[squid-users] Squid serving a static website image

2008-06-23 Thread jsianes
Hello. I'm trying to configure a Squid as an static cache. The idea is
configure squid, crawl completelly a website (making squid cache all pages)
and then use it to server all website statically, showing all contents through
squid (even when the real website it's not accesible). ¿is there any simple
way to make it using some squid configuration parameters? Thanks a lot.



Re: [squid-users] How to limit download manager session?

2008-06-23 Thread Visolve

Hello Rahmanian,

We can limit the number of connections using
acl aclname maxconn number
This will be matched when the client's IP address has more than number 
HTTP connections established.


Thanks,
Visolve Squid team
www.visolve.com/squid/



Kadoos wrote:

 His name

Hi dears

How to limit download manager session with squid? I want redius it to 2 
concurrent connection.
Pliz help me.

-
Best Regards
Rahmanian



  



  




[squid-users] Re: Re[squid-users] verse proxy to Sharepoint

2008-06-23 Thread afstcklnd

Chris,

Thanks for the information!

Everything I read says use 2.6 or ANY build above that.

ATB
Andrew




Chris Robertson-2 wrote:
 
 afstcklnd wrote:
 We have a working infrastructure using Windows 2003, AD  Sharepoint for
 Project Web Access. In order to allow branch office access, we wanted to
 put
 in place a reverse proxy solution and looked at Squid. After a lot of
 reading, it became clear the Squid 2.6 or above was the best option in
 order
 to get working NTLM authentication. So

 We've installed a Fedora Core 9 box with Squid 3.0, attached it to the
 domain and set up all the kerberos, ldap authentication etc. However,
 it's
 not quite behaving correctly.
   
 
 Last I saw, 
 (http://www.squid-cache.org/mail-archive/squid-users/200803/0523.html) 
 you'll need to use 2.6 or 2.7 to proxy NTLM authentication.  The 
 connection pinning required to support it has not been added to the 
 released Squid 3 code base.
 
 Testing kerberos, ldap etc. seems all OK and the ntlm helpers are running
 OK. Connect to the proxy with IE of Firefox and the request for a
 password
 is presented but regardless of what is entered authentication. 

 Obviously I need to provide more information but can you guide me as to
 where and what I need to provide?

 Thanks
   
 
 Chris
 
 
 

-- 
View this message in context: 
http://www.nabble.com/Reverse-proxy-to-Sharepoint-tp17909397p18064761.html
Sent from the Squid - Users mailing list archive at Nabble.com.



Re: [squid-users] Squid serving a static website image

2008-06-23 Thread Matus UHLAR - fantomas
On 23.06.08 09:12, [EMAIL PROTECTED] wrote:
 Hello. I'm trying to configure a Squid as an static cache. The idea is
 configure squid, crawl completelly a website (making squid cache all pages)
 and then use it to server all website statically, showing all contents through
 squid (even when the real website it's not accesible). ¿is there any simple
 way to make it using some squid configuration parameters? Thanks a lot.

what _exactly_ do you want to achieve? Have offline cache when the web
server is offline? Or use squid as webserver that is going to be turned off?

(In any way you will have to use external program for crawling the site.)

-- 
Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Fucking windows! Bring Bill Gates! (Southpark the movie)


[squid-users] Setting a whitelist for ONE IP-Adress

2008-06-23 Thread Giuseppe Bellomo
Hello there,

I tried all the weekend setting up a whitelist for one IP Adress.
We have a network with an MS AD but all users log in with the same user.
Thats why I have to work with the IP Adresses.
We just want one PC to use the Squid with a whitelist...I'am using the
SquidNT 2.7 stable!

- Service is running

I tried the following config lines:

# Define the pc/ip, which has to squid later
acl pc101 src 192.168.100.101/255.255.255.255

# define the whitelist
acl whitelist dstdomain   /squid/etc/whitelist.allow

# define the pc to use the whitelist
http_access pc101 whitelist

Is my procedure right? Or what did I wrong?

The problem is, that the whitelist does not work and all sites were
blocked, also the ones who are listet in the whitelist!

All the three lines are above the default line
http_access deny all

Can somebody help me making the right config or send me a squid.conf
which will work?

