Re: [squid-users] 6.2: Unsupported or unexpected from-helper annotation with a name reserved for Squid use
That's a good question; not right now, unless you're willing to patch the squid sources. In that case, just remove the debugs() statement in lines 200-203 of file src/helper/Reply.cc . On Mon, Aug 28, 2023 at 9:52 PM David Touzeau wrote: > Thanks You > > As these changes affect many things for us ( use tags for statistics / > elasticsearchs) and it seems, this behavior is just a warning (seems squid > still work as expected like note acls) > > Is there a way to remove these warnings because they increase I/O and > cache.log dramatically. > > regards > > On 28/08/2023 22:46, Francesco Chemolli wrote: > > Hi David, >you should use > itchart_=PASS > > The trailing underscore signals Squid that this is a custom header. > > On Mon, Aug 28, 2023 at 3:54 PM David Touzeau > wrote: > >> >> Hi >> >> Since 6.2 ( aka migrating from 5.8 ) >> >> Squid claim about token sent by external_acl_helper >> >> the external acl helper send >> "OK itchart=PASS user=dtouzeau category=143 category-name=Trackers >> clog=cinfo:143-Trackers;" >> >> squid claim >> 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper >> annotation with a name reserved for Squid use: itchart=PASS >> advice: If this is a custom annotation, rename it to add a trailing >> underscore: itchart_ >> current master transaction: master278 >> 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper >> annotation with a name reserved for Squid use: category=143 >> advice: If this is a custom annotation, rename it to add a trailing >> underscore: category_ >> current master transaction: master278 >> 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper >> annotation with a name reserved for Squid use: category-name=Trackers >> advice: If this is a custom annotation, rename it to add a trailing >> underscore: category-name_ >> current master transaction: master278 >> 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper >> annotation with a name reserved for Squid use: clog=cinfo:143-Trackers; >> advice: If this is a custom annotation, rename it to add a trailing >> underscore: clog_ >> current master transaction: master278 >> 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper >> annotation with a name reserved for Squid use: itchart=PASS >> advice: If this is a custom annotation, rename it to add a trailing >> underscore: itchart_ >> current master transaction: master278 >> >> Did the helper instead of "itchart=PASS" must send >> >> "itchart_=PASS" >> or >> "itchart_PASS" >> >> ? >> >> >> >> >> -- >> David Touzeau - Artica Tech France >> Development team, level 3 support >> -- >> P: +33 6 58 44 69 46 >> www: https://wiki.articatech.com >> www: http://articatech.net >> >> ___ >> squid-users mailing list >> squid-users@lists.squid-cache.org >> https://lists.squid-cache.org/listinfo/squid-users >> > > > -- > Francesco > > > -- > David Touzeau - Artica Tech France > Development team, level 3 support > -- > P: +33 6 58 44 69 46 > www: https://wiki.articatech.com > www: http://articatech.net > > -- Francesco ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] 6.2: Unsupported or unexpected from-helper annotation with a name reserved for Squid use
Thanks You As these changes affect many things for us ( use tags for statistics / elasticsearchs) and it seems, this behavior is just a warning (seems squid still work as expected like note acls) Is there a way to remove these warnings because they increase I/O and cache.log dramatically. regards On 28/08/2023 22:46, Francesco Chemolli wrote: Hi David, you should use itchart_=PASS The trailing underscore signals Squid that this is a custom header. On Mon, Aug 28, 2023 at 3:54 PM David Touzeau wrote: Hi Since 6.2 ( aka migrating from 5.8 ) Squid claim about token sent by external_acl_helper the external acl helper send "OK itchart=PASS user=dtouzeau category=143 category-name=Trackers clog=cinfo:143-Trackers;" squid claim 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper annotation with a name reserved for Squid use: itchart=PASS advice: If this is a custom annotation, rename it to add a trailing underscore: itchart_ current master transaction: master278 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper annotation with a name reserved for Squid use: category=143 advice: If this is a custom annotation, rename it to add a trailing underscore: category_ current master transaction: master278 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper annotation with a name reserved for Squid use: category-name=Trackers advice: If this is a custom annotation, rename it to add a trailing underscore: category-name_ current master transaction: master278 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper annotation with a name reserved for Squid use: clog=cinfo:143-Trackers; advice: If this is a custom annotation, rename it to add