Re: [squid-users] Reverse Proxy

2008-08-19 Thread Amos Jeffries

Chris Robertson wrote:

Mario Almeida wrote:

Hi All,

Below is the setting I have done to test a reverse proxy

http_port 3128 accel defaultsite=xyz.example.com vhost

cache_peer 172.27.1.10 parent 8080 0 no-query originserver name=server1
acl server1_acl dstdomain www.xyz.example.com xyz.example.com
cache_peer_access server1 allow server1_acl
cache_peer_access server1 deny all

But could not get it done
Bellow is the error message what I get


ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: http:// xyz.example.com /

The following error was encountered:

* Unable to forward this request at this time.
This request could not be forwarded to the origin server or to any parent
caches. The most likely cause for this error is that:

* The cache administrator does not allow this cache to make direct
connections to origin servers, and
  


This seems unlikely given the cache_peer_access line, so...

* All configured parent caches are currently unreachable.   


This is far more likely the issue at hand.  Check your cache.log for any 
clues.  Verify you have the right IP and port for your parent server, 
and that there are no firewall rules preventing access.  Try using wget 
or Lynx on your Squid server to grab a page off the origin server.



Your cache administrator is root.



Regards,
Remy
  


Chris


There is also a weird side-case rarely seen with dstdomain thst needs 
checking here.


Mario:
 does it work if you change the ACL line to:
  acl server1_acl dstdomain .xyz.example.com

If not, check your config for lines mentioning always_direct or 
never_direct, and the network linkage between test proxy and web server 
as mentioned by Chris.


Amos
--
Please use Squid 2.7.STABLE4 or 3.0.STABLE8


Re: [squid-users] Squid on Debian etch with a 2.4 kernel

2008-08-19 Thread thing

Tim Bates wrote:

Steven Jones wrote:
I have squid refusing to run on the aboveit appears Debian has 
set squid up such that it only runs on a 2.6 kernel
http://wiki.kartbuilding.net/index.php/Squid_Issue,_Etch_and_a_2.4_Kernel 


Sarge squid packages are not longer there...
Does anyone know of a ready made squid-.deb out there that I can 
use? 
I think the short answer is that if you want to run an outdated 
kernel, you're going to have to start compiling some things yourself.
That said. you could try the packages from either sarge-backports or 
etch-backports. One of those might work.


TB
Not from choice, my raid controller wont work due to an outstanding bug 
(megaraid) it wont boot on a 2.6 kernel...I have tried the 
sarge-backports with no joy...Im now compiling squid 3 from source


regards

Steven


Re: [squid-users] Squid is aborting and restarting its child process very often

2008-08-19 Thread Amos Jeffries

sankar sankar wrote:

Dear all,

My system info:

-
Hardware config: Intel Quad Core 2.73 processor, 8 GB RAM, 160 GB SCSI SAS
OS: Debian 4.0R4, image: 2.6.18-6-amd64
Squid: Squid Cache version 3.0.PRE5 for x86_64-pc-linux-gnu
FDs: 4096 (max for the precompiled debian distro)
-

Squid is aborting and restarting its child process very often. Signal 6
indicates a fatal error. Cache.log reports

Error condition 1:
2008/08/16 19:05:52| assertion failed: client_side.cc:2479:
"conn->in.abortedSize == (size_t)conn->bodySizeLeft()"
2008/08/16 19:05:55| Extension method 'MERGE' added, enum=27
2008/08/16 19:05:55| Extension method 'MKACTIVITY' added, enum=28
2008/08/16 19:05:55| Extension method 'CHECKOUT' added, enum=29
2008/08/16 19:05:55| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-gnu...

Error condition 2:
2008/08/16 19:42:11| assertion failed: ACLChecklist.cc:155: "A"
2008/08/16 19:42:14| Extension method 'MERGE' added, enum=27
2008/08/16 19:42:14| Extension method 'MKACTIVITY' added, enum=28
2008/08/16 19:42:14| Extension method 'CHECKOUT' added, enum=29
2008/08/16 19:42:14| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-gnu...





Can anyone help me to solve this prob.

Thanks,
Sankar


Could be a lot of things. Most likely the broken 64-bit build in PRE5. 
It's several years obsolete now.


Upgrade to STABLE8 and see if it goes away. The .deb packages are 
available in testing or unstable repository already.


Amos
--
Please use Squid 2.7.STABLE4 or 3.0.STABLE8


Re: [squid-users] Squid is aborting and restarting its child process very often

2008-08-19 Thread Adrian Chadd
Run the latest Squid-3.0 ; PRE5 is old and buggy.

Shout at the debian distribution for shipping such an old version.



