AW: [squid-users] Processes don`t start
Check your startup scripts. In squid 2.5 squid executable has moved to .../squid/sbin directory. Probably you actually start the 2.4 executable which is located in .../squid/bin Mit freundlichem Gruß/Yours sincerely Werner Rost GM-FIR - Netzwerk ZF Boge Elastmetall GmbH Friesdorfer Str. 175, 53175 Bonn, Deutschland/Germany Telefon/Phone +49 228 3825 - 420, Telefax/Fax +49 228 3825 - 398 [EMAIL PROTECTED] -Ursprüngliche Nachricht- Von: Petri Välisuo [mailto:[EMAIL PROTECTED] Gesendet: Freitag, 30. Juli 2004 22:47 An: [EMAIL PROTECTED] Betreff: Re: [squid-users] Processes don`t start On Fri, 30 Jul 2004, Marcos Monteiro da Cruz wrote: After I upgraded squid 2.4 to 2.5 in a Debian Linux, everytime I try to start the squid process it does start but it is automactily killed. I tried your FAQ page and tried to find something about the problem in the Debian page, but I couldn`t find anything of value. Also, I saw that there is no debian pakage for installing squid 2.5; is it because it just can`t run under Debian? Any kind of information would be very valuable for me. 2.5 do run in Debian and so does squid 3. But I guess that the problem is that you might have forgotten to do some final configurations before starting squid. Have you checked that the user that is executing squid have vrite access to log directory and spool (cache) directory? Does those directories exist? Have you initialized the cache with squid -z command? If you aren't sure where the squid writes log files, where the spool directory is, and what is the squid user please specify them explicitely in the squid.conf. Regards -petri -- Petri Välisuo [EMAIL PROTECTED] +358 44 767 7774 PGP: http://www.wasalab.com/~petri/gpg_public_key.txt ICQ: 176287479
RE: [squid-users] Blocking language/script
Is squid capable to block languages or scripts such as Java, javascript, etc... I have some users using Internet Explorer who suddenly can not use the Yahoo Webmail... i.e... since Yahoo!mail upgrade mailbox for their users, some of our users can not suddenly delete their mailbox, reply a post from Internet Explorer. I also, tried myself, using Konqueror (well, I think it was Konqueror) , and got the same problem. When switching to Galeon, I can use Yahoo Webmail without blockage... Is it squid that blocks languages and scripts? How to block/unblock langueges/scripts from squid? Squid can't do that, as it would involve opening and-going-into objects to alter content. That's not SQUID's business. Acl's can be mode to block on extension , mime type e.d; but squid can't or doesn't go as far as you want. M.
RE: [squid-users] redirect to a proxy
Hello, I've got 2 proxies SQUID 2.5, a principal and a secondary. All the traffics go to the principal, but i want to use the secondary if the principal has not connection to internet. For exemple : if the connection of the principal is down, a script changes the squid.conf in order to redirect the request to the secondary. That's kind of collisional what you formulate,since when squid is down, it won't be able to redirect requests either. We provide a master SQUID box and a backup box, using proxy configuration , in the browser to provide the backup squid box , as a fallback proxy cache for web access. M.
