Re: [squid-users] Anybody still using src_as and dst_as ACLs?
I use them for ipv6 blocks they seem to work that way in 5.8 Sent from my iPhone > On Jun 16, 2024, at 17:00, Alex Rousskov > wrote: > > Hello, > >Does anybody still have src_as and dst_as ACLs configured in their > production Squids? There are several serious problems with those ACLs, and > those problems have been present in Squid for many years. I hope that > virtually nobody uses those ACLs today. > > If you do use them, please respond (publicly or privately) and, if possible, > please indicate whether you have verified that those ACLs are working > correctly in your deployment environment. > > > Thank you, > > Alex. > > >>acl aclname src_as number ... >>acl aclname dst_as number ... >> # [fast] >> # Except for access control, AS numbers can be used for >> # routing of requests to specific caches. Here's an >> # example for routing all requests for AS#1241 and only >> # those to mycache.mydomain.net: >> # acl asexample dst_as 1241 >> # cache_peer_access mycache.mydomain.net allow asexample >> # cache_peer_access mycache_mydomain.net deny all > ___ > squid-users mailing list > squid-users@lists.squid-cache.org > https://lists.squid-cache.org/listinfo/squid-users ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users
[squid-users] Anybody still using src_as and dst_as ACLs?
Hello, Does anybody still have src_as and dst_as ACLs configured in their production Squids? There are several serious problems with those ACLs, and those problems have been present in Squid for many years. I hope that virtually nobody uses those ACLs today. If you do use them, please respond (publicly or privately) and, if possible, please indicate whether you have verified that those ACLs are working correctly in your deployment environment. Thank you, Alex. acl aclname src_as number ... acl aclname dst_as number ... # [fast] # Except for access control, AS numbers can be used for # routing of requests to specific caches. Here's an # example for routing all requests for AS#1241 and only # those to mycache.mydomain.net: # acl asexample dst_as 1241 # cache_peer_access mycache.mydomain.net allow asexample # cache_peer_access mycache_mydomain.net deny all ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Simulate connections for tuning squid?
On Sunday 16 June 2024 at 12:27:03, David Touzeau wrote: > Hi > > We have made such a tool for us. > Available free of charge with no restrictions I think it would be a good idea to publish a tool like this explicitly under a well-known licence. It makes life considerably simpler for people who care about compliance if they can say "these things we use are all under licence X" because then everyone knows exactly what that means. Antony. -- I don't know, maybe if we all waited then cosmic rays would write all our software for us. Of course it might take a while. - Ron Minnich, Los Alamos National Laboratory Please reply to the list; please *don't* CC me. ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users
Re: [squid-users] Simulate connections for tuning squid?
Hi We have made such a tool for us. I suggest downloading our ISO and install a new server ( virtual ) You will have this feature: https://wiki.articatech.com/en/proxy-service/tuning/stress-your-proxy-server You can easily use this feature in a variety of scenarios. Available free of charge with no restrictions Le 24/05/2024 à 16:01, Alex Rousskov a écrit : On 2024-05-24 01:43, Periko Support wrote: I would like to know if there exists a tool that helps us simulate connections to squid and helps us tune squid for different scenarios like small, medium or large networks? Yes, there are many tools, offering various tradeoffs, including: * Apache "ab": Not designed for testing proxies but well-known and fairly simple. * Web Polygraph: Designed for testing proxies but has a steep learning curve and lacks fresh releases. * curl/wget/netcat: Not designed for testing performance but well-known and very simple. Alex. ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users -- David Touzeau - Artica Tech France Development team, level 3 support -- P: +33 6 58 44 69 46 www:https://wiki.articatech.com www:http://articatech.net ___ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users