Adrian

2008/8/20 sankar sankar <[EMAIL PROTECTED]>:
> Dear all,
>
> My system info:
>
> -
> Hardware config: Intel Quad Core 2.73 processor, 8 GB RAM, 160 GB SCSI SAS
> OS: Debian 4.0R4, image: 2.6.18-6-amd64
> Squid: Squid Cache version 3.0.PRE5 for x86_64-pc-linux-gnu
> FDs: 4096 (max for the precompiled debian distro)
> -
>
> Squid is aborting and restarting its child process very often. Signal 6
> indicates a fatal error. Cache.log reports
>
> Error condition 1:
> 2008/08/16 19:05:52| assertion failed: client_side.cc:2479:
> "conn->in.abortedSize == (size_t)conn->bodySizeLeft()"
> 2008/08/16 19:05:55| Extension method 'MERGE' added, enum=27
> 2008/08/16 19:05:55| Extension method 'MKACTIVITY' added, enum=28
> 2008/08/16 19:05:55| Extension method 'CHECKOUT' added, enum=29
> 2008/08/16 19:05:55| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-gnu...
>
> Error condition 2:
> 2008/08/16 19:42:11| assertion failed: ACLChecklist.cc:155: "A"
> 2008/08/16 19:42:14| Extension method 'MERGE' added, enum=27
> 2008/08/16 19:42:14| Extension method 'MKACTIVITY' added, enum=28
> 2008/08/16 19:42:14| Extension method 'CHECKOUT' added, enum=29
> 2008/08/16 19:42:14| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-gnu...
>
>
> On server1:
>
> 2008/08/16 19:05:55| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 19:06:48| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 19:42:14| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 19:48:23| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 19:51:32| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 19:59:55| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> s1:/var/log/squid3# grep " Starting" cache.log.1 | more
> 2008/08/16 11:30:23| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 11:30:41| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 11:31:14| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 11:34:18| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 11:46:22| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 12:02:45| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 12:03:39| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 12:36:57| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 12:37:23| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 12:37:53| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 12:59:45| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 13:16:04| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 13:19:44| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 13:22:18| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 13:38:13| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 13:39:26| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 13:42:30| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 13:43:14| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 13:52:03| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 14:01:01| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 14:03:08| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 14:08:29| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 14:17:18| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 14:23:28| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 14:28:11| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 14:58:58| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 15:02:14| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 15:03:09| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 15:16:26| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 15:17:05| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 15:35:44| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 2008/08/16 15:37:09| Starting Squid Cache version 3.0.PRE5 for
> x86_64-pc-linux-g
> nu...
> 20

[squid-users] Squid is aborting and restarting its child process very often

2008-08-19 Thread sankar sankar
Dear all,

My system info:

-
Hardware config: Intel Quad Core 2.73 processor, 8 GB RAM, 160 GB SCSI SAS
OS: Debian 4.0R4, image: 2.6.18-6-amd64
Squid: Squid Cache version 3.0.PRE5 for x86_64-pc-linux-gnu
FDs: 4096 (max for the precompiled debian distro)
-

Squid is aborting and restarting its child process very often. Signal 6
indicates a fatal error. Cache.log reports

Error condition 1:
2008/08/16 19:05:52| assertion failed: client_side.cc:2479:
"conn->in.abortedSize == (size_t)conn->bodySizeLeft()"
2008/08/16 19:05:55| Extension method 'MERGE' added, enum=27
2008/08/16 19:05:55| Extension method 'MKACTIVITY' added, enum=28
2008/08/16 19:05:55| Extension method 'CHECKOUT' added, enum=29
2008/08/16 19:05:55| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-gnu...

Error condition 2:
2008/08/16 19:42:11| assertion failed: ACLChecklist.cc:155: "A"
2008/08/16 19:42:14| Extension method 'MERGE' added, enum=27
2008/08/16 19:42:14| Extension method 'MKACTIVITY' added, enum=28
2008/08/16 19:42:14| Extension method 'CHECKOUT' added, enum=29
2008/08/16 19:42:14| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-gnu...


On server1:

2008/08/16 19:05:55| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 19:06:48| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 19:42:14| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 19:48:23| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 19:51:32| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 19:59:55| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
s1:/var/log/squid3# grep " Starting" cache.log.1 | more
2008/08/16 11:30:23| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 11:30:41| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 11:31:14| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 11:34:18| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 11:46:22| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 12:02:45| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 12:03:39| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 12:36:57| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 12:37:23| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 12:37:53| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 12:59:45| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 13:16:04| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 13:19:44| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 13:22:18| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 13:38:13| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 13:39:26| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 13:42:30| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 13:43:14| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 13:52:03| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 14:01:01| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 14:03:08| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 14:08:29| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 14:17:18| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 14:23:28| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 14:28:11| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 14:58:58| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 15:02:14| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 15:03:09| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 15:16:26| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 15:17:05| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 15:35:44| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 15:37:09| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 15:37:33| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 15:43:17| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 15:48:15| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 15:54:43| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 15:57:05| Starting Squid Cache version 3.0.PRE5 for
x86_64-pc-linux-g
nu...
2008/08/16 16:07:48| Starting Squ

Re: [squid-users] binary install for SOLARIS

2008-08-19 Thread Amos Jeffries

Van Camp Jan wrote:

Hello,

my team would like to download a binary version for solaris 9 of squid
3.1 .

Does anybody know of such a download site/ url ??



Only private builds so far. 3.1 is not yet a formal release, only 
development beta code snapshots.


Amos
--
Please use Squid 2.7.STABLE4 or 3.0.STABLE8


Re: [squid-users] instalation error

2008-08-19 Thread Amos Jeffries

T.Dadashi wrote:

hi!
im trying to install squid on centos 5.2
but when im trying to make it!
#make OR #make all i face this error! :


.
.
.
/squid/squid-3.0.STABLE2/src/BodyPipe.h:141: undefined reference to `exitAsyncCa
collect2: ld returned 1 exit status
make[3]: *** [ufsdump] Error 1
make[3]: Leaving directory `/squid/squid-3.0.STABLE2/src'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/squid/squid-3.0.STABLE2/src'
make[1]: *** [all] Error 2
make[1]: Leaving directory `/squid/squid-3.0.STABLE2/src'
make: *** [all-recursive] Error 1

would you please help me on this?!



Try STABLE8. Theres many bug fixes, including big ICAP ones since STABEL2.

