RE: [squid-users] Where are the objects?
Hi, Squid saves the files to var/cache in subfolders, or any other folder you configure using cache_dir. If you shut down squid, delete the FILES in this folder and its subfolder (do not delete folders, just files), restart squid and access a cacheable file, you should see a new file added in a sub folder (as well as a swap file). The new file in one of the sub directories is the cached version of the resource. You can open it in a text editor. If the original resource was text (html, css, etc) it will be pretty easy to understand this file. If you do not see a file on disk, it is possible that the resource is not cacheable, or the configuration of your squid does not allow disk caching. Hope this helps, E -Original Message- From: Wilson Hernandez - MSD, S. A. [mailto:[EMAIL PROTECTED] Sent: Saturday, November 22, 2008 12:16 AM To: squid-users@squid-cache.org Subject: [squid-users] Where are the objects? I have a question regarding the storage of objects: Where is really saved to on disk? Is it in /var/log/squid3/access.log or in: /var/log/squid3/store.log? I've noticed that in the /var/log/squid3/cache swaplog there isn't any entries as stated below. How exactly are objects saved? 2008/11/20 08:49:53| Starting Squid Cache version 3.0.PRE5 for i486-pc-linux-gnu... 2008/11/20 08:49:53| Process ID 2789 2008/11/20 08:49:53| With 1024 file descriptors available 2008/11/20 08:49:53| DNS Socket created at 0.0.0.0, port 32794, FD 8 2008/11/20 08:49:53| Adding nameserver 200.88.127.22 from squid.conf 2008/11/20 08:49:53| Adding nameserver 196.3.81.5 from squid.conf 2008/11/20 08:49:53| Adding nameserver 200.88.127.23 from squid.conf 2008/11/20 08:49:53| Adding nameserver 196.3.81.182 from squid.conf 2008/11/20 08:49:53| Unlinkd pipe opened on FD 13 2008/11/20 08:49:53| Swap maxSize 1024 KB, estimated 787692 objects 2008/11/20 08:49:53| Target number of buckets: 39384 2008/11/20 08:49:53| Using 65536 Store buckets 2008/11/20 08:49:53| Max Mem size: 102400 KB 2008/11/20 08:49:53| Max Swap size: 1024 KB 2008/11/20 08:49:53| Rebuilding storage in /var/log/squid3/cache (CLEAN) 2008/11/20 08:49:53| Using Least Load store dir selection 2008/11/20 08:49:53| Current Directory is / 2008/11/20 08:49:53| Loaded Icons. 2008/11/20 08:49:53| Accepting transparently proxied HTTP connections at 192.168.2.1, port 3128, FD 14. 2008/11/20 08:49:53| HTCP Disabled. 2008/11/20 08:49:53| WCCP Disabled. 2008/11/20 08:49:53| Ready to serve requests. 2008/11/20 08:50:13| Done scanning /var/log/squid3/cache swaplog (0 entries) 2008/11/20 08:50:13| Finished rebuilding storage from disk. 2008/11/20 08:50:13| 0 Entries scanned 2008/11/20 08:50:13| 0 Invalid entries. 2008/11/20 08:50:13| 0 With invalid flags. 2008/11/20 08:50:13| 0 Objects loaded. 2008/11/20 08:50:13| 0 Objects expired. 2008/11/20 08:50:13| 0 Objects cancelled. 2008/11/20 08:50:13| 0 Duplicate URLs purged. 2008/11/20 08:50:13| 0 Swapfile clashes avoided. 2008/11/20 08:50:13| Took 19.7 seconds ( 0.0 objects/sec). 2008/11/20 08:50:13| Beginning Validation Procedure 2008/11/20 08:50:13| Completed Validation Procedure 2008/11/20 08:50:13| Validated 25 Entries 2008/11/20 08:50:13| store_swap_size = 0 2008/11/20 08:50:13| storeLateRelease: released 0 objects 2008/11/20 08:50:41| Preparing for shutdown after 0 requests 2008/11/20 08:50:41| Waiting 30 seconds for active connections to finish 2008/11/20 08:50:41| FD 14 Closing HTTP connection 2008/11/20 08:51:12| Shutting down... 2008/11/20 08:51:12| Closing unlinkd pipe on FD 13 2008/11/20 08:51:12| storeDirWriteCleanLogs: Starting... 2008/11/20 08:51:12| Finished. Wrote 0 entries. 2008/11/20 08:51:12| Took 0.0 seconds ( 0.0 entries/sec). CPU Usage: 0.036 seconds = 0.024 user + 0.012 sys Maximum Resident Size: 0 KB Page faults with physical i/o: 0 Memory usage for squid via mallinfo(): total space in arena:2736 KB Ordinary blocks: 2715 KB 9 blks Small blocks: 0 KB 0 blks Holding blocks: 1500 KB 7 blks Free Small blocks: 0 KB Free Ordinary blocks: 20 KB Total in use:4215 KB 154% Total free:20 KB 1% 2008/11/20 08:51:12| Squid Cache (Version 3.0.PRE5): Exiting normally. 