Re: [squid-users] Squid does not use cache dir(WAS: Squid problem regarding memory usages)
On Sun, 1 Aug 2004, Diamond King wrote: It successfully changed to use 5120 file descriptors. Now, the question is squid did not use the assigned 6GB cache dir. Im not saying Squid didnt cache anything. Here's the excerpt of access.log file entries :- Maybe this? http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ufs_no_valid_dir Regards Henrik
Re: [squid-users] squid don't cache
what version of squid are u using ? -Original message- From: nx13372 [EMAIL PROTECTED] Date: Fri, 30 Jul 2004 15:52:19 +0300 To: [EMAIL PROTECTED] Subject: [squid-users] squid don't cache Hi all, All i do, was: #/etc/init.d/squid stop #rm -fr /var/spool/squid #rm /var/log/squid #squid -z #/etc/init.d/squid restart Squid starts ok. Now squid works, but don't cache. The #du -sh /var/spool/squid is always 16452! Since i have 3 squid.conf.x in /etc/squid/ i already copy an older configuration for squid.conf, but thas nothing wrong with my actual squid.conf. It's working about 1 year. The owner and group of all related squid files is proxy. I'm using Debian Sid and when i upgrade squid i always keep my configuration file. It's a transparent proxy, and my rules in iptables are correct (are the same!). thanks in advance The last lines in cache.log: 2004/07/29 16:36:52| store_swap_size = 0k 2004/07/29 16:36:52| storeLateRelease: released 0 objects 2004/07/30 08:54:41| Starting Squid Cache version 2.5.STABLE6 for i386-debian-linux-gnu... 2004/07/30 08:54:41| Process ID 20649 2004/07/30 08:54:41| With 1024 file descriptors available 2004/07/30 08:54:41| DNS Socket created at 0.0.0.0, port 33003, FD 5 2004/07/30 08:54:41| Adding nameserver xx.xx.xx.xx from /etc/resolv.conf 2004/07/30 08:54:41| Adding nameserver xx.xx.xx.xx from /etc/resolv.conf 2004/07/30 08:54:41| Adding nameserver xx.xx.xx.xx from /etc/resolv.conf 2004/07/30 08:54:41| Adding nameserver xx.xx.xx.xx from /etc/resolv.conf 2004/07/30 08:54:41| Adding nameserver xx.xx.xx.xx from /etc/resolv.conf 2004/07/30 08:54:41| Adding nameserver xx.xx.xx.xx from /etc/resolv.conf 2004/07/30 08:54:41| User-Agent logging is disabled. 2004/07/30 08:54:41| Referer logging is disabled. 2004/07/30 08:54:41| Unlinkd pipe opened on FD 10 2004/07/30 08:54:41| Swap maxSize 4096 KB, estimated 3150769 objects 2004/07/30 08:54:41| Target number of buckets: 157538 2004/07/30 08:54:41| Using 262144 Store buckets 2004/07/30 08:54:41| Max Mem size: 393216 KB 2004/07/30 08:54:41| Max Swap size: 4096 KB 2004/07/30 08:54:41| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec 2004/07/30 08:54:41| Rebuilding storage in /var/spool/squid (DIRTY) 2004/07/30 08:54:41| Using Least Load store dir selection 2004/07/30 08:54:41| Current Directory is / 2004/07/30 08:54:41| Loaded Icons. 2004/07/30 08:54:41| Accepting HTTP connections at 0.0.0.0, port 3128, FD 11. 2004/07/30 08:54:41| Accepting HTTP connections at 0.0.0.0, port 80, FD 12. 2004/07/30 08:54:41| Accepting ICP messages at 0.0.0.0, port 3130, FD 13. 2004/07/30 08:54:41| HTCP Disabled. 2004/07/30 08:54:41| WCCP Disabled. 2004/07/30 08:54:41| Ready to serve requests. 2004/07/30 08:54:41| Done scanning /var/spool/squid swaplog (0 entries) 2004/07/30 08:54:41| Finished rebuilding storage from disk. 2004/07/30 08:54:41| 0 Entries scanned 2004/07/30 08:54:41| 0 Invalid entries. 2004/07/30 08:54:41| 0 With invalid flags. 2004/07/30 08:54:41| 0 Objects loaded. 2004/07/30 08:54:41| 0 Objects expired. 2004/07/30 08:54:41| 0 Objects cancelled. 2004/07/30 08:54:41| 0 Duplicate URLs purged. 2004/07/30 08:54:41| 0 Swapfile clashes avoided. 2004/07/30 08:54:41| Took 0.3 seconds ( 0.0 objects/sec). 2004/07/30 08:54:41| Beginning Validation Procedure 2004/07/30 08:54:41| Completed Validation Procedure 2004/07/30 08:54:41| Validated 0 Entries 2004/07/30 08:54:41| store_swap_size = 0k 2004/07/30 08:54:42| storeLateRelease: released 0 objects 2004/07/30 10:13:21| Preparing for shutdown after 1742 requests 2004/07/30 10:13:21| Waiting 30 seconds for active connections to finish 2004/07/30 10:13:21| FD 11 Closing HTTP connection 2004/07/30 10:13:21| FD 12 Closing HTTP connection 2004/07/30 10:13:52| Shutting down... 2004/07/30 10:13:52| FD 13 Closing ICP connection 2004/07/30 10:13:52| Closing unlinkd pipe on FD 10 2004/07/30 10:13:52| storeDirWriteCleanLogs: Starting... 2004/07/30 10:13:52| Finished. Wrote 0 entries. 2004/07/30 10:13:52| Took 0.0 seconds ( 0.0 entries/sec). CPU Usage: 6.010 seconds = 3.830 user + 2.180 sys Maximum Resident Size: 0 KB Page faults with physical i/o: 456 Memory usage for squid via mallinfo(): total space in arena: 30544 KB Ordinary blocks:27775 KB228 blks Small blocks: 0 KB 0 blks Holding blocks: 1220 KB 2 blks Free Small blocks: 0 KB Free Ordinary blocks:2769 KB Total in use: 28995 KB 95% Total free: 2769 KB 9% 2004/07/30 10:13:52| Squid Cache (Version 2.5.STABLE6): Exiting normally. 2004/07/30 10:13:53| Starting Squid Cache version 2.5.STABLE6 for i386-debian-linux-gnu... 2004/07/30 10:13:53| Process ID 21311 2004/07/30 10:13:53| With 1024 file descriptors
Re: [squid-users] squid don't cache
try to use Squid2.5stable5 regards, 2004/07/30 08:54:41| Starting Squid Cache version 2.5.STABLE6 for
Re: [squid-users] Re: [squid-users] Fw: time´s quotas??????