Amos
--
Please use Squid 2.7.STABLE3 or 3.0.STABLE8


Re: [squid-users] Zero Sized Reply / Invalid response

2008-08-19 Thread Amos Jeffries

Pedro Mansito Pérez wrote:


El 15/08/2008, a las 8:41, Amos Jeffries escribió:


Pedro Mansito Pérez wrote:

Hello,
Our Company is using Squid 2.6.STABLE14 on a Slackware 12.0 box. A 
few weeks ago we began to have errors accessing some web pages, but 
not all, on a supplier web site. If we do not use a proxy server we 
can access those web pages; we have tested it with Safari, Camino and 
Firefox on Mac OS X, and IE 6 and 7, and Firefox on Windows. On Squid 
2.6 we get a Zero Sized Reply error; on a Squid 3.0.STABLE7 test box 
(also on Slackware 12.0) we have an Invalid Response Error. If, on 
Internet Explorer, we disable the use of HTTP/1.1 on proxy 
connections we can access the page using Squid.
The supplier insists that since we can access the pages without 
Squid, the problem must be ours. I replied him that it all begin a 
few weeks ago, so the problem is theirs.


It's a problem with the Source web server.
The Server is sending FORBIDDEN chunked-encoded data to a HTTP/1.0 
client (Squid).


http://squidproxy.wordpress.com/2008/04/29/chunked-decoding/



Hello Amos,

I am not sure that is the problem. I think that the problem is that, 
when the client asks for the use of HTTP/1.1, Squid identifies itself as 
1.1 compliant:


Ah, for squid 2.6 to be doing that it has to be patched to do so. Such 
broken behavior is exactly why squid other than 2.7 are not released 
with that ability.


I still think its the chunk issue, as most in-use squid pass through a 
version of Accept-Encoding that triggers the bug in some HTTP/1.1 servers.




ERROR
The requested URL could not be retrieved

 



While trying to process the request:

GET 
/pls/b2b/pka102.p001?pIdHotel=146241&pIDProducto=1&pIdioma=ESP&pTarifas=2008&pEjercicio=undefined 
HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, 
application/x-shockwave-flash, */*

Accept-Language: es
...


If, on Internet Explorer, I disable the use of HTTP/1.1 on proxy 
connections then Squid gets the page. By the way, squidclient uses 
HTTP/1.0 when talking to squid ... and it gets the page:


[EMAIL PROTECTED](6)$ squidclient -u X -w Y  
'http://www.transhotel.com/pls/b2b/pka102.p001?pIdHotel=146334&pIDProducto=1&pIdioma=ESP&pTarifas=2008&pEjercicio=undefined' 


HTTP/1.0 200 OK
Content-Type: text/html; charset=ISO-8859-1
Server: Oracle-Application-Server-10g OracleAS-Web-Cache-10g/10.1.2.2.0 
(H;max-age=432000+0;age=148389;ecid=217160916730,0)

X-DB-Content-length: 7308
Date: Mon, 18 Aug 2008 07:39:12 GMT
Content-Length: 7299
X-Cache: MISS from proxy.viajesinsular.es



Via: 1.0 proxy.viajesinsular.es:3128 (squid/2.6.STABLE14)


There you go; squid advertising itself as 1.0 to the server.

Try the Accept-Encoding config hack and see if its lets you turn on 
HTTP/1.1 support in clients again.


Amos
--
Please use Squid 2.7.STABLE3 or 3.0.STABLE8


Re: [squid-users] make error on squid-3.0.stable8

2008-08-19 Thread Amos Jeffries

Jeff Pang wrote:

Hello,

when making squid-3.0.stable8 on slackware I got the errors:

neighbors.cc: In function 'void dump_peer_options(StoreEntry*, peer*)':
neighbors.cc:1612: error: 'struct _peer::' has no member named 'carp'
make[3]: *** [neighbors.o] Error 1
make[3]: Leaving directory `/root/squid-3.0.STABLE8/src'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/root/squid-3.0.STABLE8/src'
make[1]: *** [all] Error 2
make[1]: Leaving directory `/root/squid-3.0.STABLE8/src'
make: *** [all-recursive] Error 1


This is the gcc version:

 gcc -v
Reading specs from /usr/lib/gcc/i486-slackware-linux/4.2.3/specs
Target: i486-slackware-linux
Configured with: ../gcc-4.2.3/configure --prefix=/usr --enable-shared
--enable-languages=ada,c,c++,fortran,java,objc --enable-threads=posix
--enable-__cxa_atexit --disable-checking --with-gnu-ld --verbose
--with-arch=i486 --target=i486-slackware-linux
--host=i486-slackware-linux
Thread model: posix
gcc version 4.2.3


The Linux kernel is 2.6.24.5.


How to fixup it. thanks.



You have hit a minor regression in the stable bundle. Fixed shortly after.

You can pull the 3.0 daily snapshot with the fix and a few more bug fixes.

Amos
--
Please use Squid 2.7.STABLE3 or 3.0.STABLE8


Re: [squid-users] src hash in squid-3.0

2008-08-19 Thread Amos Jeffries

Jeff Pang wrote:

great, thanks.
the sorry fact is I can't make squid-3.0STABLE8 successfully in my
slackware Linux.
I have posted a message to the list days ago.


On Wed, Aug 20, 2008 at 5:55 AM, Henrik Nordstrom
<[EMAIL PROTECTED]> wrote:

tis 2008-08-19 klockan 22:41 +0800 skrev Jeff Pang:


does squid-3.0 have src hash option for keeping persistent session
when there're more than one backend server?