2008/11/20 08:51:18| Starting Squid Cache version 3.0.PRE5 for i486-pc-linux-gnu... 2008/11/20 08:51:18| Process ID 2824 2008/11/20 08:51:18| With 1024 file descriptors available 2008/11/20 08:51:18| DNS Socket created at 0.0.0.0, port 32794, FD 8 2008/11/20 08:51:18| Adding nameserver 200.88.127.22 from squid.conf 2008/11/20 08:51:18| Adding nameserver 196.3.81.5 from squid.conf 2008/11/20 08:51:18| Adding nameserver 200.88.127.23 from squid.conf 2008/11/20 08:51:18| Adding nameserver 196.3.81.182 from squid.conf 2008/11/20 08:51:18| Unlinkd pipe opened on FD 13 2008/11/20 08:51:18| Swap maxSize 10
[squid-users] Accelerator converts HTTP1.1 to HTTP1.0?
Hi, I have a simple accelerator configuration for a web server, both squid and web server running on my local same machine on different ports/IPs. When I access a static file with the web server port, I see in the web server log GET /scripts/util.js HTTP/1.1" 304 - When I access the same file using the squid port, the web server log is: GET /scripts/util.js HTTP/1.0" 304 - I also get the same result using telnet to both servers, and using a browser: open 10.10.20.164 8080 GET /scripts/ util.js HTTP/1.1 Host: www.mydomain.com When I configure squid to go to our production server IP, it is also the same. Direct access to the ser server from telnet/browser is 1.1, access from squid using HTTP/1.1 request is logged in the web server as HTTP/1.0. Any ideas? This is the squid setup in short: http_port 127.0.0.4:80 accel defaultsite=www.mydomain.com cache_peer 10.10.20.164 parent 8080 0 no-query originserver name=parent_sl acl port80 port 80 http_access allow port80 cache_peer_domain parent_sl .mydomain.com This is in addition to the default config file. I also have a regexp acl to allow one folder, I think it is not really relevant here (but should be mentioned). Thanks Elli
Re: [squid-users] Re: Accessing OWA2007 reverse-proxied by ISA Server
[EMAIL PROTECTED] wrote: See Thread at: http://www.techienuggets.com/Detail?tx=58290 Posted on behalf of a User I think there is something wrong in this OWA server setup: Check with nslookup if OWA2007 have round robin active: C:\>nslookup mail.telecomitalia.it Server: dns1.tiscaliia.it Address: 213.205.32.10 Non-authoritative answer: Name:mail.telecomitalia.it Addresses: 156.54.233.103, 156.54.233.102 If is active like my example use thi in your squid configuration (squid.conf): balance_on_multiple_ip off A round robin configuration for a OWA front-end is a wrong solution because OWA is a session based web application. Lodovico Bertolini In Response To: Hi folks, I'm experiencing some trouble to acces an OWA 2007 server, located behing an ISA reverse proxy, through our Squid 2.6ST18 proxy. When I try to access it, IE or Firefox keeps waiting for data to tranfer, the page stays blank and it nevers falls nor on time-out or any other error. Squid log shows lines that let think that there is some traffic transferred: 1225194824.927 1042 10.1.103.104 TCP_MISS/200 3088 CONNECT OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - 1225194825.050118 10.1.103.104 TCP_MISS/200 1056 CONNECT OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - 1225194825.185133 10.1.103.104 TCP_MISS/200 4524 CONNECT OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - 1225194825.367168 10.1.103.104 TCP_MISS/200 2371 CONNECT OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - 1225194849.719 24520 10.1.103.104 TCP_MISS/200 155 CONNECT OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - CONNECT is a sign of a browser configured to use a forward-proxy To front-end OWA you need a reverse-proxy. See the OWA config examples in the Squid FAQ. http://wiki.squid-cache.org/ConfigExamples/SquidAndOutlookWebAccess Amos -- Please be using Current Stable Squid 2.7.STABLE5 or 3.0.STABLE10 Current Beta Squid 3.1.0.2
[squid-users] cache_peer, time based
