[squid-users] Squid 3.1 reverse proxy to OWA on IIS7
Hi I had FreeBSD 6.3 and squid 2.6 running fine reverse proxying my OWA server. I have now upgraded to FreeBSD 8 and squid 3.1 as the old software was getting rather old. I have copied the config file off the old server on the the new server. All is working except OWA. The images come down very very slowly (it does work really slowly). I was thinking it might be a DNS issue, but if I telnet (outside network) to www.optimalprofit.com 80 and enter: GET / HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */* Accept-Language: en-us Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) Host: www.optimalprofit.com Connection: Close the page comes back really fast, but if I telnet to www.optimalprofit.com 80 and enter (to get a gif file off the server): GET /images/op-hwynit-ad1.gif HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */* Accept-Language: en-us Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) Host: www.optimalprofit.com Connection: Close the text comes back really really slowly. I am not sure what is wrong as even my mobile connects in and over active sync and picks up my emails just fine. I have tried different browsers and they don't make any difference. I have tried squid 2.7 and 3 and I get the same issue. Can't try 2. as there is no port on FreeBSD 8 anymore!! Any help is much appreciated. Gordon
Re: [squid-users] Squid 3.1 reverse proxy to OWA on IIS7
On Sun, 27 Feb 2011 17:19:33 -, Gordon McKee wrote: Hi I had FreeBSD 6.3 and squid 2.6 running fine reverse proxying my OWA server. I have now upgraded to FreeBSD 8 and squid 3.1 as the old software was getting rather old. I have copied the config file off the old server on the the new server. All is working except OWA. The images come down very very slowly (it does work really slowly). I was thinking it might be a DNS issue, but if I telnet (outside network) to www.optimalprofit.com 80 and enter: GET / HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */* Accept-Language: en-us Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) Host: www.optimalprofit.com Connection: Close the page comes back really fast, but if I telnet to www.optimalprofit.com 80 and enter (to get a gif file off the server): GET /images/op-hwynit-ad1.gif HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */* Accept-Language: en-us Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) Host: www.optimalprofit.com Connection: Close the text comes back really really slowly. I am not sure what is wrong as even my mobile connects in and over active sync and picks up my emails just fine. I have tried different browsers and they don't make any difference. What are the reply headers for each of these tests? Amos
Re: [squid-users] Squid - Read Error
Dear Amos, I changed negative_ttl setting is at 0 seconds. I did trace also( trace root is workig fine) but sitll i am getting same read error. Some times working. some time i am getting read error. regards, - Original Message From: Amos Jeffries squ...@treenet.co.nz To: squid-users@squid-cache.org Sent: Sun, February 20, 2011 4:35:02 PM Subject: Re: [squid-users] Squid - Read Error On 20/02/11 18:05, Mohamed Adhil wrote: Dear , I am getting following error on my squid box ERROR The requested URL could not be retrieved While trying to retrieve the URL: http://www.google.com/ The following error was encountered: * Read Error The system returned: (104) Connection reset by peer An error condition occurred while reading data from the network. Please retry your request. Your cache administrator is webmaster. I am not sure where to begin to look! I've cleared the cache and reviewed the config file. I am at a loss. Nothing changed and it's been working for years! And one more thing, we can access other web sites. And some of the web sites I am getting this message after some time its working Any help would be greatly appreciated! Squid is attempting to read a reply from some remote server. But the server disconnects unexpectedly. This can happen for any number of small TCP interactions. Usually short lived and not repeating. First thing to do is check that your squid.conf negative_ttl setting is at 0 seconds. If it is higher then it will expand a short temporary error into a full DoS for the length of time it is set to. Being a TCP problem the easiest way to trace this is via the raw packets. If you can find a site and request which always has the problem the packet trace of one such request will show what is happening. Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.11 Beta testers wanted for 3.2.0.5
Re: [squid-users] Re: Origin header fails on bridged-tproxy squid
Origin is relatively new; http://tools.ietf.org/html/draft-ietf-websec-origin-00 In a nutshell, it's sort of like a referer just for the authority part of the URL (i.e., it omits the path). Robert -- what exactly is breaking? Is your tproxy stripping any headers or modifying the request URL? Is there anything else unusual about your setup? Cheers, On 27/02/2011, at 4:08 PM, Amos Jeffries wrote: On 26/02/11 13:19, Robert Pipca wrote: Sorry, The correct site to see the problem is: http://vistoria.brochweld.com.br/bvsweb/paginas/tela_login.aspx There is no such header as Origin: in HTTP. Did you means Host: ? Squid uses the Host: header to determine destination IP unless configured otherwise. What are you seeing as the problem? Amos -- Please be using Current Stable Squid 2.7.STABLE9 or 3.1.11 Beta testers wanted for 3.2.0.5 -- Mark Nottingham m...@yahoo-inc.com
[squid-users] tproxy- bridge mode vs routing mode
both uses 2 ethernet. I tested both with ICMP UDP latency and found out routing mode has higher latency compared to bridge. difference about .300ms. does routing really causes delay? -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.