It has since 2008-07-17. (3.0.STABLE8)

Regards
Henrik




Sorry for that, and the delay answering. I'm just on my free days after 
developer conference.


You have hit a minor regression in the stable bundle. Fixed shortly after.

You can pull the 3.0 daily snapshot with the fix and a few more bug fixes.

Amos
--
Please use Squid 2.7.STABLE3 or 3.0.STABLE8


Re: [squid-users] parent proxy issue (SOLVED)

2008-08-19 Thread Indunil Jayasooriya
> > You have a typo in your ACL config. 192.168.0.0. is not an IP address. I'm
> > surprised your squid even starts.
>
> 192.168.0.0. is a mistake only in this mail. But, in squid.conf file I have 
> added correctly.
>
> Anyway, I have added a rule for tranceparent interception. I removed it. Now, 
> It works.

--
Thank you
Indunil Jayasooriya


Re: [squid-users] src hash in squid-3.0

2008-08-19 Thread Jeff Pang
great, thanks.
the sorry fact is I can't make squid-3.0STABLE8 successfully in my
slackware Linux.
I have posted a message to the list days ago.


On Wed, Aug 20, 2008 at 5:55 AM, Henrik Nordstrom
<[EMAIL PROTECTED]> wrote:
> tis 2008-08-19 klockan 22:41 +0800 skrev Jeff Pang:
>
>> does squid-3.0 have src hash option for keeping persistent session
>> when there're more than one backend server?
>
> It has since 2008-07-17. (3.0.STABLE8)
>
> Regards
> Henrik
>
>


Re: [squid-users] parent proxy issue

2008-08-19 Thread Amos Jeffries

Indunil Jayasooriya wrote:

Hi,

I want to forward all the webtraffice to a parent proxy.

I have given below lines in squid.conf file

cache_peer 192.168.0.3 parent 3128 0 no-query default
acl mynet src 192.168.0.0./24
http_access allow mynet
never_direct allow all

But. it does not work?

Both are squid 2.6 on RH EL 5

ANy idea?



Have you tried to contact RHEL whom you pay for support?
Their package version has been aging into obsolescence for a few years now.

You have a typo in your ACL config. 192.168.0.0. is not an IP address. 
I'm surprised your squid even starts.


Amos
--
Please use Squid 2.7.STABLE3 or 3.0.STABLE8


Re: [squid-users] IPv6-enabled Squid?

2008-08-19 Thread Amos Jeffries

Steve Snyder wrote:
Is there a current guesstimate as to when an IPv6-capable version of 
Squid will be released?


According to the FAQ, IPv6 support is already checked into the Squid3 
trunk.  It doesn't give any indicate, though, of when this 
functionality will be available in a non-development release.


Cluestick, please?  Thanks.


Most of the developers have just revisited the issue in our recent 
get-together. It's looking hopeful for a late October release.


Meanwhile 3-HEAD should be stable enough at present to begin your local 
testing if its urgent.


Amos
--
Please use Squid 2.7.STABLE3 or 3.0.STABLE8


Re: [squid-users] Squid on Debian etch with a 2.4 kernel

2008-08-19 Thread Tim Bates

Steven Jones wrote:
I have squid refusing to run on the aboveit appears Debian has set 
squid up such that it only runs on a 2.6 kernel

http://wiki.kartbuilding.net/index.php/Squid_Issue,_Etch_and_a_2.4_Kernel
Sarge squid packages are not longer there...
Does anyone know of a ready made squid-.deb out there that I can use? 
I think the short answer is that if you want to run an outdated kernel, 
you're going to have to start compiling some things yourself.
That said. you could try the packages from either sarge-backports or 
etch-backports. One of those might work.


TB


RE: [squid-users] Adding secondary Disk for Cache

2008-08-19 Thread Adam Carter
> Step 0) Consider the implications on RAM or adding more cache_dir :-)
>
> You might want to reduce cache_mem or add more RAM.
> http://wiki.squid-cache.org/SquidFaq/SquidMemory#how-much-ram

Sorry about the typo - it should be "Consider the implications on RAM OF adding 
more cache_dir"


RE: [squid-users] Adding secondary Disk for Cache

2008-08-19 Thread Adam Carter
> Assuming your disk is attached, your OS recognizes it and the disk is
> formatted:
>
> 1) Ensure the effective_squid_user has write capability on
> the mount point
> 2) Add a cache_dir directive to squid.conf referencing the
> new mount point
> 3) Stop squid
> 4) Run squid -z (as root or as the effective_squid_user)
> 5) Start squid

Step 0) Consider the implications on RAM or adding more cache_dir :-)

You might want to reduce cache_mem or add more RAM.
http://wiki.squid-cache.org/SquidFaq/SquidMemory#how-much-ram


[squid-users] Squid on Debian etch with a 2.4 kernel

2008-08-19 Thread Steven Jones

Hi,

I have squid refusing to run on the aboveit appears Debian has set 
squid up such that it only runs on a 2.6 kernel


http://wiki.kartbuilding.net/index.php/Squid_Issue,_Etch_and_a_2.4_Kernel

Sarge squid packages are not longer there...

