Re: [squid-users] tproxy on real ip problem

2006-06-12 Thread Paweł Staszewski

Paweł Staszewski wrote:


hello:


squid-box: 194.6.246.251 on eth0
client: 194.6.246.25


settings:
http_port 194.6.246.251:8080 transparent

linux_tproxy on
tproxy_port 0


iptables -t tproxy -A PREROUTING -p tcp -i eth0 --dport 80 -j TPROXY 
--on-port 8080



And i can't spoof my client ipaddress
I always go from 194.6.246.251


any suggestions ??










debug:
2006/06/12 13:31:22| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:22| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN
2006/06/12 13:31:23| tproxy ip=194.6.246.25,0x19f606c2,port=0 ERROR ASSIGN



[squid-users] tproxy on real ip problem

2006-06-12 Thread Paweł Staszewski

hello:


squid-box: 194.6.246.251 on eth0
client: 194.6.246.25


settings:
http_port 194.6.246.251:8080 transparent

linux_tproxy on
tproxy_port 0


iptables -t tproxy -A PREROUTING -p tcp -i eth0 --dport 80 -j TPROXY 
--on-port 8080



And i can't spoof my client ipaddress
I always go from 194.6.246.251


any suggestions ??









[squid-users] tproxy problem

2006-06-07 Thread Paweł Staszewski

hello i have :
kernel 2.6.15.7 with cttproxy patch applien (cleanly)
squid 2.6 with:

http_port 192.168.20.2:8080

linux_tproxy on
tproxy_port 8080



squid lan ip:
192.168.20.2
squid wan ip:
192.168.0.10

iptables:
iptables -L -n -v -t tproxy
Chain PREROUTING (policy ACCEPT 579 packets, 74985 bytes)
pkts bytes target prot opt in out source   
destination
  10   480 TPROXY tcp  --  eth1.671 *   0.0.0.0/0
0.0.0.0/0   tcp dpt:80 TPROXY redirect 0.0.0.0:8080


Chain OUTPUT (policy ACCEPT 1899 packets, 144K bytes)
pkts bytes target prot opt in out source   
destination




and if i set proxy in web browser to: 192.168.20.2 on port 80 i have 
http access:

but
tcpdump -i eth0 -n -p
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 68 bytes
13:46:18.251369 IP 212.77.100.128.80 > 192.168.0.10.53851: F 
2968402288:2968402288(0) ack 1284802216 win 2742 3009682896 122552088>
13:46:18.251542 IP 192.168.0.10.53851 > 212.77.100.128.80: F 1:1(0) ack 
1 win 7252 
13:46:18.267612 IP 212.77.100.128.80 > 192.168.0.10.53851: . ack 2 win 
2742 
13:46:19.197962 IP 212.77.100.127.80 > 192.168.0.10.55233: F 
3799766088:3799766088(0) ack 1288087522 win 8811
13:46:19.198033 IP 192.168.0.10.55233 > 212.77.100.127.80: F 1:1(0) ack 
1 win 32767

13:46:19.214958 IP 212.77.100.127.80 > 192.168.0.10.55233: . ack 2 win 8811

All outgoing connections  from squid are with squid-wan-ip not my test 
box ip which is 172.16.0.2




Re: [squid-users] squid-2.5.stable13 + system crash

2006-03-30 Thread Paweł Staszewski

Henrik Nordstrom wrote:


mån 2006-03-27 klockan 17:31 +0200 skrev Mark Elsen:
 


Mar 27 17:14:11 w3cache1 Out of memory: Killed process 28301 (squid).
 


Seems like SQUID ran out of memory.
   



Or more precisely that your server ran completely out of memory, and as
a last resort it in a panic killed the most memory consuming process to
try to free up memory allowing the OS to survive.

