Re: [squid-users] TCP out of memory
On 01/27/2018 10:47 AM, Yuri wrote: > He's just disabled icap-based service without disabling icap itself. So > - yes - this is as expected. The above logic is flawed: Vieri told Squid to bypass (bypassable) ICAP errors, but Squid did not bypass an ICAP error. Whether that outcome is expected depends on whether that specific ICAP error was bypassable. Yes, I understand that c-icap did not successfully process the message after clamd went down, but that fact is not important here. What is important here is how c-icap relayed that problem to Squid. That part I do not know, so I cannot say whether Squid just could not bypass this particular ICAP problem (i.e., Squid behavior is expected) or there is a bug in Squid's bypass code. > bupass=1 permit squid to bypass > adaptation in case of overloading icap service. Yes, but service overload is _not_ the only problem that bypass=1 can bypass. The documentation for that option describes the option scope: > If set to 'on' or '1', the ICAP service is treated as > optional. If the service cannot be reached or malfunctions, > Squid will try to ignore any errors and process the message as > if the service was not enabled. No all ICAP errors can be > bypassed. If set to 0, the ICAP service is treated as > essential and all ICAP errors will result in an error page > returned to the HTTP client. > > Bypass is off by default: services are treated as essential. Alex. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] TCP out of memory
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 He's just disabled icap-based service without disabling icap itself. So - yes - this is as expected. Vieri, bupass=1 is different thing. This permit squid to bypass adaptation in case of overloading icap service. And irrelevant thing you done. 27.01.2018 23:41, Alex Rousskov пишет: > On 01/27/2018 10:33 AM, Vieri wrote: > >> I noticed that if I set bypass=1 in > squid.conf (regarding ICAP), and >> if I stop the local clamd service (not the c-icap service), then the >> clients see Squid's ERR_ICAP_FAILURE page. Is this expected? > > Difficult to say for sure without knowing what went wrong between Squid > and c-icap: Not all ICAP errors can be bypassed. Consider sharing a > (link to) compressed ALL,9 cache.log collected while reproducing the > problem using a single HTTP transaction through an otherwise idle Squid. > > Alex. > ___ > squid-users mailing list > squid-users@lists.squid-cache.org > http://lists.squid-cache.org/listinfo/squid-users - -- * * C++20 : Bug to the future * * -BEGIN PGP SIGNATURE- iQGzBAEBCAAdFiEEUAYDxOalHloZaGP7S+6Uoz43Q6cFAlpsuzEACgkQS+6Uoz43 Q6cogwv8D1lqLBtJeIMIbwgv/u6OBEtYAZbx7hAQpj4Hic8SBYsnHJdxUtHYchkC pDFcrxPyp0b/59U26ngg5pObOHT5tynWYgH2tGp0/raJgPddD2G+xKyztvpawuz8 c1zHvUmyYhwHM96T99eTsI0r4qUq+e91krhK+6JxvSHh0CM8NnwUGycOhKBqNRHE HGWOjXCLUf9QTw/C4QG2slpO5TJbVvKJjO+lnLyTxBZr+hFmORjbsAXMOsz83Txb k0u4XuipQOqu3CcfLE/rSZPUX/r5YRQiV9roZdfy/IjYOdsU0+SvnO37RZLr9Z26 hKuu0OaZKGYcKtzy20lQJanIDzUOv7sDvNfqM3tWGTRNnxRD/1S3s2eFyuSZSx7/ 0G4rbs/oj/Y7Ksa9mlGW02QNmjOmrUMB1iVwQu3IBWeef7WUQtgvFV+JuSGY8+q/ V605z627s6S8+fHAPzZyLGt/J0kMLWGbImOFUIIBBA+0g1yx41bUswo2feEivzzb CwRJXfhc =ZP4V -END PGP SIGNATURE- ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] TCP out of memory
On 01/27/2018 10:33 AM, Vieri wrote: > I noticed that if I set bypass=1 in squid.conf (regarding ICAP), and > if I stop the local clamd service (not the c-icap service), then the > clients see Squid's ERR_ICAP_FAILURE page. Is this expected? Difficult to say for sure without knowing what went wrong between Squid and c-icap: Not all ICAP errors can be bypassed. Consider sharing a (link to) compressed ALL,9 cache.log collected while reproducing the problem using a single HTTP transaction through an otherwise idle Squid. Alex. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] TCP out of memory
Hi, I just wanted to add some information to this topic, although I'm not sure if it's related. I noticed that if I set bypass=1 in squid.conf (regarding ICAP), and if I stop the local clamd service (not the c-icap service), then the clients see Squid's ERR_ICAP_FAILURE page. Is this expected? Vieri ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] a host can not access web browsing
On 26.01.18 15:54, Bladimir Almeida wrote: Hi, I'm a network administrator of my company, I've been dealing with a computer that can access all the services for days, except that I can not surf the Internet. The message the browser sends me is that the server is rejecting the connections, however the other domain pc access without any problem to the web, and reinstalled the pc 2 times and nothing, the only thing that this pc I have to install windows xp, because it works with a tool that requires that OS Greetings, please help me. How do you know it's a squid problem? Do you use squid in your network? Did you configure it manually, via WPAD or do you intercept connections to the world? What do the squid logs say about the machines' IP address? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. The early bird may get the worm, but the second mouse gets the cheese. ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users