Hey does anybody know how I would do something like the following... I have a squid server that under normal circumstances will always fetch objects directly. However from 12:00 at night to 8:00am , the line is saturated from p2p use. Now the same time we have another cache on a different line for different purposes that will be entirely free during non working hours. What I would like to do is use the cache_peer directive for this cache but it must ONLY be used between 12:00 and 8:00 , the rest of the time it must go directly. Possible? Scripts? Any advice?
[squid-users] Re: Accessing OWA2007 reverse-proxied by ISA Server
See Thread at: http://www.techienuggets.com/Detail?tx=58290 Posted on behalf of a User I think there is something wrong in this OWA server setup: Check with nslookup if OWA2007 have round robin active: C:\>nslookup mail.telecomitalia.it Server: dns1.tiscaliia.it Address: 213.205.32.10 Non-authoritative answer: Name:mail.telecomitalia.it Addresses: 156.54.233.103, 156.54.233.102 If is active like my example use thi in your squid configuration (squid.conf): balance_on_multiple_ip off A round robin configuration for a OWA front-end is a wrong solution because OWA is a session based web application. Lodovico Bertolini In Response To: Hi folks, I'm experiencing some trouble to acces an OWA 2007 server, located behing an ISA reverse proxy, through our Squid 2.6ST18 proxy. When I try to access it, IE or Firefox keeps waiting for data to tranfer, the page stays blank and it nevers falls nor on time-out or any other error. Squid log shows lines that let think that there is some traffic transferred: 1225194824.927 1042 10.1.103.104 TCP_MISS/200 3088 CONNECT OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - 1225194825.050118 10.1.103.104 TCP_MISS/200 1056 CONNECT OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - 1225194825.185133 10.1.103.104 TCP_MISS/200 4524 CONNECT OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - 1225194825.367168 10.1.103.104 TCP_MISS/200 2371 CONNECT OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - 1225194849.719 24520 10.1.103.104 TCP_MISS/200 155 CONNECT OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - Direct connexion (I mean bypassing our Squid proxy) to this website works fine. As i had a similar problem some time ago on another OWA installation, I tried to deactivate "Accept-Encoding" header in Squid Proxy but it is the same problem. Our Squid Installation is quite basic, we don't authenticate our clients, only a small cache is done on the fly. For those who would give a try, I pasted the URL at http://pastebin.com/m44904a19 to prevent it from showing up in mailing lists archives, as this server belongs to a partner. Please do not paste it in your replies. Thanks for any help. Momo
[squid-users] Recommended Store Size
Is there any recommended store size for a forward proxy for a given link speed? We have a 70 Mbps link, and a client base of approximately 4,000 to 4,500. Thanks in advance for your suggestions. Regards NYAMUL HASSAN
Re: [squid-users] Recompiling Squid
Hi, > So it's not worth doing compilation excluding unused feature? You may consider using strip after the compilation/installation, read the manpage, if you want to save space / memory footprint. Hth. Regards, Robert
Re: [squid-users] Recompiling Squid
On Sat, Nov 22, 2008 at 8:26 PM, Amos Jeffries <[EMAIL PROTECTED]> wrote: > muhammad panji wrote: >> >> Dear All, >> If I recompile squid and exclude some features that I won't use will >> it make squid lighter and consume less resources? thanks in advance >> regards, >> > > It will, but very marginally. Most unused components only waste a little > memory it takes to store the compiled code. So it's not worth doing compilation excluding unused feature? thanks regards, -- Muhammad Panji http://sumodirjo.wordpress.com
Re: [squid-users] Recompiling Squid
muhammad panji wrote: Dear All, If I recompile squid and exclude some features that I won't use will it make squid lighter and consume less resources? thanks in advance regards, It will, but very marginally. Most unused components only waste a little memory it takes to store the compiled code. Amos -- Please be using Current Stable Squid 2.7.STABLE5 or 3.0.STABLE10 Current Beta Squid 3.1.0.2
Re: [squid-users] Where are the objects?