dear zilinex, i am also intrested in your project and would like to check/test/use it. could you send it for me with all the details like installation procedure etc.. regards, bimal On Sat, 2004-07-31 at 18:28, zilinex wrote: I wrote an authentication program based on ncsa that calculates total time of connections per mounth for each user from the squid access.log files. if you want i can post it for you! ... I'm going to develop this program to be more efficient.maybe i use mysql too! ... but the first version of this program is available!..but the session times of squid is not a meaningful data for accounting! also have a look at squid2mysql program.. it limits the users with respect to amount of downloads (daily,weekly and monthly) kind regardS PS :Dear Henrik.. what do you mean in terms of HTTP resuest? - Original Message - From: Henrik Nordstrom [EMAIL PROTECTED] Date: Sat, 31 Jul 2004 01:17:55 +0200 (CEST) To: [zuiga] [EMAIL PROTECTED] Subject: Re: [squid-users] Fw: times quotas?? Re: On Thu, 29 Jul 2004, [Windows-1252] [zuiga] wrote: Re: Re: I want to assign times quotas but not using acl time, I just want to give Re: 100 hours/month for every user. Is it Possible? Re: Re: Define 100 hours/month in terms of HTTP requests. Re: Re: Regards Re: Henrik Re:
RE: [squid-users] Re: [squid-users] Fw: times quotas??????
Hi There Please could I have the link as well, cause I am very interested in the program. Regards Gert Brits -Original Message- From: bimal pandit [mailto:[EMAIL PROTECTED] Sent: Saturday, July 31, 2004 3:07 PM To: zilinex; squid user list Subject: Re: [squid-users] Re: [squid-users] Fw: times quotas?? dear zilinex, i am also intrested in your project and would like to check/test/use it. could you send it for me with all the details like installation procedure etc.. regards, bimal On Sat, 2004-07-31 at 18:28, zilinex wrote: I wrote an authentication program based on ncsa that calculates total time of connections per mounth for each user from the squid access.log files. if you want i can post it for you! ... I'm going to develop this program to be more efficient.maybe i use mysql too! ... but the first version of this program is available!..but the session times of squid is not a meaningful data for accounting! also have a look at squid2mysql program.. it limits the users with respect to amount of downloads (daily,weekly and monthly) kind regardS PS :Dear Henrik.. what do you mean in terms of HTTP resuest? - Original Message - From: Henrik Nordstrom [EMAIL PROTECTED] Date: Sat, 31 Jul 2004 01:17:55 +0200 (CEST) To: [zuiga] [EMAIL PROTECTED] Subject: Re: [squid-users] Fw: times quotas?? Re: On Thu, 29 Jul 2004, [Windows-1252] [zuiga] wrote: Re: Re: I want to assign times quotas but not using acl time, I just want to give Re: 100 hours/month for every user. Is it Possible? Re: Re: Define 100 hours/month in terms of HTTP requests. Re: Re: Regards Re: Henrik Re:
Re: [squid-users] squid don't cache
Abdock wrote: what version of squid are u using ? Debian Sid package version 2.5.STABLE6
Re: [squid-users] squid don't cache
Abdock wrote: try to use Squid2.5stable5 regards, 2004/07/30 08:54:41| Starting Squid Cache version 2.5.STABLE6 for I'm also posting in the debian users list. This could be a Debian specific problem!?