Does anyone know of a ready made squid-.deb out there that I can use?

regards

Steven


Re: [squid-users] how to force to refresh when at offline_mode is on

2008-08-19 Thread Mr Crack
thanks you for your reply

On Tue, Aug 19, 2008 at 1:04 AM, Matus UHLAR - fantomas
<[EMAIL PROTECTED]> wrote:
> On 18.08.08 23:10, Mr Crack wrote:
>> Subject: [squid-users] how to force to refresh when at offline_mode is on
>>
>> when offline_mode is off, it becomes slow
>> when offline_mode is on, old webpages comes out from cache
>> how to fix this problem
>> as for me offline_mode is also very essential because our internet
>> connection is very slow
>
> you can't refresh in offline mode because offline mode means that no pages
> will be fetched at all.
>
> You probably need to tune your cache to effective cache everything possible
> - use large cache, use newest squid version and others
> --
> Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> The 3 biggets disasters: Hiroshima 45, Tschernobyl 86, Windows 95
>


Re: [squid-users] Problem with authentication to IIS site for users behind squid proxy

2008-08-19 Thread Adrian Chadd
Don't stop using Squid-2 just yet; plenty more changes will be going
into Squid-2 whilst Squid-3 is maturing.

Amos and co have plans to forward port the missing features from
Squid-2 to Squid-3 whilst I  and others are adding in other features
to Squid-2 for performance and conformity. Those changes need to be
tested in production as well. :)




Adrian


2008/8/19 Leonardo Rodrigues Magalhães <[EMAIL PROTECTED]>:
>
>
> Amos Jeffries escreveu:
>>
>> What Adrian continuously fails to mention, is that he is the only
>> developer actively working on improving Squid-2. The rest of us major
>> developers have decided Squid-2 should be superseded by Squid-3 and are
>> improving Squid-3. Importing features from Squid-2 to Squid-3 as people need
>> them.
>>
>> As for changing; Squid-3 has more and better ACL controls than Squid-2.
>> Squid-2 has more work from Adrian in speed improvements than Squid-3.
>>
>> Based on that list you gave, it's a matter of choice for you whether you
>> need those new and finer ACL controls in Squid-3 or more speed.
>
>   tough decision . as it's always a good idea to stick with the version
> the majority of the developers are working (3.0), the missing of
> NTLM-authentication passtrough is giving me hard times in squid 3.0.
>
>   i'll probably stick with 3.0 where it's possible ... but unfortunelly,
> when i confirmed that 3.0 cant do, yet, NTLM-authentication passtrough, i
> had to back to 2.7 in some sites.
>
>   but i hope to get them back to squid 3.0 as soon as possible :)
>
> --
>
>
>Atenciosamente / Sincerily,
>Leonardo Rodrigues
>Solutti Tecnologia
>http://www.solutti.com.br
>
>Minha armadilha de SPAM, NÃO mandem email
>[EMAIL PROTECTED]
>My SPAMTRAP, do not email it
>
>
>
>
>


Re: [squid-users] IPv6-enabled Squid?

2008-08-19 Thread Henrik Nordstrom
tis 2008-08-19 klockan 10:42 -0400 skrev Steve Snyder:
> Is there a current guesstimate as to when an IPv6-capable version of 
> Squid will be released?

A guess is around the October timeframe..

Regards
Henrik



Re: [squid-users] src hash in squid-3.0

2008-08-19 Thread Henrik Nordstrom
tis 2008-08-19 klockan 22:41 +0800 skrev Jeff Pang:

> does squid-3.0 have src hash option for keeping persistent session
> when there're more than one backend server?

It has since 2008-07-17. (3.0.STABLE8)

Regards
Henrik



Re: [squid-users] Can't controle adaptation_access properly in ICAP.

2008-08-19 Thread Christos Tsantilas

Masaru AKAI wrote:

Hello Mr. Tsantilas & Squid Developers,

I reinstall Squid3.0.STABLE8, and changed squid.conf.
#delete "adaptation_service_set" and "adaptation_access"

 >>>squid.conf(summary)<<<
icap_service service_1 respmod_precache 1 
icap://192.168.10.231:1344/interscan
icap_service service_2 respmod_precache 1 
icap://192.168.10.232:1344/interscan


icap_class interscan service_1 service_2
 >>>squid.conf(summary)<<<

and Run squid.
I find Warning in cache.log.
"WARNING: Multiple ICAP services per icap_class are not yet supported. 
See Squid bug #2087."


But working well. :-)


Does not work actually... The initial plan for icap_class directive was 
to be used to allow chaining multiple (different) icap services.



I shutdown 192.168.10.231's service, and see with tcpdump in 
192.168.10.232.


I think that warning is unnecessary.

Thank you and Best regards,




Re: [squid-users] Reverse Proxy

2008-08-19 Thread Chris Robertson

Mario Almeida wrote:

Hi All,

Below is the setting I have done to test a reverse proxy

http_port 3128 accel defaultsite=xyz.example.com vhost

cache_peer 172.27.1.10 parent 8080 0 no-query originserver name=server1
acl server1_acl dstdomain www.xyz.example.com xyz.example.com
cache_peer_access server1 allow server1_acl
cache_peer_access server1 deny all

But could not get it done
Bellow is the error message what I get


ERROR
The requested URL could not be retrieved

While trying to retrieve the URL: http:// xyz.example.com /

The following error was encountered:

* Unable to forward this request at this time. 


This request could not be forwarded to the origin server or to any parent
caches. The most likely cause for this error is that:

* The cache administrator does not allow this cache to make direct
connections to origin servers, and
  


This seems unlikely given the cache_peer_access line, so...

* All configured parent caches are currently unreachable. 
  


This is far more likely the issue at hand.  Check your cache.log for any 
clues.  Verify you have the right IP and port for your parent server, 
and that there are no firewall rules preventing access.  Try using wget 
or Lynx on your Squid server to grab a page off the origin server.



Your cache administrator is root.