Wilson Hernandez - MSD, S. A. wrote: I have a question regarding the storage of objects: Where is really saved to on disk? Is it in /var/log/squid3/access.log or in: /var/log/squid3/store.log? Objects are stored in the cache. This has several forms. Most use a directory structure. The swap.state is a journal of the currently stored objects. The *.log files are logs of things that have changed. store.log shows what has been added/removed from the cache, and when. access.log shows details about who is using the cache and for what. cache.log show administrative information about problems, and if set debugging information for tracking down problems. 2008/11/20 08:49:53| Ready to serve requests. 2008/11/20 08:50:13| Done scanning /var/log/squid3/cache swaplog (0 entries) 2008/11/20 08:50:13| Finished rebuilding storage from disk. 2008/11/20 08:50:13| 0 Entries scanned 2008/11/20 08:50:13| 0 Invalid entries. 2008/11/20 08:50:13| 0 With invalid flags. 2008/11/20 08:50:13| 0 Objects loaded. 2008/11/20 08:50:13| 0 Objects expired. 2008/11/20 08:50:13| 0 Objects cancelled. 2008/11/20 08:50:13| 0 Duplicate URLs purged. 2008/11/20 08:50:13| 0 Swapfile clashes avoided. 2008/11/20 08:50:13| Took 19.7 seconds ( 0.0 objects/sec). I take it you mean all the zeros there. They mean one of a few things. 1) no traffic is going through your Squid. nothing to be cached. 2) you are using memory-only cache. nothing gets stored on disk. 3) you have configured "cache deny all". nothing allowed to store Amos -- Please be using Current Stable Squid 2.7.STABLE5 or 3.0.STABLE10 Current Beta Squid 3.1.0.2
[squid-users] Recompiling Squid
Dear All, If I recompile squid and exclude some features that I won't use will it make squid lighter and consume less resources? thanks in advance regards, -- Muhammad Panji http://sumodirjo.wordpress.com
Re: [squid-users] tuning an overloaded server
Chris Robertson wrote: Al - Image Hosting Services wrote: Hi, I hope that someone can help me. I have 3 servers running squid acting as a web accelerator for a single http server. I have been having a large amount of problems with the http server locking up and having drive failures and squid seems to be a great solution. I was pleasantly surprised at the performance of squid when I first installed it. Even on the slowest of my servers, it seemed faster than directly from the http server, but after I put the load back on the slowest of my servers it was 0% idle. Where is the CPU usage at, User, System or Wait? Since this server had a second hard drive that was basically not being used, I moved the squid cache over to it. I then did some googling and I made some other changes and the server is now only 0% idle a few times a day. I am really suprised at just how tunable squid is and it was wonderful that a change in configuration could make such a difference. But since the busy season is coming, I still think that more can be done to tune it. Here are the changes that I made to the squid.conf: redirect_rewrites_host_header off acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 acl CONNECT method CONNECT http_access allow manager localhost http_access deny manager http_access deny !Safe_ports http_access deny CONNECT !SSL_ports http_access allow all Not a good idea, limit the access to just the domains you are serving