[squid-users] Squid reverse proxy limit
Hello, I'm using squid/2.5.STABLE5 for a reverse proxy with URL switching with squidGuard. This linux squid server will be front of 30 web servers, for the moment it use 15Mbps, CPU is 50% idle. I monitore the client tcp connect established with RRDtools : /bin/netstat -vatn | /bin/grep localip:80 | /bin/grep -c ESTABLISHED Squid dont't use more than 800 tcp connections. Is-it possible to increase this limit ? Thanks for your help. Marc Vous manquez despace pour stocker vos mails ? Yahoo! Mail vous offre GRATUITEMENT 100 Mo ! Créez votre Yahoo! Mail sur http://fr.benefits.yahoo.com/ Le nouveau Yahoo! Messenger est arrivé ! Découvrez toutes les nouveautés pour dialoguer instantanément avec vos amis. A télécharger gratuitement sur http://fr.messenger.yahoo.com
Re: [squid-users] squid don't cache
nx13372 wrote: Abdock wrote: try to use Squid2.5stable5 regards, 2004/07/30 08:54:41| Starting Squid Cache version 2.5.STABLE6 for I'm also posting in the debian users list. This could be a Debian specific problem!? ok. It's a package bug. Bjoern Schmidt already post this as a bug: #262342 thanks to all.
[squid-users] load balancing
greetings I have a new squid server i want to put in parallel with my existing system. i read most of the Docs and Faq's but still have not come up with a good understanding for my scenario. I'm running a transparent cache with squid guard. My problem seems to be How do I split my traffic ? or how do i create a failover if one squid server becomes to busy? here is my topology --[ L3 def route]---[ squid1]-- ---[squid2]-- right now i my problem is that I have only one default route option coming from my layer 3 device. therefore I cannot split my subnets and force 1/2 to one interface and the other half to another. I do have multiple cards in each squid box. DNS round robin won't work in this setup because i am forcing all unknown traffic to squid1. (correct me if I'm wrong) any advice? --- jeff donovan basd network operations (610) 807 5571 x41 AIM xtdonovan
Re: [squid-users] load balancing
On Mon, 2 Aug 2004, Jeff Donovan wrote: I'm running a transparent cache with squid guard. My problem seems to be How do I split my traffic? This you do in your router in case of transparently intercepting proxies.. If you are not using a TCP interception device capable of tracking individual connections then this is most easily done by splitting the destination IP address space among the caches. CARP does so automatically for you. or how do i create a failover if one squid server becomes to busy? best done by an external load balancer. Linux Virtual Server is a good free one, highend routers switches usually also have reasonable load balancing functions built in. Regards Henrik
Re: [squid-users] load balancing
On Aug 2, 2004, at 9:25 AM, Henrik Nordstrom wrote: On Mon, 2 Aug 2004, Jeff Donovan wrote: I'm running a transparent cache with squid guard. My problem seems to be How do I split my traffic? This you do in your router in case of transparently intercepting proxies.. If you are not using a TCP interception device capable of tracking individual connections then this is most easily done by splitting the destination IP address space among the caches. CARP does so automatically for you. or how do i create a failover if one squid server becomes to busy? best done by an external load balancer. Linux Virtual Server is a good free one, highend routers switches usually also have reasonable load balancing functions built in. would this be a placed on a linux server in front of the two cache's or does it run on the same device as squid? Unfortunately my layer 3 switch does not allow for multiple default routes or even a policy route. Otherwise i would have just routed my traffic to the new interface. -j --- jeff donovan basd network operations (610) 807 5571 x41 AIM xtdonovan
[squid-users] most critical commands to monitor about squid Box
Dear all i want monitor squid box performance here is commands i guess most critical to watch . 1) top ( look at squid is not taking too much CPU ) 2) vmstat ( make sure machine is not swaping too much) or 2) free -m 3) iostat -x (look for await , svctime 4) uptime (load average is not above 3 i guess ) 5) use cache manager to cache hists and median service time . if other wants to add other suggestions it will helpful i have question how can i login in cache manager on command line using squidclient Regards UX __ Do you Yahoo!? New and Improved Yahoo! Mail - Send 10MB messages! http://promotions.yahoo.com/new_mail
[squid-users] squid on moderate scales
Hi, A friend of mine, a lab teacher, at a college is going to install squid on her college's Mandrake 10.0 official machine. She will use the default squid-2.5 Stable4 rpm cos' she is very new to unix. The problem is that there will be around 300 students using it as a proxy server plus around 25 teachers. Students will get access to a few sites and teachers to all. Now, my question is that will the default squid bundled in the OS be able to handle all the load? The machine is big, PIV 2Ghz with 1Gb swap and fast SCSI drives with 512Mb RAM (a gift from a leading computer company). This is the first time they are using a free OS in the college and I will be giving help from outside for squid.conf. Can someone share her/his experience with this load? The server will just have a caching dns and maybe a dhcp server with the same (not sure). Thanks a lot for the help in advance. With warm regards, -Payal
[squid-users] Weighted redundant proxy auto-config script.