Regards,
Remy
  


Chris


Re: [squid-users] Adding secondary Disk for Cache

2008-08-19 Thread Chris Robertson

Juan C. Crespo R. wrote:

Dears

   I want to ask if anyone could tell me an easy way (step by step) to 
add a secondary disk to the squid Cache


Thanks


Assuming your disk is attached, your OS recognizes it and the disk is 
formatted:


1) Ensure the effective_squid_user has write capability on the mount point
2) Add a cache_dir directive to squid.conf referencing the new mount point
3) Stop squid
4) Run squid -z (as root or as the effective_squid_user)
5) Start squid

Chris


Re: [squid-users] HTTPS site access problem

2008-08-19 Thread Chris Robertson

Evren Demirkan wrote:

Hello,
I am using SQUID 2.7.STABLE2 on an Arch Linux server. Everything seems
OK so far, except I am unable to connect a SSL site,
https://evas.tcmb.gov.tr/

Normally when i connect this site it should ask me my user certificate
to select, but no.

Here are my tails from acces.log

1219155728.992  10845 10.0.0.95 TCP_MISS/200 117 CONNECT
evas.tcmb.gov.tr:443 - DIRECT/212.174.145.17 -
1219155747.294  18302 10.0.0.95 TCP_MISS/200 117 CONNECT
evas.tcmb.gov.tr:443 - DIRECT/212.174.145.17 -
1219156647.386 900091 10.0.0.95 TCP_MISS/200 117 CONNECT
evas.tcmb.gov.tr:443 - DIRECT/212.174.145.17 -

and with mime_hdrs on

1219157421.509  10505 10.0.0.95 TCP_MISS/200 117 CONNECT
evas.tcmb.gov.tr:443 - DIRECT/212.174.145.17 - [User-Agent:
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322;
.NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR
3.5.21022)\r\nProxy-Connection: Keep-Alive\r\nContent-Length:
0\r\nHost: evas.tcmb.gov.tr\r\nPragma: no-cache\r\n] []

no answer is coming from the server.



 Also I can successfully connect  directly or using SQUID 2.0
maintained in Centos 4.X.
  


Heh... Squid 2.0?  That would be something to see, as it's almost ten 
years old (http://www.squid-cache.org/Versions/v2/2.0/).



Using my archlinux setup mentioned above, I can successfully connected
bank websites, Gmail ,etc.through SSL  without a problem. I am using a
basic squid.conf with http_port 8080 and some acl entires.

Are there any more options /tweaks you may offer?
  


See the FAQ entry at 
http://wiki.squid-cache.org/SquidFaq/SystemWeirdnesses#head-699d810035c099c8b4bff21e12bb365438a21027 
for one possibility.



Best Regards,
Evren
  


Chris


Re: [squid-users] Adding secondary Disk for Cache

2008-08-19 Thread Pieter De Wit

Juan C. Crespo R. wrote:

Dears

   I want to ask if anyone could tell me an easy way (step by step) to 
add a secondary disk to the squid Cache


Thanks

Hi,

Simply add the drive to the OS as per normal - then add another 
cache_dir line to squid.conf.


Cheers,

Pieter


Re: [squid-users] external_acl program...

2008-08-19 Thread Chris Robertson

John Doe wrote:

Hi,

I have a little problem with my external_acl C program.
Everything works fine with a php version, but my original C version, for some 
tricky reason, does not...
Tested both from the console and they seem to behave exactly in the same way...
I am calling either program with the same syntax:

  external_acl_type filter children=8 concurrency=0 ttl=0 negative_ttl=0 %PATH 
filter

The following in PHP works fine with squid:

  while (!feof(STDIN)) {
$url = fgets(STDIN);
fwrite(STDERR, 'filter: url='.$url."\n");
fwrite(STDOUT, 'OK user=allowed'."\n");
fwrite(STDERR, 'filter: end of while...'."\n");
  }

The following in C does not work well with squid:

  while (fgets(url, sizeof(url), stdin)) {
// let's ignore the '\n' at the end of url, it only appear in the logs 
anyway...
fprintf(stderr, "filter: url=%s\n", url);
printf("OK user=allowed\n");
fprintf(stderr, "filter: end of while...\n");
  }

With the C version, if I load a test page with 3 images going through squid, I 
will have the following in the squid_cache.log:

  filter: url=/path/to/img1.gif
  filter: end of while...
  filter: url=/path/to/img2.gif
  filter: end of while...
  filter: url=/path/to/img3.gif
  filter: end of while...

and then squid will just wait (for the 3 instances of my program?), blocking 
everything...
When I stop squid, I get 3 messages like:

  WARNING: Closing client 192.168.16.23 connection due to lifetime timeout
  2008/08/19 17:05:18|http://localhost/path/to/img1.gif

Any idea what is wrong with my C code...?

Thx,
JD
  


Sounds like you are having problems with output buffering.  Try adding...

fflush(stdout);

...after your fprintf statement.

Chris


[squid-users] Adding secondary Disk for Cache

2008-08-19 Thread Juan C. Crespo R.

Dears

   I want to ask if anyone could tell me an easy way (step by step) to 
add a secondary disk to the squid Cache


Thanks


Re: [squid-users] src hash in squid-3.0

2008-08-19 Thread Chris Robertson

Jeff Pang wrote:

hello,

does squid-3.0 have src hash option for keeping persistent session
when there're more than one backend server?
thanks!
  


Yes.  See 
http://www.squid-cache.org/Versions/v3/3.0/cfgman/cache_peer.html for 
other available cache_peer options in Squid 3, and 
http://www.squid-cache.org/Versions/v3/3.0/cfgman/ for a list of the 
other available squid.conf directives.