Regards
Henrik
 


Server have 4GB of ram
P4 3.2GHz
8 scsi disks

squid-conf
###
http_port 8080
icp_port 3130


hierarchy_stoplist cgi-bin .cgi .asp ?
acl QUERY urlpath_regex cgi-bin \? \.asp \.cgi
no_cache deny QUERY
hosts_file none

cache_mem 64 MB

cache_swap_low 80
cache_swap_high 100

#debug_options 43 1

maximum_object_size 32768 KB
minimum_object_size 0 KB

maximum_object_size_in_memory 96 KB

ipcache_size 65535
fqdncache_size 65535


cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
###

And 8 cache dirs with coss or aufs with max space for cache 17GB each.


With coss of aufs i have the same problems.

squid is running for 3-4 hours and crash.

This proxy is transparent for 4500users


Cpu load without epool patch 100% always
Cpu load with epool patch 20% max

cat /proc/net/sockstat | grep TCP
TCP: inuse 12845






[squid-users] squid-2.5.stable13 + system crash

2006-03-27 Thread Paweł Staszewski
Mar 27 17:14:04 w3cache1 squid[16245]: httpReadReply: Excess data from 
"GET http://mirrorsearch.speedbit.com/cgi-bin/MirrorSearch.dll?ver7?Sche

me=1&Site=ftp.task.gda.pl&Path=/site/openoffice-ux/OOo-2.0.2-1-Win32-ux.pl.exe&Filename=OOo-2_1.0.2-1-Win32-ux.pl.exe&Size=4294967295&Pos=0&Cou
ntry=&Region=&R=0&Advanced=1&Checksum=&BPS=0&V=7.2.0.0"
Mar 27 17:14:11 w3cache1 oom-killer: gfp_mask=0xd0, order=1
Mar 27 17:14:11 w3cache1 [] out_of_memory+0x2b/0xa9
Mar 27 17:14:11 w3cache1 [] __alloc_pages+0x1da/0x263
Mar 27 17:14:11 w3cache1 [] kmem_getpages+0x39/0x87
Mar 27 17:14:11 w3cache1 [] cache_grow+0xa1/0x129
Mar 27 17:14:11 w3cache1 [] cache_alloc_refill+0x16e/0x1b7
Mar 27 17:14:11 w3cache1 [] __kmalloc+0x61/0x6c
Mar 27 17:14:11 w3cache1 [] select_bits_alloc+0x10/0x13
Mar 27 17:14:11 w3cache1 [] core_sys_select+0x57/0x2c4
Mar 27 17:14:11 w3cache1 [] mark_offset_tsc+0x55/0x290
Mar 27 17:14:11 w3cache1 [] copy_from_user+0x3a/0x60
Mar 27 17:14:11 w3cache1 [] sys_select+0x9b/0x15e
Mar 27 17:14:11 w3cache1 [] __do_IRQ+0x95/0xc5
Mar 27 17:14:11 w3cache1 [] sysenter_past_esp+0x54/0x75
Mar 27 17:14:11 w3cache1 Mem-info:
Mar 27 17:14:11 w3cache1 DMA per-cpu:
Mar 27 17:14:11 w3cache1 cpu 0 hot: high 0, batch 1 used:0
Mar 27 17:14:11 w3cache1 cpu 0 cold: high 0, batch 1 used:0
Mar 27 17:14:11 w3cache1 cpu 1 hot: high 0, batch 1 used:0
Mar 27 17:14:11 w3cache1 cpu 1 cold: high 0, batch 1 used:0
Mar 27 17:14:11 w3cache1 DMA32 per-cpu: empty
Mar 27 17:14:11 w3cache1 Normal per-cpu:
Mar 27 17:14:11 w3cache1 cpu 0 hot: high 186, batch 31 used:17
Mar 27 17:14:11 w3cache1 cpu 0 cold: high 62, batch 15 used:59
Mar 27 17:14:11 w3cache1 cpu 1 hot: high 186, batch 31 used:34
Mar 27 17:14:11 w3cache1 cpu 1 cold: high 62, batch 15 used:59
Mar 27 17:14:11 w3cache1 HighMem per-cpu:
Mar 27 17:14:11 w3cache1 cpu 0 hot: high 186, batch 31 used:23
Mar 27 17:14:11 w3cache1 cpu 0 cold: high 62, batch 15 used:8
Mar 27 17:14:11 w3cache1 cpu 1 hot: high 186, batch 31 used:9
Mar 27 17:14:11 w3cache1 cpu 1 cold: high 62, batch 15 used:7
Mar 27 17:14:11 w3cache1 Free pages:   42520kB (10208kB HighMem)
Mar 27 17:14:11 w3cache1 Active:251409 inactive:434176 dirty:256 
writeback:128 unstable:0 free:10630 slab:207945 mapped:129100 pagetables:214
Mar 27 17:14:11 w3cache1 DMA free:3592kB min:68kB low:84kB high:100kB 
active:0kB inactive:0kB present:16384kB pages_scanned:0 all_unreclaimable