For those who are interested, I have crafted a dynamic Auto-Configuration script for use in Apache using Perl. Based on a random number, it will provide a user with a listing of proxies which may be weighted to determine their allocation. Please see http://www.squid-cache.org/Doc/FAQ/FAQ-5.html#ss5.4 My script consists, basically, of two files--proxy.pac.pl and proxy; the names are mostly arbitrary. proxy.pac.pl: #!/usr/bin/perl if( $ENV{ SCRIPT_NAME } =~ /\.pac$/ ) { print Content-type: application/x-ns-proxy-autoconfig\n; } else { print Content-type: text/html\n; } print \n; my %proxy = (), $total = 0; open A, proxy or die Can not access proxy list.\n; while( A ) { chomp; /^(\S+)\s+(\S+)$/; $proxy{ $1 } = $2; } foreach $p ( sort keys %proxy ) { $total += $proxy{ $p }; } $val = rand() * $total; $last = 0; foreach $p ( sort keys %proxy ) { if( $val ( $proxy{ $p } + $last ) $val =$last ) { $primary=$p; push @list, $p; } elsif( $val ( $proxy{ $p } + $last ) ) { push @list, $p; } elsif( $val =$last ) { push @tail, $p; } $last += $proxy{ $p }; } for( $i=0; $i=$#tail; $i++ ) { push @list, $tail[ $i ]; } print ' function FindProxyForURL(url, host) { if (isPlainHostName(host) || dnsDomainIs(host, .domain.com) !localHostOrDomainIs(host, www.domain.com)) return DIRECT; else '; print ' return '; for( $i=0; $i=$#list; $i++ ) { print PROXY .$list[ $i ].:3128; } print ' DIRECT; } '; proxy: proxy1.domain.com:8080 25 proxy2.domain.com:8081 75 The 'proxy' file simply contains proxy entries with a weight seperated by a space. The weight value is arbitrary, the weights are added together to determine the value to be randomized against. I hope this proves useful to someone. As has been mentioned before there are many other scripts for doing proxy selection. Please see http://www.squid-cache.org/Doc/FAQ/FAQ-5.html#ss5.5 Peter signature.asc Description: OpenPGP digital signature
Re: [squid-users] most critical commands to monitor about squid Box
unixware wrote: Dear all i want monitor squid box performance here is commands i guess most critical to watch . 1) top ( look at squid is not taking too much CPU ) 2) vmstat ( make sure machine is not swaping too much) or 2) free -m 3) iostat -x (look for await , svctime 4) uptime (load average is not above 3 i guess ) 5) use cache manager to cache hists and median service time . if other wants to add other suggestions it will helpful i have question how can i login in cache manager on command line using squidclient Regards UX How about snmp? You can monitor your OS and the squid this way... Regards, Hendrik Voigtländer
Re: [squid-users] squid on moderate scales
Payal Rathod wrote: Hi, A friend of mine, a lab teacher, at a college is going to install squid on her college's Mandrake 10.0 official machine. She will use the default squid-2.5 Stable4 rpm cos' she is very new to unix. The problem is that there will be around 300 students using it as a proxy server plus around 25 teachers. Students will get access to a few sites and teachers to all. Not familiar with mandrake, but we use debian with the package from the stable distro (woody). IMHO there is no reason to build your own squid if you can live with the provided release. Now, my question is that will the default squid bundled in the OS be able to handle all the load? The machine is big, PIV 2Ghz with 1Gb swap and fast SCSI drives with 512Mb RAM (a gift from a leading computer company). This is the first time they are using a free OS in the college and I will be giving help from outside for squid.conf. Can someone share her/his experience with this load? The server will just have a caching dns and maybe a dhcp server with the same (not sure). Same machine here, but with no swap but 1GB RAM. We have around 1000 clients. FD Usage is about 300, this way I guess that I have never more than 150 clients accessing the cache simultaneously. Works fine with a 5MBit adsl line, the only problem are huge downloads which I am unable to block. If you limit the site for most of the clients (i.e. the students) this will be no problem for your machine. Keep an eye on memory usage, i.e. don't make the cache_dirs to large. What is the uplink bandwith? Regards, Hendrik Voigtländer
[squid-users] porn filter
Hi i wish to setup a porn filter of squid and i wish to know if anyone can help. Thanks a lot.
