[squid-users] Question about Parent Cache
Ok im running squid 3.16 on debian, and I have my proxy configured for a parent cache thats upstream, well, What I have discovered is that my local squid NEVER serves cache when its configured for parent cache, only advantage im getting is from the upstream squid which serves cache fine, so, my point is, its pretty much pointless to have a squid cache down here configured for a parent cache, when the parent cache is the only one serving up cache. Sort of makes the whole deal pointless. Might as well just illiminate my local cache and configure my firewall rules to just use the upstream cache. Anything im missing here?
[squid-users] Squid wont talk to parent cache, ICP not working?
Ok guys im trying to setup my existing and fully functional squid 3.1.6
box on squeeze to talk to an identical squid box upstream, but it is not
working, I cant see any requests in access.log on the upstream box of
the downstream box fetching from it.
cache.log shows the following
upstream box (parent):
2012/01/23 00:17:15| Adding nameserver 192.168.1.1 from squid.conf
2012/01/23 00:17:15| Accepting HTTP connections at 192.168.1.205:3128,
FD 11.
2012/01/23 00:17:15| Accepting ICP messages at [::]:3129, FD 12.
2012/01/23 00:17:15| HTCP Disabled.
2012/01/23 00:17:15| Configuring Sibling 192.168.1.40/3128/3129
2012/01/23 00:17:15| Loaded Icons.
2012/01/23 00:17:15| Ready to serve requests.
downstream box (sibling):(should I even conf this as a sibling?
2012/01/23 00:19:11| Adding nameserver 10.10.1.1 from squid.conf
2012/01/23 00:19:11| Accepting HTTP connections at 10.10.1.105:3128, FD
11.
2012/01/23 00:19:11| Accepting ICP messages at [::]:3129, FD 12.
2012/01/23 00:19:11| HTCP Disabled.
2012/01/23 00:19:11| Configuring Parent 192.168.1.205/3128/3129
2012/01/23 00:19:11| Loaded Icons.
2012/01/23 00:19:11| Ready to serve requests.
==
relevant squid.conf entries
upstream box (parent)
http_port 192.168.1.205:3128
hierarchy_stoplist cgi-bin ?
icp_port 3129
cache_peer 192.168.1.40 sibling 3128 3129 default
icp_access allow all
downstream box (sibling):
http_port 10.10.1.105:3128
hierarchy_stoplist cgi-bin ?
icp_port 3129
cache_peer 192.168.1.205 parent 3128 3129 default
prefer_direct off
icp_access allow all
==
Also note that Nmap UDP -sU port scans from both hosts to eachother,
show no open port on 3129 which im using for my ICP port.
Yes I have them open in iptables with
-A INPUT -p udp -m udp --dport 3129 -j ACCEPT
and tried
-A INPUT -p udp --dport 3129 -j ACCEPT
==
Gentlemen, the fail whales tail is slapping me in the face repeatedly
what am I doing wrong???