where at all possible. icp_access allow all http_port 80 accel vhost cache_peer 10.10.1.4 parent 80 0 no-query originserver hierarchy_stoplist cgi-bin ? cache_mem 16 MB cache_mem is worth expanding, it lets more objects stay in memory and skip the disk IO waiting times. maximum_object_size_in_memory 128 KB memory_replacement_policy heap GDSF cache_replacement_policy heap GDSF cache_dir ufs /var/squid/cache 200 16 256 maximum_object_size 2048 KB cache_swap_low 90 cache_swap_high 98 access_log /var/log/squid/access.log squid cache_log /var/log/squid/cache.log cache_store_log /var/log/squid/store.log dump cache_store_log its a waste of disk IO unless you really need it for something weird. emulate_httpd_log on buffered_logs on acl QUERY urlpath_regex cgi-bin \? cache deny QUERY refresh_pattern ^ftp: 144020% 10080 refresh_pattern ^gopher:14400% 1440 refresh_pattern . 0 20% 4320 acl apache rep_header Server ^Apache broken_vary_encoding allow apache half_closed_clients off icp_port 0 log_icp_queries off coredump_dir /var/squid/cache Are there any other changes that can be made to improve cpu usage? I also did an install from source, since I am using NetBSD systems I used pkgsrc to install it. There are several build options: arp-acl aufs carp coss diskd icmp ipf-transparent pam-helper pf-transparent snmp ssl unlinkd I looked up what some of these are, but I am not sure how they are used by squid or if I really need them. My thought is that if I compiled squid without these options it could improve performance. I wish there was more information on running squid on BSD systems (especially recent info) and then maybe I could be sure what effect compiling without an option would have. For example, I know what pam is, but do I need it? You are not using authentication, so could do without PAM. I looked up what unlinkd does and I can see it running, but will it help cpu usage to use it? Using --enable-truncate "gives a little performance improvement, but may cause problems when used with async I/O. Truncate uses more filesystem inodes than unlink.." asynch I/O refers to diskd, aufs and coss. The only way to see if that will lower your CPU usage is to try, but... I don't see diskd running as a seperate process, so I don't know that I am even using it. Your cache_dir line specifies "ufs". To use diskd, you need to change that line to... cache_dir diskd /var/squid/cache 200 16 256 ... with a couple more optional parameters to tune outstanding requests. To use aufs use... cache_dir aufs /var/squid/cache 200 16 256 Either one is likely to have a positive effect on your CPU utilization as Squid will spend less time waiting for I/O. Turning off the cache_store_log is probably not going to hurt anything. Making sure your origin server gives proper expiry information and removing the QUERY acl (and the "cache deny QUERY" line that relies on it) would remove one more CPU sink. That said BSD family of systems get more out of diskd than aufs in current Squid. The only one that I am sure that I need is ssl. Any help would be greatly appreciated! Best Regards, Al Chris On top of all those adjustments if you still need a boots make sure you are using the latest Squid-2.7. Those releases have the most performance optimizations for high-throughput situations.
[squid-users] Where are the objects?