Thanks a lot!


[squid-users] How to force resources expired when squid starts

2008-06-23 Thread Donoso Gabilondo, Daniel
Hello, 
I have a question.

My http server sends the objects with max-age of 48 hours. This is
perfect for me, because squid during 48 hours doesn't send to server the
packet to check if the object is modified.

I saw that is possible delete all the cached objects with squidclient,
or with refresh_pattern put some objects expired when a time elapsed or
when the resources are % old.

Is there any way to put all the cached objects expired manually?




Re: [squid-users] Squid serving a static website image

2008-06-23 Thread jsianes
Use squid as webserver that is going to be turned off
I got a program to crawl all website through squid working out of the box,
only need the specific parameter in squid to make it server al cached contents
even when the website is completely down. Thanks.


 On 23.06.08 09:12, [EMAIL PROTECTED] wrote:
 Hello. I'm trying to configure a Squid as an static cache. The idea is
 configure squid, crawl completelly a website (making squid cache all pages)
 and then use it to server all website statically, showing all contents
 through
 squid (even when the real website it's not accesible). ¿is there any simple
 way to make it using some squid configuration parameters? Thanks a lot.

 what _exactly_ do you want to achieve? Have offline cache when the web
 server is offline? Or use squid as webserver that is going to be turned off?

 (In any way you will have to use external program for crawling the site.)

 --
 Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
 Warning: I wish NOT to receive e-mail advertising to this address.
 Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
 Fucking windows! Bring Bill Gates! (Southpark the movie)






Re: [squid-users] Setting a whitelist for ONE IP-Adress

2008-06-23 Thread Indunil Jayasooriya
 I tried the following config lines:

 # Define the pc/ip, which has to squid later
 acl pc101 src 192.168.100.101/255.255.255.255

 # define the whitelist
 acl whitelist dstdomain   /squid/etc/whitelist.allow

 # define the pc to use the whitelist
 http_access pc101 whitelist

Pls add the word allow as follows

http_access allow pc101 whitelist


Happy squiding


-- 
Thank you
Indunil Jayasooriya


[squid-users] Going into hit-only-mode for 5 minutes....

2008-06-23 Thread Rajasekar

We am using squid 2.6 stable version in fedora core 6. Some times we
receiving this error message in our cache.log file. when this error comes,
we not able to browse for some time through squid proxy. We want to know the
meaning of this error and why its occurred.

ERROR SNAP

Failure Ratio at 1.01
2008/06/23 11:54:16| Going into hit-only-mode for 5 minutes...

ERROR SNAP

Any solution?.


-- 
View this message in context: 
http://www.nabble.com/Going-into-hit-only-mode-for-5-minutes-tp18066869p18066869.html
Sent from the Squid - Users mailing list archive at Nabble.com.



Fwd: [squid-users] Setting a whitelist for ONE IP-Adress

2008-06-23 Thread Indunil Jayasooriya
Can you post me a default config with my three lines in it, so that
the IP-Adress is using the whitelist defined and any other IPs can
reach any site?

Try below lines


# Define the pc/ip, which has to squid later
acl pc101 src 192.168.100.101/255.255.255.255

# define the whitelist
acl whitelist url_regex -i /squid/etc/whitelist.allow

http_access deny pc101 !whitelist

then, create below file.

touch /squid/etc/whitelist.allow

and add below domains to that file.
.allowedsites1.com
.allowedsites2.com
.allowedsites3.com

#the rest has FULL ACCESS
acl mynet 192.168.100.0/24
http_access allow mynet

restart squid

Happy Squiding



-- 
Thank you
Indunil Jayasooriya


Re: [squid-users] How to force resources expired when squid starts

2008-06-23 Thread Amos Jeffries

Donoso Gabilondo, Daniel wrote:
Hello, 
I have a question.


My http server sends the objects with max-age of 48 hours. This is
perfect for me, because squid during 48 hours doesn't send to server the
packet to check if the object is modified.

I saw that is possible delete all the cached objects with squidclient,


one by one only.


or with refresh_pattern put some objects expired when a time elapsed or
when the resources are % old.


refresh_pattern does same thing as max-age. But applies when no max-age 
is given.




