFmFDX4xI sH9vw+LSewSfxuQ/VRWHPUBF87T1awJQ36vWN8wanzZkFPCjvKvHdwQQIc2+Mrlq 2ALoKtYh/cZqpCjTCRJJT6//xxuHNaOkN4cp0AUNMEk8bJ2gUljNyoV7AFySeG5G M9IqcX0BfJnazK0OxdzC18B8ENaLBcVihPdHw5JxDTx2yWsMLKFujBv9KqHbmEmF 9LvXb6pwBbD3tz6b2yrndwyLix/HnwIreHCb9YyxwiBJ3w7PW4whMbBJt/yFPTg= =MyrY -END PGP SIGNATURE- ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] redirect all ports to squid
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/30/2014 08:30 PM, Leonardo Rodrigues wrote: Other protocols, SMTP, IMAP, POP3, etc etc etc, cannot be handled by squid. They cannot be interpreted but can be handled with a none rule for ssl bump. Eliezer -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQEcBAEBAgAGBQJUKuz9AAoJENxnfXtQ8ZQUvEgH/i/rl/NFDwbYN+afuaaMYace rSunwCJDtJPZJ5XQg197c3peDuGILnep27lvCJCiUt9rhWlhfHZIqfD5D4vjJmHC ABRsuLFrtUE19kMOalEMo4Zlwna13ky5hIMSUrue5SJK7b6+xdVPNKqXMsb9a2Nm nWA6+IQg4zZQ3fcR6D0Jqk7VUxAPDXLLVMkNIV/YeE8sd/IX2st3+bpxel+sOegv A3AAgUt7blkBIf1FcxN5Tl56lTmz/2OLC1EoWj7HKRCX/zEc3/IavWI6yM9AVlCI yze0Nm0PTCoXezkee8dz/nSMfUj9ZKxo2nlJrlHs+oeeQ+piOz6nfiT6TTTOvp4= =0+Ix -END PGP SIGNATURE- ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
[squid-users] How to unblock a port
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Squid rejects connections made with https://sohnen-moe.com:2083/. I had thought that the ACL acl Safe_ports port 1025-65535 was sufficient. Obviously not. What should I change to allow connections with port 2083? - [ Excerpts from the conf: ] acl localnet src fc00::/7 acl localnet src fe80::/10 acl SSL_ports port 443 acl Safe_ports port 80 acl Safe_ports port 21 acl Safe_ports port 443 acl Safe_ports port 563 acl Safe_ports port 70 acl Safe_ports port 210 acl Safe_ports port 1025-65535 acl Safe_ports port 280 acl Safe_ports port 488 acl Safe_ports port 591 acl Safe_ports port 777 acl CONNECT method CONNECT acl localnet src 192.168.69.0/24 http_access allow manager managerAdmin http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow localnet http_access deny all - -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlQrL+YACgkQzTcr8Prq0ZPhzwCgtfqmpUuOKvfp1elqnaMsRwAs uj4AnjCfgbBYCE44UmdWfP/Lutudro8r =Dvjw -END PGP SIGNATURE- ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