? yes
Mar 27 17:14:11 w3cache1 lowmem_reserve[]: 0 0 880 3566
Mar 27 17:14:11 w3cache1 DMA32 free:0kB min:0kB low:0kB high:0kB 
active:0kB inactive:0kB present:0kB pages_scanned:0 all_unreclaimable? no

Mar 27 17:14:11 w3cache1 lowmem_reserve[]: 0 0 880 3566
Mar 27 17:14:11 w3cache1 Normal free:28720kB min:3756kB low:4692kB 
high:5632kB active:4624kB inactive:4520kB present:901120kB pages_scanned:115

67 all_unreclaimable? yes
Mar 27 17:14:11 w3cache1 lowmem_reserve[]: 0 0 0 21495
Mar 27 17:14:11 w3cache1 HighMem free:10208kB min:512kB low:3380kB 
high:6248kB active:1001012kB inactive:1732184kB present:2751424kB pages_scan

ned:0 all_unreclaimable? no
Mar 27 17:14:11 w3cache1 lowmem_reserve[]: 0 0 0 0
Mar 27 17:14:11 w3cache1 DMA: 68*4kB 1*8kB 1*16kB 1*32kB 1*64kB 1*128kB 
0*256kB 0*512kB 1*1024kB 1*2048kB 0*4096kB = 3592kB

Mar 27 17:14:11 w3cache1 DMA32: empty
Mar 27 17:14:11 w3cache1 Normal: 6832*4kB 0*8kB 1*16kB 1*32kB 1*64kB 
0*128kB 1*256kB 0*512kB 1*1024kB 0*2048kB 0*4096kB = 28720kB
Mar 27 17:14:11 w3cache1 HighMem: 0*4kB 648*8kB 130*16kB 30*32kB 3*64kB 
0*128kB 1*256kB 1*512kB 1*1024kB 0*2048kB 0*4096kB = 10208kB
Mar 27 17:14:11 w3cache1 Swap cache: add 1833, delete 973, find 499/624, 
race 0+0

Mar 27 17:14:11 w3cache1 Free swap  = 976064kB
Mar 27 17:14:11 w3cache1 Total swap = 979956kB
Mar 27 17:14:11 w3cache1 Free swap:   976064kB
Mar 27 17:14:11 w3cache1 917232 pages of RAM
Mar 27 17:14:11 w3cache1 687856 pages of HIGHMEM
Mar 27 17:14:11 w3cache1 8403 reserved pages
Mar 27 17:14:11 w3cache1 485133 pages shared
Mar 27 17:14:11 w3cache1 860 pages swap cached
Mar 27 17:14:11 w3cache1 257 pages dirty
Mar 27 17:14:11 w3cache1 0 pages writeback
Mar 27 17:14:11 w3cache1 129100 pages mapped
Mar 27 17:14:11 w3cache1 207998 pages slab
Mar 27 17:14:11 w3cache1 214 pages pagetables
Mar 27 17:14:11 w3cache1 Out of Memory: Kill process 28301 (squid) score 
74698 and children.