a trailing underscore: clog_ current master transaction: master278 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper annotation with a name reserved for Squid use: itchart=PASS advice: If this is a custom annotation, rename it to add a trailing underscore: itchart_ current master transaction: master278 Did the helper instead of "itchart=PASS" must send "itchart_=PASS" or "itchart_PASS" ? -- David Touzeau - Artica Tech France Development team, level 3 support -- P: +33 6 58 44 69 46 www:https://wiki.articatech.com www:http://articatech.net ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users -- Francesco -- David Touzeau - Artica Tech France Development team, level 3 support -- P: +33 6 58 44 69 46 www:https://wiki.articatech.com www:http://articatech.net ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] 6.2: Unsupported or unexpected from-helper annotation with a name reserved for Squid use
Hi David, you should use itchart_=PASS The trailing underscore signals Squid that this is a custom header. On Mon, Aug 28, 2023 at 3:54 PM David Touzeau wrote: > > Hi > > Since 6.2 ( aka migrating from 5.8 ) > > Squid claim about token sent by external_acl_helper > > the external acl helper send > "OK itchart=PASS user=dtouzeau category=143 category-name=Trackers > clog=cinfo:143-Trackers;" > > squid claim > 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper > annotation with a name reserved for Squid use: itchart=PASS > advice: If this is a custom annotation, rename it to add a trailing > underscore: itchart_ > current master transaction: master278 > 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper > annotation with a name reserved for Squid use: category=143 > advice: If this is a custom annotation, rename it to add a trailing > underscore: category_ > current master transaction: master278 > 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper > annotation with a name reserved for Squid use: category-name=Trackers > advice: If this is a custom annotation, rename it to add a trailing > underscore: category-name_ > current master transaction: master278 > 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper > annotation with a name reserved for Squid use: clog=cinfo:143-Trackers; > advice: If this is a custom annotation, rename it to add a trailing > underscore: clog_ > current master transaction: master278 > 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper > annotation with a name reserved for Squid use: itchart=PASS > advice: If this is a custom annotation, rename it to add a trailing > underscore: itchart_ > current master transaction: master278 > > Did the helper instead of "itchart=PASS" must send > > "itchart_=PASS" > or > "itchart_PASS" > > ? > > > > > -- > David Touzeau - Artica Tech France > Development team, level 3 support > -- > P: +33 6 58 44 69 46 > www: https://wiki.articatech.com > www: http://articatech.net > > ___ > squid-users mailing list > squid-users@lists.squid-cache.org > https://lists.squid-cache.org/listinfo/squid-users > -- Francesco ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] How to upgrade correctly?
Hey Gabriel, The first thing before doing anything at all is to backup your binaries and configuration files. Then try to plan a way that will allow you to fall back to the older version if anything will turn bad. If you can test on a VM the installation process before production it would be the best way to make sure everything will go smooth and as expected. I believe that you will be able to just override the current squid installation if it will build fine. Just make sure that the squid instance/service is not running while you are installing the new version. If you have more specific questions feel free to ask. Eliezer From: squid-users On Behalf Of Service MV Sent: Monday, August 28, 2023 16:32 To: Squid Users Subject: [squid-users] How to upgrade correctly? Hello everyone. I have currently installed SQUID 5.8 compiled from source on Debian 10.5. I want to upgrade to the latest stable version, 6.2. What is the recommended way to upgrade to a new version? Should I uninstall the old version first? Or do I compile the new one and it overwrites the old one? Thank you very much for any help you can give me. My configuration: ./configure --includedir=/include \ --mandir=/share/man \ --infodir=/share/info \ --localstatedir=/opt/squid/var \ --disable-maintainer-mode \ --disable-dependency-tracking \ --disable-silent-rules \ --enable-inline \ --enable-async-io \ --enable-storeio=ufs,aufs,diskd \ --enable-removal-policies=lru,heap \ --enable-delay-pools \ --enable-cache-digests \ --enable-underscores \ --enable-icap-client \ --enable-follow-x-forwarded-for \ --enable-arp-acl \ --enable-esi--disable-translation \ --with-logdir=/var/log/squid \ --with-pidfile=/var/run/squid.pid \ --with-filedescriptors=65536 \ --with-large-files \ --with-default-user=proxy \ --enable-linux-netfilter \ --enable-ltdl-convenience \ --with-openssl \ --enable-ssl \ --enable-ssl-crtd \ --enable-snmp \ --disable-arch-native make make check make install -- Gabriel ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users