Re: [squid-users] porn filter
go to http://www.squidguard.org it's easy --j On Aug 2, 2004, at 2:13 PM, [EMAIL PROTECTED] wrote: Hi i wish to setup a porn filter of squid and i wish to know if anyone can help. Thanks a lot. --- jeff donovan basd network operations (610) 807 5571 x41 AIM xtdonovan
Re: [squid-users] porn filter
Dans Guardian works quite well, I am aware of an ISP that uses it to filter all content for all of their users. In three years I've only ever heard two complaints about improperly blocked pages. On Mon, 2004-08-02 at 14:13, [EMAIL PROTECTED] wrote: Hi i wish to setup a porn filter of squid and i wish to know if anyone can help. Thanks a lot.
[squid-users] Not using first listed cache-directory while multiple are configured
Hi, I'm running Squid2.5 stable6 on Debian Linux 3.0r2 on a Dell2650 and using 3 cache-directories where each has it's own disk beneath. See this 'df' : proxy2:~# df Filesystem 1k-blocks Used Available Use% Mounted on /dev/sda2 35518624269060 35249564 1% / /dev/sdb6 33032196432240 30921972 2% /usr/local/squid/var/logs /dev/sdc5 35001476 98692 33124796 1% /usr/local/squid/cache1 /dev/sdd5 35001476 1865408 31358080 6% /usr/local/squid/cache2 /dev/sde5 35001476 1859088 31364400 6% /usr/local/squid/cache3 Using this squid-server cache1 seems not to be used to write data to. When I change the order of the caches in squid.conf then the first listed in the conf-file will be 'ignored' to be used to save data to. So, i.e. when cache2 is listed first, then cache2 don't get data written to it. The filesystem-type in squid is UFS for all cache-dirs. I also have a proxy1 server that has been setup exactly the same and that server also shows the same issue. Any idea's ? Thanks in advance, John Dautzenberg
[squid-users] Not using first listed cache-directory while multiple are configured
Hi, I'm running Squid2.5 stable6 on Debian Linux 3.0r2 on a Dell2650 and using 3 cache-directories where each has it's own disk beneath. See this 'df' : proxy2:~# df Filesystem 1k-blocks Used Available Use% Mounted on /dev/sda2 35518624269060 35249564 1% / /dev/sdb6 33032196432240 30921972 2% /usr/local/squid/var/logs /dev/sdc5 35001476 98692 33124796 1% /usr/local/squid/cache1 /dev/sdd5 35001476 1865408 31358080 6% /usr/local/squid/cache2 /dev/sde5 35001476 1859088 31364400 6% /usr/local/squid/cache3 Using this squid-server cache1 seems not to be used to write data to. When I change the order of the caches in squid.conf then the first listed in the conf-file will be 'ignored' to be used to save data to. So, i.e. when cache2 is listed first, then cache2 don't get data written to it. The filesystem-type in squid is UFS for all cache-dirs. I also have a proxy1 server that has been setup exactly the same and that server also shows the same issue. Any idea's ? Thanks in advance, John Dautzenberg
[squid-users] Re: most critical commands to monitor about squid Box
unixware wrote: i have question how can i login in cache manager on command line using squidclient squidclient mgr: This will bring up a list of the pages of information available. To get the General Runtime Information page, use: squidclient mgr:info Adam
Re: [squid-users] load balancing
On Mon, 2 Aug 2004, Jeff Donovan wrote: would this be a placed on a linux server in front of the two cache's or does it run on the same device as squid? Both possibilities existsm Regards Henrik
[squid-users] Need to replace squid with more appropriat diagnositc program
A while back I had problems with running squid on a Cobalt RaQ XTR. Then I realized it had to do with how swap was triggered. Since squid actually has a setting that tells squid how much ram to swallow on startup it is a very good basic tester of available ram and swap funtion. I have been using squid like this but it is not perfect. For instance the reports and log files are not those of a diagnostic program. Can someone suggest a better alternative for testing ram and disk swapping. -- Josh Kuperman [EMAIL PROTECTED]
Re: [squid-users] porn filter
fire-eyes wrote: Dans Guardian works quite well, I am aware of an ISP that uses it to filter all content for all of their users. In three years I've only ever heard two complaints about improperly blocked pages. Any recommendation where to get free blacklists? Regards, Hendrik Voigtländer
Re: [squid-users] Not using first listed cache-directory while multiple are configured