I have a question regarding the storage of objects: Where is really saved to on disk? Is it in /var/log/squid3/access.log or in: /var/log/squid3/store.log? I've noticed that in the /var/log/squid3/cache swaplog there isn't any entries as stated below. How exactly are objects saved? 2008/11/20 08:49:53| Starting Squid Cache version 3.0.PRE5 for i486-pc-linux-gnu... 2008/11/20 08:49:53| Process ID 2789 2008/11/20 08:49:53| With 1024 file descriptors available 2008/11/20 08:49:53| DNS Socket created at 0.0.0.0, port 32794, FD 8 2008/11/20 08:49:53| Adding nameserver 200.88.127.22 from squid.conf 2008/11/20 08:49:53| Adding nameserver 196.3.81.5 from squid.conf 2008/11/20 08:49:53| Adding nameserver 200.88.127.23 from squid.conf 2008/11/20 08:49:53| Adding nameserver 196.3.81.182 from squid.conf 2008/11/20 08:49:53| Unlinkd pipe opened on FD 13 2008/11/20 08:49:53| Swap maxSize 1024 KB, estimated 787692 objects 2008/11/20 08:49:53| Target number of buckets: 39384 2008/11/20 08:49:53| Using 65536 Store buckets 2008/11/20 08:49:53| Max Mem size: 102400 KB 2008/11/20 08:49:53| Max Swap size: 1024 KB 2008/11/20 08:49:53| Rebuilding storage in /var/log/squid3/cache (CLEAN) 2008/11/20 08:49:53| Using Least Load store dir selection 2008/11/20 08:49:53| Current Directory is / 2008/11/20 08:49:53| Loaded Icons. 2008/11/20 08:49:53| Accepting transparently proxied HTTP connections at 192.168.2.1, port 3128, FD 14. 2008/11/20 08:49:53| HTCP Disabled. 2008/11/20 08:49:53| WCCP Disabled. 2008/11/20 08:49:53| Ready to serve requests. 2008/11/20 08:50:13| Done scanning /var/log/squid3/cache swaplog (0 entries) 2008/11/20 08:50:13| Finished rebuilding storage from disk. 2008/11/20 08:50:13| 0 Entries scanned 2008/11/20 08:50:13| 0 Invalid entries. 2008/11/20 08:50:13| 0 With invalid flags. 2008/11/20 08:50:13| 0 Objects loaded. 2008/11/20 08:50:13| 0 Objects expired. 2008/11/20 08:50:13| 0 Objects cancelled. 2008/11/20 08:50:13| 0 Duplicate URLs purged. 2008/11/20 08:50:13| 0 Swapfile clashes avoided. 2008/11/20 08:50:13| Took 19.7 seconds ( 0.0 objects/sec). 2008/11/20 08:50:13| Beginning Validation Procedure 2008/11/20 08:50:13| Completed Validation Procedure 2008/11/20 08:50:13| Validated 25 Entries 2008/11/20 08:50:13| store_swap_size = 0 2008/11/20 08:50:13| storeLateRelease: released 0 objects 2008/11/20 08:50:41| Preparing for shutdown after 0 requests 2008/11/20 08:50:41| Waiting 30 seconds for active connections to finish 2008/11/20 08:50:41| FD 14 Closing HTTP connection 2008/11/20 08:51:12| Shutting down... 2008/11/20 08:51:12| Closing unlinkd pipe on FD 13 2008/11/20 08:51:12| storeDirWriteCleanLogs: Starting... 2008/11/20 08:51:12| Finished. Wrote 0 entries. 2008/11/20 08:51:12| Took 0.0 seconds ( 0.0 entries/sec). CPU Usage: 0.036 seconds = 0.024 user + 0.012 sys Maximum Resident Size: 0 KB Page faults with physical i/o: 0 Memory usage for squid via mallinfo(): total space in arena:2736 KB Ordinary blocks: 2715 KB 9 blks Small blocks: 0 KB 0 blks Holding blocks: 1500 KB 7 blks Free Small blocks: 0 KB Free Ordinary blocks: 20 KB Total in use:4215 KB 154% Total free:20 KB 1% 2008/11/20 08:51:12| Squid Cache (Version 3.0.PRE5): Exiting normally. 2008/11/20 08:51:18| Starting Squid Cache version 3.0.PRE5 for i486-pc-linux-gnu... 2008/11/20 08:51:18| Process ID 2824 2008/11/20 08:51:18| With 1024 file descriptors available 2008/11/20 08:51:18| DNS Socket created at 0.0.0.0, port 32794, FD 8 2008/11/20 08:51:18| Adding nameserver 200.88.127.22 from squid.conf 2008/11/20 08:51:18| Adding nameserver 196.3.81.5 from squid.conf 2008/11/20 08:51:18| Adding nameserver 200.88.127.23 from squid.conf 2008/11/20 08:51:18| Adding nameserver 196.3.81.182 from squid.conf 2008/11/20 08:51:18| Unlinkd pipe opened on FD 13 2008/11/20 08:51:18| Swap maxSize 1024 KB, estimated 787692 objects 2008/11/20 08:51:18| Target number of buckets: 39384 2008/11/20 08:51:18| Using 65536 Store buckets 2008/11/20 08:51:18| Max Mem size: 102400 KB 2008/11/20 08:51:18| Max Swap size: 1024 KB 2008/11/20 08:51:18| Rebuilding storage in /var/log/squid3/cache (CLEAN) 2008/11/20 08:51:18| Using Least Load store dir selection 2008/11/20 08:51:18| Current Directory is / 2008/11/20 08:51:18| Loaded Icons. 2008/11/20 08:51:18| Accepting transparently proxied HTTP connections at 192.168.2.1, port 3128, FD 14. 2008/11/20 08:51:18| HTCP Disabled. 2008/11/20 08:51:18| WCCP Disabled. 2008/11/20 08:51:18| Ready to serve requests.