[squid-users] 6.2: Unsupported or unexpected from-helper annotation with a name reserved for Squid use
Hi Since 6.2 ( aka migrating from 5.8 ) Squid claim about token sent by external_acl_helper the external acl helper send "OK itchart=PASS user=dtouzeau category=143 category-name=Trackers clog=cinfo:143-Trackers;" squid claim 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper annotation with a name reserved for Squid use: itchart=PASS advice: If this is a custom annotation, rename it to add a trailing underscore: itchart_ current master transaction: master278 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper annotation with a name reserved for Squid use: category=143 advice: If this is a custom annotation, rename it to add a trailing underscore: category_ current master transaction: master278 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper annotation with a name reserved for Squid use: category-name=Trackers advice: If this is a custom annotation, rename it to add a trailing underscore: category-name_ current master transaction: master278 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper annotation with a name reserved for Squid use: clog=cinfo:143-Trackers; advice: If this is a custom annotation, rename it to add a trailing underscore: clog_ current master transaction: master278 2023/08/28 16:47:02 kid1| WARNING: Unsupported or unexpected from-helper annotation with a name reserved for Squid use: itchart=PASS advice: If this is a custom annotation, rename it to add a trailing underscore: itchart_ current master transaction: master278 Did the helper instead of "itchart=PASS" must send "itchart_=PASS" or "itchart_PASS" ? -- David Touzeau - Artica Tech France Development team, level 3 support -- P: +33 6 58 44 69 46 www:https://wiki.articatech.com www:http://articatech.net ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users
[squid-users] How to upgrade correctly?
Hello everyone. I have currently installed SQUID 5.8 compiled from source on Debian 10.5. I want to upgrade to the latest stable version, 6.2. What is the recommended way to upgrade to a new version? Should I uninstall the old version first? Or do I compile the new one and it overwrites the old one? Thank you very much for any help you can give me. My configuration: ./configure --includedir=/include \ --mandir=/share/man \ --infodir=/share/info \ --localstatedir=/opt/squid/var \ --disable-maintainer-mode \ --disable-dependency-tracking \ --disable-silent-rules \ --enable-inline \ --enable-async-io \ --enable-storeio=ufs,aufs,diskd \ --enable-removal-policies=lru,heap \ --enable-delay-pools \ --enable-cache-digests \ --enable-underscores \ --enable-icap-client \ --enable-follow-x-forwarded-for \ --enable-arp-acl \ --enable-esi--disable-translation \ --with-logdir=/var/log/squid \ --with-pidfile=/var/run/squid.pid \ --with-filedescriptors=65536 \ --with-large-files \ --with-default-user=proxy \ --enable-linux-netfilter \ --enable-ltdl-convenience \ --with-openssl \ --enable-ssl \ --enable-ssl-crtd \ --enable-snmp \ --disable-arch-native make make check make install -- Gabriel ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users
[squid-users] Squid ssl_bump splice configuration
ב"ה I'm using squid version: nativ@arachimprodsrv3:/usr/local/squid/etc$ /usr/local/squid/sbin/squid -v Squid Cache: Version 6.1-VCS Service Name: squid This binary uses OpenSSL 3.0.2 15 Mar 2022. configure options: '--with-large-files' '--with-openssl' '--enable-ssl' '--enable-ssl-crtd' '--enable-icap-client' '--enable-linux-netfilter' '--disable-ident-lookups' Configured with ssl_bump and tproxy: http_port 0.0.0.0:3128 http_port 0.0.0.0:3129 tproxy https_port 0.0.0.0:3130 tproxy ssl-bump \ cert=/usr/local/squid/etc/ssl_cert/myCA.pem \ generate-host-certificates=on dynamic_cert_mem_cache_size=4MB options=ALL,NO_SSLv3 sslflags=NO_DEFAULT_CA And the following configurations: acl NoSSLInterceptRegexp_always ssl::server_name "splice.list" always_direct allow all on_unsupported_protocol tunnel acl DiscoverSNIHost at_step SslBump1 ssl_bump splice NoSSLInterceptRegexp_always ssl_bump peek DiscoverSNIHost ssl_bump bump all the content of the file splice.list: .prog.co.il prog.co.il www.prog.co.il .shipuzim.info The tproxy redirections works fine with squid server but unfortunately the urls in splice.list bumped although they should be spliced as seen in the access log: 1693219853.255626 192.168.28.254 TCP_MISS/200 64439 GET https://www.prog.co.il/ - HIER_DIRECT/172.67.196.36 text/html And I see in the browser's certificate viewer my squid self signed certificate. What am I missing here? Thanks, Ben ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users