Mar 27 17:14:11 w3cache1 Out of memory: Killed process 28301 (squid).
Mar 27 17:14:11 w3cache1 oom-killer: gfp_mask=0xd0, order=1
Mar 27 17:14:11 w3cache1 [] out_of_memory+0x2b/0xa9
Mar 27 17:14:11 w3cache1 [] __alloc_pages+0x1da/0x263
Mar 27 17:14:11 w3cache1 [] kmem_getpages+0x39/0x87
Mar 27 17:14:11 w3cache1 [] cache_grow+0xa1/0x129
Mar 27 17:14:11 w3cache1 [] cache_alloc_refill+0x16e/0x1b7
Mar 27 17:14:11 w3cache1 [] __kmalloc+0x61/0x6c
Mar 27 17:14:11 w3cache1 [] select_bits_alloc+0x10/0x13
Mar 27 17:14:11 w3cache1 [] core_sys_select+0x57/0x2c4
Mar 27 17:14:11 w3cache1 [] mark_offset_tsc+0x55/0x290
Mar 27 17:14:11 w3cache1 [] copy_from_user+0x3a/0x60
Mar 27 17:14:11 w3cache1 [] sy

[squid-users] gdb squid-3 crash

2006-03-14 Thread Paweł Staszewski




Starting program: /usr/local/squid/sbin/squid -DNYCd3
[Thread debugging using libthread_db enabled]
[New Thread -1211267392 (LWP 12654)]
2006/03/14 13:42:04| diskd started
2006/03/14 13:42:04| WARNING: use of 'reload-into-ims' in 
'refresh_pattern' violates HTTP
2006/03/14 13:42:04| Starting Squid Cache version 3.0-PRE3-20060314 for 
i686-pc-linux-gnu...

2006/03/14 13:42:04| Process ID 12654
2006/03/14 13:42:04| With 32768 file descriptors available
2006/03/14 13:42:04| DNS Socket created at 0.0.0.0, port 32774, FD 8
2006/03/14 13:42:04| Adding nameserver 127.0.0.1 from squid.conf
2006/03/14 13:42:04| Adding nameserver 194.6.246.5 from squid.conf
2006/03/14 13:42:04| Adding nameserver 194.6.246.26 from squid.conf
2006/03/14 13:42:04| Unlinkd pipe opened on FD 13
2006/03/14 13:42:04| Store logging disabled
2006/03/14 13:42:04| Swap maxSize 8192 KB, estimated 6301538 objects

2006/03/14 13:42:04| Target number of buckets: 315076
2006/03/14 13:42:04| Using 524288 Store buckets
2006/03/14 13:42:04| Max Mem  size: 65536 KB
2006/03/14 13:42:04| Max Swap size: 8192 KB
2006/03/14 13:42:04| Rebuilding storage in /cache0 (DIRTY)
2006/03/14 13:42:04| Rebuilding storage in /cache1 (DIRTY)
2006/03/14 13:42:04| Rebuilding storage in /cache2 (DIRTY)
2006/03/14 13:42:04| Rebuilding storage in /cache3 (DIRTY)
2006/03/14 13:42:04| Rebuilding storage in /cache4 (DIRTY)
2006/03/14 13:42:04| Rebuilding storage in /cache5 (DIRTY)
2006/03/14 13:42:04| Rebuilding storage in /cache6 (DIRTY)
2006/03/14 13:42:04| Rebuilding storage in /cache7 (DIRTY)
2006/03/14 13:42:04| Using Least Load store dir selection
2006/03/14 13:42:04| Set Current Directory to /usr/local/squid/var/
2006/03/14 13:42:04| Loaded Icons.
2006/03/14 13:42:04| Accepting transparently proxied HTTP connections at 
192.168.20.3, port 8080, FD 28.