Chris


Re: [squid-users] external_acl program...

2008-08-19 Thread John Doe
More info on my problem.
If I use children=1, the PHP version still works fine.

But the C version still does not.
It is a bit better as I can retrieve 3 images before squid blocks the 1st time
Then I stop the browser and reload and I get the 2 missing images on the next 
try.
I get the following in the logs:

  filter: url=/path/to/image1.gif<= only one...
  2008/08/19 17:54:35| WARNING: All filter processes are busy.
  2008/08/19 17:54:35| WARNING: up to 1 pending requests queued
  2008/08/19 17:54:35| aclMatchExternal: 'filter' queue overload. Request 
rejected '/path/to/image2.gif'.
  2008/08/19 17:54:35| aclMatchExternal: 'filter' queue overload. Request 
rejected '/path/to/image3.gif'.
  2008/08/19 17:54:35| aclMatchExternal: 'filter' queue overload. Request 
rejected '/path/to/image4.gif'.
  2008/08/19 17:55:29| aclMatchExternal: 'filter' queue overload. Request 
rejected '/path/to/image5.gif'.
  2008/08/19 17:55:29| aclMatchExternal: 'filter' queue overload. Request 
rejected '/path/to/image2.gif'.
  2008/08/19 17:55:29| aclMatchExternal: 'filter' queue overload. Request 
rejected '/path/to/image3.gif'.
  2008/08/19 17:55:29| aclMatchExternal: 'filter' queue overload. Request 
rejected '/path/to/image4.gif'.

Thx,
JD


  



[squid-users] external_acl program...

2008-08-19 Thread John Doe
Hi,

I have a little problem with my external_acl C program.
Everything works fine with a php version, but my original C version, for some 
tricky reason, does not...
Tested both from the console and they seem to behave exactly in the same way...
I am calling either program with the same syntax:

  external_acl_type filter children=8 concurrency=0 ttl=0 negative_ttl=0 %PATH 
filter

The following in PHP works fine with squid:

  while (!feof(STDIN)) {
$url = fgets(STDIN);
fwrite(STDERR, 'filter: url='.$url."\n");
fwrite(STDOUT, 'OK user=allowed'."\n");
fwrite(STDERR, 'filter: end of while...'."\n");
  }

The following in C does not work well with squid:

  while (fgets(url, sizeof(url), stdin)) {
// let's ignore the '\n' at the end of url, it only appear in the logs 
anyway...
fprintf(stderr, "filter: url=%s\n", url);
printf("OK user=allowed\n");
fprintf(stderr, "filter: end of while...\n");
  }

With the C version, if I load a test page with 3 images going through squid, I 
will have the following in the squid_cache.log:

  filter: url=/path/to/img1.gif
  filter: end of while...
  filter: url=/path/to/img2.gif
  filter: end of while...
  filter: url=/path/to/img3.gif
  filter: end of while...

and then squid will just wait (for the 3 instances of my program?), blocking 
everything...
When I stop squid, I get 3 messages like:

  WARNING: Closing client 192.168.16.23 connection due to lifetime timeout
  2008/08/19 17:05:18|http://localhost/path/to/img1.gif

Any idea what is wrong with my C code...?

Thx,
JD


  



[squid-users] HTTPS site access problem

2008-08-19 Thread Evren Demirkan
Hello,
I am using SQUID 2.7.STABLE2 on an Arch Linux server. Everything seems
OK so far, except I am unable to connect a SSL site,
https://evas.tcmb.gov.tr/

Normally when i connect this site it should ask me my user certificate
to select, but no.

Here are my tails from acces.log

1219155728.992  10845 10.0.0.95 TCP_MISS/200 117 CONNECT
evas.tcmb.gov.tr:443 - DIRECT/212.174.145.17 -
1219155747.294  18302 10.0.0.95 TCP_MISS/200 117 CONNECT
evas.tcmb.gov.tr:443 - DIRECT/212.174.145.17 -
1219156647.386 900091 10.0.0.95 TCP_MISS/200 117 CONNECT
evas.tcmb.gov.tr:443 - DIRECT/212.174.145.17 -

and with mime_hdrs on

1219157421.509  10505 10.0.0.95 TCP_MISS/200 117 CONNECT
evas.tcmb.gov.tr:443 - DIRECT/212.174.145.17 - [User-Agent:
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322;
.NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR
3.5.21022)\r\nProxy-Connection: Keep-Alive\r\nContent-Length:
0\r\nHost: evas.tcmb.gov.tr\r\nPragma: no-cache\r\n] []

no answer is coming from the server.



 Also I can successfully connect  directly or using SQUID 2.0
maintained in Centos 4.X.

Using my archlinux setup mentioned above, I can successfully connected
bank websites, Gmail ,etc.through SSL  without a problem. I am using a
basic squid.conf with http_port 8080 and some acl entires.

Are there any more options /tweaks you may offer?
Best Regards,
Evren


[squid-users] IPv6-enabled Squid?

2008-08-19 Thread Steve Snyder
Is there a current guesstimate as to when an IPv6-capable version of 
Squid will be released?

According to the FAQ, IPv6 support is already checked into the Squid3 
trunk.  It doesn't give any indicate, though, of when this 
functionality will be available in a non-development release.

Cluestick, please?  Thanks.


[squid-users] src hash in squid-3.0

2008-08-19 Thread Jeff Pang
hello,

does squid-3.0 have src hash option for keeping persistent session
when there're more than one backend server?
thanks!