Is there any way to put all the cached objects expired manually?



No. You can only purge them one by one. Why are you needing this?

Amos
--
Please use Squid 2.7.STABLE3 or 3.0.STABLE7


Re: [squid-users] Going into hit-only-mode for 5 minutes....

2008-06-23 Thread Amos Jeffries

Rajasekar wrote:

We am using squid 2.6 stable version in fedora core 6. Some times we
receiving this error message in our cache.log file. when this error comes,
we not able to browse for some time through squid proxy. We want to know the
meaning of this error and why its occurred.

ERROR SNAP

Failure Ratio at 1.01
2008/06/23 11:54:16| Going into hit-only-mode for 5 minutes...

ERROR SNAP

Any solution?.


You appear to have major network connectivity problems.
Squid apparently has a sub-mode which is shifts to so you can get to 
already-cached content even when the network underneath it is down or 
falling apart.


The code in squid which says that is documented:

 * This function is designed to serve a fairly specific purpose.
 * Occasionally our vBNS-connected caches can talk to each other, but not
 * the rest of the world.  Here we try to detect frequent failures which
 * make the cache unusable (e.g. DNS lookup and connect() failures).  If
 * the failure:success ratio goes above 1.0 then we go into hit only
 * mode where we only return UDP_HIT or UDP_MISS_NOFETCH.  Neighbors
 * will only fetch HITs from us if they are using the ICP protocol.  We
 * stay in this mode for 5 minutes.
 *
 * Duane W., Sept 16, 1996


Amos
--
Please use Squid 2.7.STABLE3 or 3.0.STABLE7


RE: [squid-users] How to force resources expired when squid starts

2008-06-23 Thread Donoso Gabilondo, Daniel

 refresh_pattern does same thing as max-age. But applies when no
max-age 
 is given.

I was wrong. Thanks for the explanation.

 No. You can only purge them one by one. Why are you needing this?

Because if a lot of objects are modified during the max-age time,
putting all the objects expired, squid would ask for them again, and
only get the modified objects.

I know that is possible to decrease the max-age or put max-age to 0 (ask
always if the object is modified) but this generate a lot of network
traffic when a lot of objects are asked. 

Thanks for your help.

Daniel


-Mensaje original-
De: Amos Jeffries [mailto:[EMAIL PROTECTED] 
Enviado el: lunes, 23 de junio de 2008 14:46
Para: Donoso Gabilondo, Daniel
CC: squid-users@squid-cache.org
Asunto: Re: [squid-users] How to force resources expired when squid
starts

Donoso Gabilondo, Daniel wrote:
 Hello, 
 I have a question.
 
 My http server sends the objects with max-age of 48 hours. This is
 perfect for me, because squid during 48 hours doesn't send to server
the
 packet to check if the object is modified.
 
 I saw that is possible delete all the cached objects with squidclient,

one by one only.

 or with refresh_pattern put some objects expired when a time elapsed
or
 when the resources are % old.

refresh_pattern does same thing as max-age. But applies when no max-age 
is given.

 
 Is there any way to put all the cached objects expired manually?
 

No. You can only purge them one by one. Why are you needing this?

Amos
-- 
Please use Squid 2.7.STABLE3 or 3.0.STABLE7


[squid-users] Reverse Proxy and SSL...

2008-06-23 Thread Gary Tai
Is there any requirement to configure Squid to forward SSL requests
apart from configuring the appropriate port (typically 443)?

Thanks.


[squid-users] Squid and Cacti problem

2008-06-23 Thread Egi Konomi


Hello!

I used to have Squid 2.6.x monitored without any problem on cacti.

But now on Squid 3.0.x, i get very gigant values in the range of 
Gigabits (In the traffic in / out / saved section), that i dont think 
that are real values.


What might be the problem?



[squid-users] Squid with two networks ...

2008-06-23 Thread Ramiro Sabastta
Hi !!!

I've installed a Squid box transparent mode (3STABLE7) with two
network cards and I must to implement this scenario:

- The network cards are connected at two diferents internal Class C
network with public IP.
- If the http requeriment asking about an object that is in the cache,
the Squid give the object throught the same interface that the
original requermients comes (I tink that this is not a problem,
because de origin IP is in the same network that the squid have).
- If the http requeriment asking about an object that isn't in the
cache, the Squid go direct to public network trought the same
interface that the original requermients comes (This is the problem).