2006/03/14 13:42:04| Accepting ICP messages at 0.0.0.0, port 3130, FD 29.
2006/03/14 13:42:04| Accepting SNMP messages on port 3401, FD 30.
2006/03/14 13:42:04| Accepting WCCP messages on port 2048, FD 31.
2006/03/14 13:42:04| Ready to serve requests.
2006/03/14 13:42:05| WARNING: newer swaplog entry for dirno 1, fileno 
03FA
2006/03/14 13:42:05| WARNING: newer swaplog entry for dirno 1, fileno 
0447
2006/03/14 13:42:05| WARNING: newer swaplog entry for dirno 1, fileno 
08B4
2006/03/14 13:42:05| WARNING: newer swaplog entry for dirno 0, fileno 
0216
2006/03/14 13:42:05| WARNING: newer swaplog entry for dirno 0, fileno 
02B1
2006/03/14 13:42:05| WARNING: newer swaplog entry for dirno 0, fileno 
052D
2006/03/14 13:42:05| WARNING: newer swaplog entry for dirno 0, fileno 
0585
2006/03/14 13:42:05| WARNING: newer swaplog entry for dirno 0, fileno 
05F7

2006/03/14 13:42:05| Done reading /cache1 swaplog (2960 entries)
2006/03/14 13:42:05| Done reading /cache0 swaplog (3047 entries)
2006/03/14 13:42:05| WARNING: newer swaplog entry for dirno 6, fileno 
0448
2006/03/14 13:42:05| WARNING: newer swaplog entry for dirno 6, fileno 
04D9
2006/03/14 13:42:05| WARNING: newer swaplog entry for dirno 6, fileno 
090C
2006/03/14 13:42:05| WARNING: newer swaplog entry for dirno 6, fileno 
095F

2006/03/14 13:42:05| Done reading /cache6 swaplog (3121 entries)
2006/03/14 13:42:05| WARNING: newer swaplog entry for dirno 2, fileno 
0077

2006/03/14 13:42:05| Done reading /cache2 swaplog (3548 entries)
2006/03/14 13:42:05| Done reading /cache3 swaplog (3565 entries)
2006/03/14 13:42:05| Done reading /cache4 swaplog (3614 entries)
2006/03/14 13:42:05| Done reading /cache7 swaplog (3650 entries)
2006/03/14 13:42:05| Done reading /cache5 swaplog (3721 entries)
2006/03/14 13:42:05| Finished rebuilding storage from disk.
2006/03/14 13:42:05| 25636 Entries scanned
2006/03/14 13:42:05| 0 Invalid entries.
2006/03/14 13:42:05| 0 With invalid flags.
2006/03/14 13:42:05| 25462 Objects loaded.
2006/03/14 13:42:05| 0 Objects expired.
2006/03/14 13:42:05|70 Objects cancelled.
2006/03/14 13:42:05|  1510 Duplicate URLs purged.
2006/03/14 13:42:05|96 Swapfile clashes avoided.
2006/03/14 13:42:05|   Took 0.3 seconds (94229.4 objects/sec).
2006/03/14 13:42:05| Beginning Validation Procedure
2006/03/14 13:42:05|   Completed Validation Procedure
2006/03/14 13:42:05|   Validated 47945 Entries
2006/03/14 13:42:05|   store_swap_size = 303680
2006/03/14 13:42:05| storeLateRelease: released 0 objects
[New Thread -1228506192 (LWP 12658)]
[New Thread -1236898896 (LWP 12659)]
[New Thread -1245291600 (LWP 12660)]
[New Thread -1253684304 (LWP 12661)]
[New Thread -1262077008 (LWP 12662)]
[New Thread -1270469712 (LWP 12663)]
[New Thread -1278862416 (LWP 12664)]
[New Thread -1287255120 (LWP 12665)]
[New Thread -1295647824 (LWP 12666)]
[New Thread -1304040528 (LWP 12667)]
[New Thread -1312433232 (LWP 12668)]
[New Thread -1320825936 (LWP 12669)]
[New Thread -1329218640 (LWP 12670)]
[New Thread -1337611344 (LWP 12671)]
[New Thread -1346004048 (LWP 12672)]
[New Thread -1

Re: [squid-users] squid 2.5 and large acl

2006-01-06 Thread Paweł Staszewski

Matus UHLAR - fantomas wrote:


On 04.02 13:54, Paweł Staszewski wrote:
 

does anybody have experiences with squid and large number (1 lines) 
of acl-s like:


acl user1 src xxx.xxx.xxx.xxx/255.255.255.255
tcp_outgoing_address xxx.xxx.xxx.xxx user1
   



I doubt so, but is would be imho very ineffective. Also, I don't know what
OS will allow you to have 1 IP addresses on local interface.