On Mon, 2 Aug 2004, Dautzenberg, John wrote: When I change the order of the caches in squid.conf then the first listed in the conf-file will be 'ignored' to be used to save data to. So, i.e. when cache2 is listed first, then cache2 don't get data written to it. The filesystem-type in squid is UFS for all cache-dirs. I also have a proxy1 server that has been setup exactly the same and that server also shows the same issue. This is almost certainly one faset of the known ufs bug in 2.5.STABLE6 http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ufs_no_valid_dir Regards Henrik
Re: [squid-users] Need to replace squid with more appropriat diagnositc program
On Mon, 2 Aug 2004, josh wrote: A while back I had problems with running squid on a Cobalt RaQ XTR. Then I realized it had to do with how swap was triggered. Since squid actually has a setting that tells squid how much ram to swallow on startup it is a very good basic tester of available ram and swap funtion. Not really... I have been using squid like this but it is not perfect. For instance the reports and log files are not those of a diagnostic program. Can someone suggest a better alternative for testing ram and disk swapping. RAM Test: memtest86 (on X86 type hardware only) Swap test: the attached silly program could be useful.. General system health: Repeated Linux kernel compiles, in parallell to stress VM system even more.. Regards Henrik #include stdlib.h int main(int argc, char **argv) { char *buf; int i; int size; size=atoi(argv[1]); buf=calloc(size * 1024,1); for(;;) for(i=0;isize;i++) { buf[i*1024]=buf[(size-i)*1024-1]; } }
Re: [squid-users] porn filter
On Mon, Aug 02, 2004 at 09:57:12PM +0200, Hendrik Voigtländer wrote: Any recommendation where to get free blacklists? http://www.linugen.com/contentfilter/ http://www.squidguard.org/blacklist/ .../Bosse
[squid-users] cascading squid - non-squid proxy server.
Hi, I would like to cascade squid to another non-squid proxy server. Can I do that? If so, How do I configure? Browser - Squid - Non-squid Proxy server - Internet. Thanks, Jayakumar. __ Do you Yahoo!? New and Improved Yahoo! Mail - Send 10MB messages! http://promotions.yahoo.com/new_mail
[squid-users] Random dropping of requests
Greetings, I have just taken charge of a squid machine that has been showing some strange behaviour for the last few weeks. For one thing, cpu usage on average is above 80% which seems abnormally high, even taking into account the high traffic (about 2000 hits per minute). Secondly, all traffic randomly stops for anywhere between a few seconds and 20 minutes. Restarting squid during this time brings it back up, but this isn't feasable when we have to do it a few times a day. Even if I don't restart manually, it becomes available again by itself, but the downtime is too costly. Now for some details. The hardware is as follows: 2.7GHz x 2 Xeon CPUs 2GB RAM 36GB x 2, 10,000 rpm SCSI drives One drive is used for the OS (Fedora Core 2, default kernel) while the other is used for cache (32GB cache size, reiserfs with notail and notime options). Next, until a few days ago, the machine was running Squid 2.5-STABLE6 (without patches). It was configured to use diskd and various options which I don't have availabe right at this minute. Quite a few OS settings recommended for Squid are present, such as port range (1024-65000), file descriptors (32768), tcp_max_syn_backlog (8192) etc. I tried switching to 2.5-STABLE5 with the 3 major patches since we have this setup on another proxy, but got the same results. This morning, I upgraded to the latest 2.5-STABLE6 version with all the current patches and set the cache type to aufs (simple 'squid -z', not a reformat of the underlying filesystem), but it solved neither the CPU usage issue, nor the random drops. Nothing unusual shows up in cache_log, access_log or any of the system logs. Our network monitor also confirms that this isn't a network issue and that requests are going to the proxy during the outages. Unless someone can identify the problem here, I'll consider installing Slackware and a custom kernel to rule out that it's an OS issue. Any help will be appreciated. Thanks, -- A. Sajjad Zaidi GnuPG Key ID: 0xD7AD0E13
RE: [squid-users] Random dropping of requests
I have just taken charge of a squid machine that has been showing some strange behaviour for the last few weeks. For one thing, cpu usage on average is above 80% which seems abnormally high, even taking into account the high traffic (about 2000 hits per minute). Secondly, all traffic randomly stops for anywhere between a few seconds and 20 minutes. Restarting squid during this time brings it back up, but this isn't feasable when we have to do it a few times a day. Even if I don't restart manually, it becomes available again by itself, but the downtime is too costly. Nothing unusual shows up in cache_log, access_log or any of the system logs. Our network monitor also confirms that this isn't a network issue and that requests are going to the proxy during the outages. -- Last week I had this same issue with close to the same traffic as you. I tried installing a new OS, newer/older version of squid and still had the same issue. I took the squid.conf during the high CPU load and commented out every ACL and basically allowed all to pass thru. I then turned on each ACL one at a time and found one of my ACLs was causing the CPU load. Not exactly sure why it caused the issue but all has been well for a week now. Regards, Scott