Are some configurations of squid.conf that allow me to do that?

I think resolve te problem, externally form Squid (with iptables, for example)

Thanks a lot !!!

Regards !!

Ramiro


Re: [squid-users] Reverse Proxy and SSL...

2008-06-23 Thread Matus UHLAR - fantomas
On 23.06.08 10:44, Gary Tai wrote:
 Is there any requirement to configure Squid to forward SSL requests
 apart from configuring the appropriate port (typically 443)?

if it can already forward non-SSL requests (proper ACLs), none.
-- 
Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
- Have you got anything without Spam in it?
- Well, there's Spam egg sausage and Spam, that's not got much Spam in it.


[squid-users] Failed to select source for ...assert failure...

2008-06-23 Thread Roy M.
I am using Squid as HTTP accelerator, occasally my Squid3 (stable6)
will have error in cache.log, e.g.

Failed to select source for  http://www.example.com

But I am sure that the URL is reachable in backend web server, and
sometimes it will immediately followed by an assert failure and
restart, e.g.

assertion failed: comm.cc:1997: !fd_table[fd].flags.closing


Also, sometimes I did observe an error in cache.log, e.g.

client_side.cc(2723) okToAccept: WARNING! Your cache is running out of
filedescriptors



Any suggestions?

Thanks.


Re: [squid-users] Failed to select source for ...assert failure...

2008-06-23 Thread Pritam


Try increasing the size of file descriptor

Roy M. wrote:

I am using Squid as HTTP accelerator, occasally my Squid3 (stable6)
will have error in cache.log, e.g.

Failed to select source for  http://www.example.com

But I am sure that the URL is reachable in backend web server, and
sometimes it will immediately followed by an assert failure and
restart, e.g.

assertion failed: comm.cc:1997: !fd_table[fd].flags.closing


Also, sometimes I did observe an error in cache.log, e.g.

client_side.cc(2723) okToAccept: WARNING! Your cache is running out of
filedescriptors



Any suggestions?

Thanks.


  




Re: [squid-users] Failed to select source for ...assert failure...

2008-06-23 Thread Roy M.
Hi,

On 6/24/08, Pritam [EMAIL PROTECTED] wrote:

  Try increasing the size of file descriptor



Are there any reference links?

Thanks.


RE: [squid-users] Failed to select source for ...assert failure...

2008-06-23 Thread amir shrestha
Check out this
http://www.onlamp.com/pub/a/onlamp/2004/02/12/squid.html

Amir

-Original Message-
From: Roy M. [mailto:[EMAIL PROTECTED] 
Sent: Monday, June 23, 2008 10:26 PM
To: Pritam
Cc: squid-users
Subject: Re: [squid-users] Failed to select source for ...assert failure...

Hi,

On 6/24/08, Pritam [EMAIL PROTECTED] wrote:

  Try increasing the size of file descriptor



Are there any reference links?

Thanks.

__ NOD32 3209 (20080623) Information __

This message was checked by NOD32 antivirus system.
http://www.eset.com




Re: [squid-users] Failed to select source for ...assert failure...

2008-06-23 Thread Pritam

Roy M. wrote:

Hi,

On 6/24/08, Pritam [EMAIL PROTECTED] wrote:
  

 Try increasing the size of file descriptor





Are there any reference links?

Thanks.
  

If squid binary is install from source then following steps should work.
~ Stop the squid process.
~ Use ulimit to increase the file descriptor size.
# ulimit –HSn 8192 (where 8192 is the FD size )
~ Start the squid process. See cache.log to confirm the change FD.

else this link should help you further.
~ 
http://www.cyberciti.biz/faq/squid-proxy-server-running-out-filedescriptors/


Regards



  




Re: [squid-users] How to add a banner to all (unauthenticated) pages?

2008-06-23 Thread Canadasmarty

Did you get this working?
-- 
View this message in context: 
http://www.nabble.com/How-to-add-a-banner-to-all-%28unauthenticated%29-pages--tp17738628p18074084.html
Sent from the Squid - Users mailing list archive at Nabble.com.