Why do you want to do this? so you want to get this result?
http://www.squid-cache.org/Doc/FAQ/FAQ-7.html#ss7.13

 


thanks for your reply/

curently i have :
ip addr show | grep vlan0891 | wc -l
7689

And that is also number of users in our network.
In network users have 10/8 subnet and for http traffic I use squid-proxy 
and want to assign to every user uniq ip ...with squid so every user 
will be see as his nated ip on www-servers.
Squid proxy is not a nat for network , nat is doing another linux based 
machine.


So question was about performance of that large acl list in squid.conf , 
and any experiences with  that many acl-s in squid.conf :)








[squid-users] squid 2.5 and large acl

2006-01-05 Thread Paweł Staszewski

Hello


does anybody have experiences with squid and large number (1 lines) 
of acl-s like:


acl user1 src xxx.xxx.xxx.xxx/255.255.255.255
tcp_outgoing_address xxx.xxx.xxx.xxx user1


Best Regards
Paweł Staszewski
ART-COM




Odp: Re: [squid-users] Redirection

2005-06-04 Thread Paweł Staszewski
Hello

on server B:

iptables -t nat -A PREROUTING -i  -s  -p tcp 
--dport 80 -j DNAT --to :80
iptables -t nat -A POSTROUTING -o  -d 
 -p tcp --dport 80 -j SNAT --to 


on server A:

iptables -t nat -A PREROUTING -s  -p tcp --dport 80 -j 
REDIRECT --to 8080

 
 
>>>Basia Nowak <[EMAIL PROTECTED]> 06/04/05 1:08 pm >>> 
Hi, 
 
--- azeem ahmad <[EMAIL PROTECTED]> wrote: 
 
>give some details. which server is connected to 
>internet??? with which ur 
>lan clients connect, do clients connect to ur 
>router and u have proxy on 
>server A and NAT on server B. do u want ur clients 
>request coming through ur 
>LAN router to be redirected to ur proxy server A. 
 
OK. Once again. 
 
I have server 'A' and server 'B'. Both had public IP 
address (PI status from RIPE NCC). 
Server 'A' and server 'B' is connected via switch to 
router WAN. 
 
S 'A' > Switch < S 'B' 
^ 
| 
WAN -+ 
 
So, directly connected to internet is 'A' & 'B'. 
Its world access. 
Now: On server 'A' (and ONLY) I make squid 2.4 proxy 
server. 
 
On server 'B' I make NAT router. People are connected 
to internet via server 'B'. Now... I want to force 
proxy server on server 'B' from 'A'. 
 
I cannont use simple redir on port with iptables 
because these are no any proxy on server 'A'. 
 
Machine on server 'A' is 10x better from machine on 
server 'B'. I cannont make NAT on server 'A'. 
 
I make proxy config to make transparent proxy and 
proxy works on 8080 port. 
 
Now only 1% users use my proxy ;/ 
 
-- 
I greet 
Barbara 
  
 
 
 
___ 
How much free photo storage do you get? Store your holiday 
snaps for FREE with Yahoo! Photos http://uk.photos.yahoo.com 



Odp: RE: [squid-users] how to apply epoll-2_5 patch to squid2.5-stable9

2005-04-16 Thread Paweł Staszewski
Hello

edit the /usr/local/share/autoconf/acconfig.h file and add the folowing line :
  
#undef HAVE_EPOLL 





Best Regards
Paweł Staszewski
ART-COM
+48327522333
+480609183038


>>>"George Hong" <[EMAIL PROTECTED]> 04/16/05 12:33 pm >>> 
Hi there, 
 When I run the bootstrap.sh it gives me the following error mesg: 
/usr/local/bin/autoheader: Symbol `HAVE_EPOLL' is not covered by 
/usr/local/share/autoconf/acconfig.h ./acconfig.h 
autoheader failed 
 I have the kernel 2.6.7.11(it should include epoll support)  installed 
on the Redhat. 
  