[squid-users] Authentication
Hello i works for a company which recently shifted to linux+squid, but we are getting a problem in the squid configuration- is there any way of authentication of squid proxy users without entering the username and password while accesing internet. We have developed a client module which can be used for authentication into server, i.e. the client module will ask for a username and password to access any services running by server, so can we do the proxy authentication by this client module OR can we develop any script wich can be run from workstations and can be used to authenticate the proxy users, the proxy authentication programm is samba. Please reply Thanks in advance __ Do you Yahoo!? Yahoo! Mail is new and improved - Check it out! http://promotions.yahoo.com/new_mail
RE: [squid-users] Authentication
Hello i works for a company which recently shifted to linux+squid, but we are getting a problem in the squid configuration- is there any way of authentication of squid proxy users without entering the username and password while accesing internet. We have developed a client module which can be used for authentication into server, i.e. the client module will ask for a username and password to access any services running by server, so can we do the proxy authentication by this client module OR can we develop any script wich can be run from workstations and can be used to authenticate the proxy users, the proxy authentication programm is samba. http://www.squid-cache.org/Doc/FAQ/FAQ-11.html#ss11.14 M.
Re: [squid-users] cascading squid - non-squid proxy server.
hi jayakumar, U can acieve it by configuring squid.conf with the following : cache_peer ur non squid proxy server parent ur non squid proxy-port 0 no-query default proxy-only login=PASS kiran --- Quoting Jayakumar Dwarakadas [EMAIL PROTECTED]: Hi, I would like to cascade squid to another non-squid proxy server. Can I do that? If so, How do I configure? Browser - Squid - Non-squid Proxy server - Internet. Thanks, Jayakumar. __ Do you Yahoo!? New and Improved Yahoo! Mail - Send 10MB messages! http://promotions.yahoo.com/new_mail
RE: [squid-users] cascading squid - non-squid proxy server.
Hi, I would like to cascade squid to another non-squid proxy server. Can I do that? If so, How do I configure? Browser - Squid - Non-squid Proxy server - Internet. Check : cache_peer directive in squid.conf.detault and comments. Use option 'no-query' if the proxy doesn't understand ICP. M.
Re: [squid-users] load balancing
LVS can be placed on the same server, but it is good if you a new Linux Box for it, I am not sure but last time I used it, I need to recompile the kernel. Please do check with the latest Docs. And why can not you do the Roundrobin. It is always a good option. And yeah most convinient, you can use a PAC file. --- Jeff Donovan [EMAIL PROTECTED] wrote: On Aug 2, 2004, at 9:25 AM, Henrik Nordstrom wrote: On Mon, 2 Aug 2004, Jeff Donovan wrote: I'm running a transparent cache with squid guard. My problem seems to be How do I split my traffic? This you do in your router in case of transparently intercepting proxies.. If you are not using a TCP interception device capable of tracking individual connections then this is most easily done by splitting the destination IP address space among the caches. CARP does so automatically for you. or how do i create a failover if one squid server becomes to busy? best done by an external load balancer. Linux Virtual Server is a good free one, highend routers switches usually also have reasonable load balancing functions built in. would this be a placed on a linux server in front of the two cache's or does it run on the same device as squid? Unfortunately my layer 3 switch does not allow for multiple default routes or even a policy route. Otherwise i would have just routed my traffic to the new interface. -j --- jeff donovan basd network operations (610) 807 5571 x41 AIM xtdonovan = Regards, Mohsin Khan CCNA ( Cisco Certified Network Associate 2.0 ) http://pk.aaghaz.net Happy is the one who can smile __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com