Re: [squid-users] Squid with two networks ...

2008-06-23 Thread julian julian
You could probably use a set of static routes made by route command, where 
you can specify static gateway for each network. Defining as gateway each of 
yours public IP.






--- On Mon, 6/23/08, Ramiro Sabastta [EMAIL PROTECTED] wrote:

 From: Ramiro Sabastta [EMAIL PROTECTED]
 Subject: [squid-users] Squid with two networks ...
 To: squid-users@squid-cache.org
 Date: Monday, June 23, 2008, 8:20 AM
 Hi !!!
 
 I've installed a Squid box transparent mode (3STABLE7)
 with two
 network cards and I must to implement this scenario:
 
 - The network cards are connected at two diferents internal
 Class C
 network with public IP.
 - If the http requeriment asking about an object that is in
 the cache,
 the Squid give the object throught the same interface that
 the
 original requermients comes (I tink that this is not a
 problem,
 because de origin IP is in the same network that the squid
 have).
 - If the http requeriment asking about an object that
 isn't in the
 cache, the Squid go direct to public network trought the
 same
 interface that the original requermients comes (This is the
 problem).
 
 Are some configurations of squid.conf that allow me to do
 that?
 
 I think resolve te problem, externally form Squid (with
 iptables, for example)
 
 Thanks a lot !!!
 
 Regards !!
 
 Ramiro


  


Re: [squid-users] Reverse Proxy and SSL...

2008-06-23 Thread Henrik Nordstrom
On mån, 2008-06-23 at 10:44 -0400, Gary Tai wrote:
 Is there any requirement to configure Squid to forward SSL requests
 apart from configuring the appropriate port (typically 443)?

You also need a matching ssl enabled cache_peer if forwarding to port
443 on the web server.

TYpically a setup looks like the following:

acl http protocol http
acl https protocol https

http_port public.ip:80 accel defaultsite=your.main.sitename vhost

acl servergroup_domains dstdomain your.main.sitename other.sitename ...

cache_peer ip.of.web.server parent 80 0 no-query originserver 
name=servername_http
cache_peer_access servername_http http servergroup_domains

https_port public.ip:443 accel defaultsite=your.main.sitename 
sslcert=/path/to/main.sitename.pem

cache_peer ip.of.web.server parent 443 0 no-query originserver ssl 
name=servername_https
cache_peer_access servername_https https servergroup_domains


If you have multiple servers with the same content then the same acl is
used for them all.. (hence the severgroup_ notation above..)

Regards
Henrik


signature.asc
Description: This is a digitally signed message part


Re: [squid-users] Squid with two networks ...

2008-06-23 Thread Pritam

julian julian wrote:

You could probably use a set of static routes made by route command, where you can 
specify static gateway for each network. Defining as gateway each of yours public IP.






--- On Mon, 6/23/08, Ramiro Sabastta [EMAIL PROTECTED] wrote:

  

From: Ramiro Sabastta [EMAIL PROTECTED]
Subject: [squid-users] Squid with two networks ...
To: squid-users@squid-cache.org
Date: Monday, June 23, 2008, 8:20 AM
Hi !!!

I've installed a Squid box transparent mode (3STABLE7)
with two
network cards and I must to implement this scenario:

- The network cards are connected at two diferents internal
Class C
network with public IP.

Could you illustrate more about your network. I mean the connected to 
the squid box..?




- If the http requeriment asking about an object that is in
the cache,
the Squid give the object throught the same interface that
the
original requermients comes (I tink that this is not a
problem,
because de origin IP is in the same network that the squid
have).
- If the http requeriment asking about an object that
isn't in the
cache, the Squid go direct to public network trought the
same
interface that the original requermients comes (This is the
problem).

Are some configurations of squid.conf that allow me to do
that?

I think resolve te problem, externally form Squid (with
iptables, for example)

Thanks a lot !!!

Regards !!

Ramiro





[squid-users] Squid CPU utilization

2008-06-23 Thread Egi Konomi

Hello!

Can SQUID3 utilize more than one cpu with one instance?