 What did I miss? Thanks for your suggestion. 
BR 
George 
 
>-Original Message- 
>From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] 
>Sent: Tuesday, April 12, 2005 11:08 PM 
>To: Pawe?Staszewski 
>Cc: squid-users@squid-cache.org 
>Subject: Re: [squid-users] how to apply epoll-2_5 patch to 
squid2.5-stable9 
> 
> 
> 
>On Tue, 12 Apr 2005, [Windows-1250] Paweł Staszewski wrote: 
> 
>>and then in squid dir i do : patch -p1 < epoll-2_5.patch 
>> 
>>Patch was added cleanly but: 
>>./configure --help | grep epoll 
>>show nothing :( 
> 
>You need to run the bootstrap.sh script after patching with developer 
>patches. This in turn requires you to have the proper versions of 
autoconf 
>and automake installed (it warns you if it cannot find the proper 
>versions) 
> 
>Regards 
>Henrik 
 



[squid-users] Compare of xfs and reiserfs filesystem for squid cache_dir

2005-04-14 Thread Paweł Staszewski
HighTotal: 1178560 kB
HighFree:   108992 kB
LowTotal:   895780 kB
LowFree: 65964 kB
SwapTotal:  996020 kB
SwapFree:   996020 kB
Dirty:4660 kB
Writeback:   0 kB
Mapped: 494916 kB
Slab:   431456 kB
CommitLimit:   2033188 kB
Committed_AS:  1321792 kB
PageTables:   1592 kB
VmallocTotal:   114680 kB
VmallocUsed:  5220 kB
VmallocChunk:   109408 kB


[14:17:09 [EMAIL PROTECTED] /etc/bm]$ cat /proc/net/sockstat
sockets: used 1337
TCP: inuse 2636 orphan 1320 tw 883 alloc 2640 mem 43256
UDP: inuse 5
RAW: inuse 0
FRAG: inuse 0 memory 0

Both squid are use aufs store algoritm.



Best Regards
Paweł Staszewski
ART-COM
+48327522333
+480609183038



Re: Odp: Re: [squid-users] how to apply epoll-2_5 patch to squid2.5-stable9

2005-04-13 Thread Paweł Staszewski
:   245383 KB
memPoolAlloc calls: 2919539494
memPoolFree calls: 2914209246
File descriptor usage for squid:
Maximum number of file descriptors:   32768
Largest file desc currently in use:   1055
Number of file desc currently in use: 1021
Files queued for open:   0
Available number of file descriptors: 31747
Reserved number of file descriptors:   100
Store Disk files open:  12
Internal Data Structures:
2523322 StoreEntries
 14260 StoreEntries with MemObjects
 14160 Hot Object Cache Items
2510208 on-disk objects


[12:17:36 [EMAIL PROTECTED] ~]$ cat /proc/net/sockstat
sockets: used 1000
TCP: inuse 2262 orphan 1290 tw 833 alloc 2263 mem 15274
UDP: inuse 15
RAW: inuse 0
FRAG: inuse 0 memory 0
[12:19:31 [EMAIL PROTECTED] ~]$  


Both squid's are balanced for 3500users with 18Mbit internet uplink (only www)
squid with epoll patch is performing much better :)






 
 


Best Regards
Paweł Staszewski
ART-COM
+48327522333
+480609183038


>>>Henrik Nordstrom <[EMAIL PROTECTED]> 04/13/05 10:42 am >>> 
On Wed, 13 Apr 2005, [Windows-1250] Paweł Staszewski wrote: 
 
>When i apply epool-2_5.patch 
> 
>In my syslog i have this messages: 
> 
>Apr 13 09:42:25 w3cache1 squid[24895]: commSetSelect: 
>epoll_ctl(EPOLL_CTL_DEL): failed on fd=197: (2) No such file or directory 
>Apr 13 09:42:25 w3cache1 squid[24895]: commSetSelect: 
>epoll_ctl(EPOLL_CTL_DEL): failed on fd=234: (2) No such file or directory 
 
Looks like the epoll patch is not 100% perfect yet. 
 