Re: [squid-users] Accessing OWA2007 reverse-proxied by ISA Server
I think there is something wrong in this OWA server setup: Check with nslookup if OWA2007 have round robin active: C:\>nslookup mail.telecomitalia.it Server: dns1.tiscaliia.it Address: 213.205.32.10 Non-authoritative answer: Name:mail.telecomitalia.it Addresses: 156.54.233.103, 156.54.233.102 If is active like my example use thi in your squid configuration (squid.conf): balance_on_multiple_ip off A round robin configuration for a OWA front-end is a wrong solution because OWA is a session based web application. Lodovico Bertolini At 08:02 25/04/2008, Henrik Nordstrom wrote: >tor 2008-04-24 klockan 09:34 +0200 skrev Franz Angeli: > > > i use Squid Version 2.6.STABLE5 on Debian stable, i have strange > > problem with this owa site: > > > > https://mail.telecomitalia.it > > > > If i try to login (with real or fake credentials) with squid login > > page return to itself without any error!??! > > > > If i connect directly all works fine? > >First of all try upgrading. There has been some bugfixes to the >connection pinning / forwarding of Microsoft "looks like HTTP but isn't" >authentication. ...[show rest of quote] Just looked to the site: it's a Exchange 2007 OWA running form based authentication over HTTPS. I'm using Squid 2.6 as a reverse proxy for my Exchange 2003 OWA running the same configuration without problems. So, it shouldn't be an authentication problem on Squid, but I still don't have verified if there are any so called "new features" in OWA 2007 ... Regards Guido - Momo-2 wrote: > > Hi folks, > > I'm experiencing some trouble to acces an OWA 2007 server, located > behing an ISA reverse proxy, through our Squid 2.6ST18 proxy. > > When I try to access it, IE or Firefox keeps waiting for data to > tranfer, the page stays blank and it nevers falls nor on time-out or > any other error. > > Squid log shows lines that let think that there is some traffic > transferred: > > 1225194824.927 1042 10.1.103.104 TCP_MISS/200 3088 CONNECT > OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - > 1225194825.050118 10.1.103.104 TCP_MISS/200 1056 CONNECT > OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - > 1225194825.185133 10.1.103.104 TCP_MISS/200 4524 CONNECT > OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - > 1225194825.367168 10.1.103.104 TCP_MISS/200 2371 CONNECT > OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - > 1225194849.719 24520 10.1.103.104 TCP_MISS/200 155 CONNECT > OBFUSCATED_URL:443 - DIRECT/84.14.218.217 - > > Direct connexion (I mean bypassing our Squid proxy) to this website works > fine. > > As i had a similar problem some time ago on another OWA installation, > I tried to deactivate "Accept-Encoding" header in Squid Proxy but it > is the same problem. > Our Squid Installation is quite basic, we don't authenticate our > clients, only a small cache is done on the fly. > > For those who would give a try, I pasted the URL at > http://pastebin.com/m44904a19 to prevent it from showing up in mailing > lists archives, as this server belongs to a partner. > Please do not paste it in your replies. > > Thanks for any help. > > Momo > > -- View this message in context: http://www.nabble.com/Accessing-OWA2007-reverse-proxied-by-ISA-Server-tp20208261p20634189.html Sent from the Squid - Users mailing list archive at Nabble.com.