Because i see on with `top` that my squid goes to %CPU - 101%


Thank you!



Re: [squid-users] Failed to select source for ...assert failure...

2008-06-23 Thread Christos Tsantilas

Hi Roy,

Roy M. wrote:

I am using Squid as HTTP accelerator, occasally my Squid3 (stable6)
will have error in cache.log, e.g.

Failed to select source for  http://www.example.com

But I am sure that the URL is reachable in backend web server, and
sometimes it will immediately followed by an assert failure and
restart, e.g.

assertion failed: comm.cc:1997: !fd_table[fd].flags.closing



Are you sure you are running the squid3-stable6 and not squid3-HEAD?
It looks like the bug #2381 and bug #2253 (and both are squid3-HEAD bugs 
...)


Regards,
Christos


[squid-users] Re: Re[squid-users] verse proxy to Sharepoint

2008-06-23 Thread afstcklnd

Hi,

OK, have built a new Squid 2.7 Stable 2 version and it's up and running.
wbinfo reports authentication OK, but I get the following when the users try
and authenticate

authenticateNTLMHandleReply: Error validating user via NTLM. Error returned
'BH NT_STATUS_ACCESS_DENIED'

This would suggest a Samba problem but in isolation, Samba seems fine. Any
ideas???

All the best
Andrew



Chris Robertson-2 wrote:
 
 afstcklnd wrote:
 We have a working infrastructure using Windows 2003, AD  Sharepoint for
 Project Web Access. In order to allow branch office access, we wanted to
 put
 in place a reverse proxy solution and looked at Squid. After a lot of
 reading, it became clear the Squid 2.6 or above was the best option in
 order
 to get working NTLM authentication. So

 We've installed a Fedora Core 9 box with Squid 3.0, attached it to the
 domain and set up all the kerberos, ldap authentication etc. However,
 it's
 not quite behaving correctly.
   
 
 Last I saw, 
 (http://www.squid-cache.org/mail-archive/squid-users/200803/0523.html) 
 you'll need to use 2.6 or 2.7 to proxy NTLM authentication.  The 
 connection pinning required to support it has not been added to the 
 released Squid 3 code base.
 
 Testing kerberos, ldap etc. seems all OK and the ntlm helpers are running
 OK. Connect to the proxy with IE of Firefox and the request for a
 password
 is presented but regardless of what is entered authentication. 

 Obviously I need to provide more information but can you guide me as to
 where and what I need to provide?

 Thanks
   
 
 Chris
 
 
 

-- 
View this message in context: 
http://www.nabble.com/Reverse-proxy-to-Sharepoint-tp17909397p18079891.html
Sent from the Squid - Users mailing list archive at Nabble.com.



Re: [squid-users] Squid and Cacti problem

2008-06-23 Thread Amos Jeffries

 Hello!

 I used to have Squid 2.6.x monitored without any problem on cacti.

 But now on Squid 3.0.x, i get very gigant values in the range of
 Gigabits (In the traffic in / out / saved section), that i dont think
 that are real values.

 What might be the problem?


I've seen this in -3 also, but I run HEAD, so put most of my errors down
to bad readings when Squid was being reset after it hit a bug and crashed.

Are you sure the MIB has the same field at that OID location in both
versions?

Amos



Re: [squid-users] Squid with two networks ...

2008-06-23 Thread Amos Jeffries
 Hi !!!

 I've installed a Squid box transparent mode (3STABLE7) with two
 network cards and I must to implement this scenario:

 - The network cards are connected at two diferents internal Class C
 network with public IP.
 - If the http requeriment asking about an object that is in the cache,
 the Squid give the object throught the same interface that the
 original requermients comes (I tink that this is not a problem,
 because de origin IP is in the same network that the squid have).
 - If the http requeriment asking about an object that isn't in the
 cache, the Squid go direct to public network trought the same
 interface that the original requermients comes (This is the problem).

