[squid-users] Squid 3.1 reverse proxy to OWA on IIS7

2011-02-27 Thread Gordon McKee

Hi

I had FreeBSD 6.3 and squid 2.6 running fine reverse proxying my OWA server. 
I have now upgraded to FreeBSD 8 and squid 3.1 as the old software was 
getting rather old.  I have copied the config file off the old server on the 
the new server.  All is working except OWA.  The images come down very very 
slowly (it does work really slowly).


I was thinking it might be a DNS issue, but if I telnet (outside network) to 
www.optimalprofit.com 80 and enter:

GET / HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
Host: www.optimalprofit.com
Connection: Close

the page comes back really fast, but if I telnet to www.optimalprofit.com 80 
and enter (to get a gif file off the server):


GET /images/op-hwynit-ad1.gif HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
Host: www.optimalprofit.com
Connection: Close

the text comes back really really slowly.  I am not sure what is wrong as 
even my mobile connects in and over active sync and picks up my emails just 
fine.  I have tried different browsers and they don't make any difference.


I have tried squid 2.7 and 3 and I get the same issue.  Can't try 2. as 
there is no port on FreeBSD 8 anymore!!


Any help is much appreciated.

Gordon






Re: [squid-users] Squid 3.1 reverse proxy to OWA on IIS7

2011-02-27 Thread Amos Jeffries

On Sun, 27 Feb 2011 17:19:33 -, Gordon McKee wrote:

Hi

I had FreeBSD 6.3 and squid 2.6 running fine reverse proxying my OWA
server. I have now upgraded to FreeBSD 8 and squid 3.1 as the old
software was getting rather old.  I have copied the config file off
the old server on the the new server.  All is working except OWA.  
The

images come down very very slowly (it does work really slowly).

I was thinking it might be a DNS issue, but if I telnet (outside
network) to www.optimalprofit.com 80 and enter:
GET / HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
Host: www.optimalprofit.com
Connection: Close

the page comes back really fast, but if I telnet to
www.optimalprofit.com 80 and enter (to get a gif file off the 
server):


GET /images/op-hwynit-ad1.gif HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
Host: www.optimalprofit.com
Connection: Close

the text comes back really really slowly.  I am not sure what is
wrong as even my mobile connects in and over active sync and picks up
my emails just fine.  I have tried different browsers and they don't
make any difference.


What are the reply headers for each of these tests?

Amos



Re: [squid-users] Squid - Read Error

2011-02-27 Thread Mohamed Adhil
Dear Amos,

I changed negative_ttl setting 
is at 0 seconds. 

I did trace also( trace root is workig fine)  but sitll i am getting same read 
error.

Some times working. some time i am getting read error.

regards,



- Original Message 
From: Amos Jeffries squ...@treenet.co.nz
To: squid-users@squid-cache.org
Sent: Sun, February 20, 2011 4:35:02 PM
Subject: Re: [squid-users] Squid - Read Error

On 20/02/11 18:05, Mohamed Adhil wrote:
 Dear ,

 I am getting following error on my squid box

 ERROR
 The requested URL could not be retrieved

 While trying to retrieve the URL: http://www.google.com/

 The following error was encountered:

 * Read Error

 The system returned:

 (104) Connection reset by peer

 An error condition occurred while reading data from the network. Please retry
 your request.

 Your cache administrator is webmaster.


 I am not sure where to begin to look!  I've cleared the cache and reviewed the
 config file.  I am at a loss.  Nothing changed and it's been working for 
years!


 And one more thing, we can access other web sites. And some of the web sites I
 am getting this message after some time its working

 Any help would be greatly appreciated!


Squid is attempting to read a reply from some remote server. But the 
server disconnects unexpectedly.
  This can happen for any number of small TCP interactions. Usually 
short lived and not repeating.
  First thing to do is check that your squid.conf negative_ttl setting 
is at 0 seconds. If it is higher then it will expand a short temporary 
error into a full DoS for the length of time it is set to.


Being a TCP problem the easiest way to trace this is via the raw 
packets. If you can find a site and request which always has the problem 
the packet trace of one such request will show what is happening.

Amos
-- 
Please be using
  Current Stable Squid 2.7.STABLE9 or 3.1.11
  Beta testers wanted for 3.2.0.5






Re: [squid-users] Re: Origin header fails on bridged-tproxy squid

2011-02-27 Thread Mark Nottingham
Origin is relatively new;
  http://tools.ietf.org/html/draft-ietf-websec-origin-00

In a nutshell, it's sort of like a referer just for the authority part of the 
URL (i.e., it omits the path).

Robert -- what exactly is breaking? Is your tproxy stripping any headers or 
modifying the request URL? Is there anything else unusual about your setup?

Cheers,



On 27/02/2011, at 4:08 PM, Amos Jeffries wrote:

 On 26/02/11 13:19, Robert Pipca wrote:
 Sorry,
 
 The correct site to see the problem is:
 
 http://vistoria.brochweld.com.br/bvsweb/paginas/tela_login.aspx
 
 
 There is no such header as Origin: in HTTP. Did you means Host: ?
 
 Squid uses the Host: header to determine destination IP unless 
 configured otherwise. What are you seeing as the problem?
 
 
 Amos
 -- 
 Please be using
   Current Stable Squid 2.7.STABLE9 or 3.1.11
   Beta testers wanted for 3.2.0.5

--
Mark Nottingham   m...@yahoo-inc.com




[squid-users] tproxy- bridge mode vs routing mode

2011-02-27 Thread jiluspo

both uses 2 ethernet.
I tested both with ICMP  UDP latency and found out routing mode has higher 
latency compared to bridge.

difference about .300ms.
does routing really causes delay?



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.