RE: [squid-users] Where do you put this sentence?

2008-08-19 Thread Adam Carter
> I'm using diskd, I found this
> http://wiki.squid-cache.org/SquidFaq/DiskDaemon and says "ipcs | awk
> '/squid/ {printf "ipcrm -%s %s\n", $1, $2}' | /bin/sh" in "Sometimes
> shared memory and message queues aren't released when Squid exits".
> I'm using linux, where I should put that sentence?
> Thanks a lot
> Best Regards

You run it at a root shell.

But did you notice on that page;

"Modern Linux systems the Disk Daemon has been trumped by extremely fast AUFS. 
diskd is still recommended for BSD variants. "

So since you're running linux change diskd to aufs in your cache_dirs, and 
restart. The format on disk is the same so you wont loose your content. Then 
don't worry about the ipcs command...


Re: [squid-users] how to force to refresh when at offline_mode is on

2008-08-19 Thread Matus UHLAR - fantomas
On 18.08.08 23:10, Mr Crack wrote:
> Subject: [squid-users] how to force to refresh when at offline_mode is on
> 
> when offline_mode is off, it becomes slow
> when offline_mode is on, old webpages comes out from cache
> how to fix this problem
> as for me offline_mode is also very essential because our internet
> connection is very slow

you can't refresh in offline mode because offline mode means that no pages
will be fetched at all.

You probably need to tune your cache to effective cache everything possible
- use large cache, use newest squid version and others
-- 
Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
The 3 biggets disasters: Hiroshima 45, Tschernobyl 86, Windows 95


Re: [squid-users] Problem with authentication to IIS site for users behind squid proxy

2008-08-19 Thread Leonardo Rodrigues Magalhães



Amos Jeffries escreveu:


What Adrian continuously fails to mention, is that he is the only 
developer actively working on improving Squid-2. The rest of us major 
developers have decided Squid-2 should be superseded by Squid-3 and 
are improving Squid-3. Importing features from Squid-2 to Squid-3 as 
people need them.


As for changing; Squid-3 has more and better ACL controls than Squid-2.
Squid-2 has more work from Adrian in speed improvements than Squid-3.

Based on that list you gave, it's a matter of choice for you whether 
you need those new and finer ACL controls in Squid-3 or more speed.


   tough decision . as it's always a good idea to stick with the 
version the majority of the developers are working (3.0), the missing of 
NTLM-authentication passtrough is giving me hard times in squid 3.0.


   i'll probably stick with 3.0 where it's possible ... but 
unfortunelly, when i confirmed that 3.0 cant do, yet, 
NTLM-authentication passtrough, i had to back to 2.7 in some sites.


   but i hope to get them back to squid 3.0 as soon as possible :)

--


Atenciosamente / Sincerily,
Leonardo Rodrigues
Solutti Tecnologia
http://www.solutti.com.br

Minha armadilha de SPAM, NÃO mandem email
[EMAIL PROTECTED]
My SPAMTRAP, do not email it






[squid-users] parent proxy issue

2008-08-19 Thread Indunil Jayasooriya
Hi,

I want to forward all the webtraffice to a parent proxy.

I have given below lines in squid.conf file

cache_peer 192.168.0.3 parent 3128 0 no-query default
acl mynet src 192.168.0.0./24
http_access allow mynet
never_direct allow all

But. it does not work?

Both are squid 2.6 on RH EL 5

ANy idea?


-- 
Thank you
Indunil Jayasooriya


[squid-users] Squid Memory Usage

2008-08-19 Thread Darryl Steyn
Hi,

I was wondering if you guys should shed some light on the memory usage
of my Squid setup. When I use the cache manager it is showing the
following stats;
StoreEntry4855150482585182585200.0166
551504825851825852010000000.000.00
   0.006783158
MD5 digest16551504886173861740.01225515048
   861738617410000000.000.000.00
 6997908
Total-111456253890483913472.1710011145625
  38904839134710000000.000.000.00
  201907433

When doing a top on the unit Squid is using 600mb+. It reaches 1500mb
usage in 4-5days and then dies.
58430 nobody 2   0   662M   647M poll   1  56:24  4.98%  4.98% squid

Here is the memory settings from my squid.conf
# Memory Related #
cache_mem 32 MB
maximum_object_size 32768 KB
maximum_object_size_in_memory 128 KB
minimum_object_size 0 KB
cache_swap_low 90
cache_swap_high 96
ipcache_size 10240
ipcache_low 90
ipcache_high 95
memory_pools off
cache_replacement_policy heap GDSF
memory_replacement_policy lru
quick_abort_min 10 kb
quick_abort_pct 50%
quick_abort_max 1024 kb
range_offset_limit 0 KB

# Disk Information #
cache_dir ufs /mnt/cache 12000 16 256
cache_dir ufs /mnt/cache2 22000 16 256
store_dir_select_algorithm least-load

Store Directory Statistics:
Store Entries  : 5515249
Maximum Swap Size  : 34816000 KB
Current Store Swap Size: 31334364 KB
Current Capacity   : 90% used, 10% free


The timeout settings are all low, there are no custom refresh
patterns, and I am using squidGuard as a helper with 40 children. The
unit is doing about 30RPS which the hardware is definitely able to
handle more than double this.

The cache drives are full and the cache has been in place for a few
years now. We are running Squid 2.6 stable 18.

If the cache drives are full, when squid starts is that not the memory
it should use and hover around that mark? I understand that it will
change but it grows rapidly and then dies.

Please let me know if there is anything more I can give you to help with this.

Thanks in advance,
Darryl