 Are some configurations of squid.conf that allow me to do that?

 tcp_outgoing_address

# configure an ACL to match which src network range the request comes from.
acl netA src 192.168.20.0/24
acl netB src 192.168.12.0/24

# specify which IP squid uses to send requests from
tcp_outgoing_address 192.168.20.1 allow netA
tcp_outgoing_address 192.168.20.1 deny !netA
tcp_outgoing_address 192.168.12.1 allow netB
tcp_outgoing_address 192.168.12.1 deny !netB


The above will make squid change its own Src-IP based on your ACL.

Amos



Re: [squid-users] Squid CPU utilization

2008-06-23 Thread Amos Jeffries
 Hello!

 Can SQUID3 utilize more than one cpu with one instance?

 Because i see on with `top` that my squid goes to %CPU - 101%


Sort of. It's slightly muddled by the fact that squid runs a set of helpers.

The Squid binaries themselves cannot individually use more than one CPU as
yet. But each of them and any helpers may be shoved by the system onto
other CPU. Likewise Squid may be run on a full CPU by itself, and the OS
etc on another. Up to 120% is probably expected.

Amos



Re: [squid-users] Failed to select source for ...assert failure...

2008-06-23 Thread Henrik Nordstrom
On mån, 2008-06-23 at 23:26 +0800, Roy M. wrote:
 I am using Squid as HTTP accelerator, occasally my Squid3 (stable6)
 will have error in cache.log, e.g.
 
 Failed to select source for  http://www.example.com
 
 But I am sure that the URL is reachable in backend web server

Anything else relevant before this in cache.log?

 and
 sometimes it will immediately followed by an assert failure and
 restart, e.g.
 
 assertion failed: comm.cc:1997: !fd_table[fd].flags.closing

File a bug on that..
http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-7067fc0034ce967e67911becaabb8c95a34d576d

 Also, sometimes I did observe an error in cache.log, e.g.
 
 client_side.cc(2723) okToAccept: WARNING! Your cache is running out of
 filedescriptors

http://www.squid-cache.org/Versions/v2/2.7/cfgman/max_filedescriptors.html
http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-eb3240fe8e61368056af86138a2b5dcbc9781a54

Regards
Henrik


signature.asc
Description: This is a digitally signed message part


Re: [squid-users] Failed to select source for ...assert failure...

2008-06-23 Thread Roy M.
Hi,

On 6/24/08, Henrik Nordstrom [EMAIL PROTECTED] wrote:

 http://www.squid-cache.org/Versions/v2/2.7/cfgman/max_filedescriptors.html
  
 http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-eb3240fe8e61368056af86138a2b5dcbc9781a54


But I am using 3.0, seems no this directive...


Also tried : http://www.onlamp.com/pub/a/onlamp/2004/02/12/squid.html

But I can't find the string __FD_SETSIZE  in the file:
/usr/include/bits/types.h


Howard


Re: [squid-users] Failed to select source for ...assert failure...

2008-06-23 Thread Amos Jeffries

Roy M. wrote:

Hi,

On 6/24/08, Henrik Nordstrom [EMAIL PROTECTED] wrote:

http://www.squid-cache.org/Versions/v2/2.7/cfgman/max_filedescriptors.html
 
http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-eb3240fe8e61368056af86138a2b5dcbc9781a54



But I am using 3.0, seems no this directive...


Also tried : http://www.onlamp.com/pub/a/onlamp/2004/02/12/squid.html

But I can't find the string __FD_SETSIZE  in the file:
/usr/include/bits/types.h


If you are compiling there is the ./configure 
--with-filedescriptors=NUMBER option in 3.0 for this.



Amos
--
Please use Squid 2.7.STABLE3 or 3.0.STABLE7


Re: [squid-users] Failed to select source for ...assert failure...

2008-06-23 Thread Henrik Nordstrom
On tis, 2008-06-24 at 12:46 +0800, Roy M. wrote:
 Hi,
 
 On 6/24/08, Henrik Nordstrom [EMAIL PROTECTED] wrote:
 
  http://www.squid-cache.org/Versions/v2/2.7/cfgman/max_filedescriptors.html
   
  http://wiki.squid-cache.org/SquidFaq/TroubleShooting#head-eb3240fe8e61368056af86138a2b5dcbc9781a54
 
 
 But I am using 3.0, seems no this directive...

See also the FAQ link..

Regards
Henrik


signature.asc
Description: This is a digitally signed message part