Regards 
Henrik


Odp: Re: [squid-users] how to apply epoll-2_5 patch to squid2.5-stable9

2005-04-13 Thread Paweł Staszewski
Hello
 
Does any have the same problem.
 
When i apply epool-2_5.patch
 
In my syslog i have this messages:
 
Apr 13 09:42:25 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=197: (2) No such file or directory
Apr 13 09:42:25 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=234: (2) No such file or directory
Apr 13 09:42:26 w3cache1 last message repeated 3 times
Apr 13 09:42:26 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=224: (2) No such file or directory
Apr 13 09:42:26 w3cache1 last message repeated 3 times
Apr 13 09:42:26 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=234: (2) No such file or directory
Apr 13 09:42:26 w3cache1 last message repeated 3 times
Apr 13 09:42:28 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=197: (2) No such file or directory
Apr 13 09:42:43 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=299: (2) No such file or directory
Apr 13 09:42:43 w3cache1 last message repeated 3 times
Apr 13 09:42:43 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=379: (2) No such file or directory
Apr 13 09:42:43 w3cache1 last message repeated 3 times
Apr 13 09:42:43 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=269: (2) No such file or directory
Apr 13 09:42:43 w3cache1 last message repeated 3 times
Apr 13 09:42:48 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=349: (2) No such file or directory
Apr 13 09:42:49 w3cache1 last message repeated 7 times
Apr 13 09:42:49 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=57: (2) No such file or directory
Apr 13 09:42:49 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=57: (2) No such file or directory
Apr 13 09:42:49 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=197: (2) No such file or directory
Apr 13 09:42:49 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=57: (2) No such file or directory
Apr 13 09:42:49 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=57: (2) No such file or directory
Apr 13 09:42:52 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=197: (2) No such file or directory
Apr 13 09:43:04 w3cache1 last message repeated 3 times
Apr 13 09:43:04 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=81: (2) No such file or directory
Apr 13 09:43:04 w3cache1 last message repeated 3 times
Apr 13 09:43:05 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=128: (2) No such file or directory
Apr 13 09:43:05 w3cache1 last message repeated 7 times
Apr 13 09:43:07 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=197: (2) No such file or directory
Apr 13 09:43:13 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=355: (2) No such file or directory
Apr 13 09:43:22 w3cache1 last message repeated 3 times
Apr 13 09:43:53 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=266: (2) No such file or directory
Apr 13 09:43:56 w3cache1 last message repeated 3 times
Apr 13 09:43:57 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=144: (2) No such file or directory
Apr 13 09:44:21 w3cache1 last message repeated 3 times
Apr 13 09:44:22 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=180: (2) No such file or directory
Apr 13 09:44:26 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=180: (2) No such file or directory
Apr 13 09:44:29 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=519: (2) No such file or directory
Apr 13 09:44:30 w3cache1 squid[24895]: commSetSelect: epoll_ctl(EPOLL_CTL_DEL): 
failed on fd=180: (2) No such file or directory
 



Best Regards
Paweł Staszewski
ART-COM
+48327522333
+480609183038



[squid-users] how to apply epoll-2_5 patch to squid2.5-stable9

2005-04-12 Thread Paweł Staszewski
Hello
I have question about how to apply epoll-2_5 patch to squid2.5-stable9
  
I download patch from:
http://devel.squid-cache.org/cgi-bin/diff2/epoll-2_5.patch?s2_5
  
and then in squid dir i do : patch -p1 < epoll-2_5.patch
  
Patch was added cleanly but:
./configure --help | grep epoll
show nothing :(
  
And this patch does not change the "configure" file in squid tree
  
What i miss ??


Best Regards
Paweł Staszewski
ART-COM
+48327522333
+480609183038