==
deviant:/var/www# squid3 -v
Squid Cache: Version 3.1.6
configure options: '--build=i486-linux-gnu' '--prefix=/usr'
'--includedir=${prefix}/include' '--mandir=${prefix}/share/man'
'--infodir=${prefix}/share/info' '--sysconfdir=/etc'
'--localstatedir=/var' '--libexecdir=${prefix}/lib/squid3'
'--disable-maintainer-mode' '--disable-dependency-tracking'
'--disable-silent-rules' '--srcdir=.' '--datadir=/usr/share/squid3'
'--sysconfdir=/etc/squid3' '--mandir=/usr/share/man'
'--with-cppunit-basedir=/usr' '--enable-inline' '--enable-async-io=8'
'--enable-storeio=ufs,aufs,diskd' '--enable-removal-policies=lru,heap'
'--enable-delay-pools' '--enable-cache-digests' '--enable-underscores'
'--enable-icap-client' '--enable-follow-x-forwarded-for'
'--enable-auth=basic,digest,ntlm,negotiate'
'--enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SASL,SMB,YP,DB,POP3,getpwnam,squid_radius_auth,multi-domain-NTLM'
'--enable-ntlm-auth-helpers=smb_lm,'
'--enable-digest-auth-helpers=ldap,password'
'--enable-negotiate-auth-helpers=squid_kerb_auth'
'--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group'
'--enable-arp-acl' '--enable-esi' '--disable-translation'
'--with-logdir=/var/log/squid3' '--with-pidfile=/var/run/squid3.pid'
'--with-filedescriptors=65536' '--with-large-files' '--with-default-user=proxy'
'--enable-linux-netfilter' 'build_alias=i486-linux-gnu' 'CFLAGS=-g -O2 -g -Wall
-O2' 'LDFLAGS=' 'CPPFLAGS=' 'CXXFLAGS=-g -O2 -g -Wall -O2'
--with-squid=/build/buildd-squid3_3.1.6-1.2+squeeze2-i386-PV_6Lv/squid3-3.1.6
[squid-users] Question about implementing Upstream Parent Squid Cache
Ok yay So We just installed a brand new squid cache on the network segment above ours! yay! but I need to know how to properly configure my local squid box to use it, I would like it to fetch cache from the parent proxy obviously, and I also would like it to still have internet and serve cache from its own cache if the parent proxy ever goes down, Im going to try with the below example right now to see how it goes. Thanks for any input I can get on this from you pros, its very much appreciated. cache_peer 192.168.1.205 parent 3128 0 no-query prefer_direct off any issues with this that I should be aware of? I do NOT want my local squid doing always direct when the parent squid is down, I want it to serve cache as well.
[squid-users] Always Direct for Apache on Squid Server
Im hosting a small custom homepage for my lan on the same box as my squid cache, and It runs some dynamic content and I dont want requests for that local LAN box being served from cache. So basically Apache (serving the homepage for my lan) and Squid (3128 transparent - No iptables, No Dhcp)are running on the same machine So how can I setup where http requests for my apache on that box doesnt get served cache?
Re: [squid-users] Cannot access an website, www.asus.com
hey dude, on your squid box, open up a terminal and do this to see the log file in real time, tail -f /var/log/squid3/access.log or tail -f /var/log/squid/access.log depending on where your logs are of course.. then u can watch the logs as they come in, and pinpoint your error, its a little old timey trick that works good for debugging On Sat, 2012-01-21 at 19:09 +1300, Amos Jeffries wrote: On 21/01/2012 7:07 a.m., Jorge Bastos wrote: Howdy mates, I have a problem with an website, not that I really ASUS... in fact their The following error was encountered while trying to retrieve the URL: http://www.asus.com/ Read Error The system returned: (104) Connection reset by peer Start with figuring out which server is failing. Your Squid access.log entry for the request should contain the IP address of the server which was contacted to fetch the response. Read Error means the connection got setup at the TCP level but then no data packets for that connection got through. Usually PMTU black hole problems, Window Scaling problems, ECN problems. TCP and ICMP level things like that breaking the packet management. Amos
Re: [squid-users] Cannot access an website, www.asus.com
hey dude, on your squid box, open up a terminal and do this to see the log file in real time, tail -f /var/log/squid3/access.log or tail -f /var/log/squid/access.log depending on where your logs are of course.. then u can watch the logs as they come in, and pinpoint your error, its a little old timey trick that works good for debugging On Fri, 2012-01-20 at 18:07 +, Jorge Bastos wrote: Howdy mates, I have a problem with an website, not that I really ASUS... in fact their hardware makes me sick, but I found this problem when a client gave me a PC to fix with an ASUS mboard. When I try to access I have: --- ERROR The requested URL could not be retrieved The following error was encountered while trying to retrieve the URL: http://www.asus.com/ Read Error The system returned: (104) Connection reset by peer An error condition occurred while reading data from the network. Please retry your request. Your cache administrator is webmaster. Generated Fri, 20 Jan 2012 17:50:55 GMT by localhost (squid/3.1.18) --- Squid is action as transparent-proxy: http_port 192.168.1.1:8080 intercept How could I debug this? Thanks in advanced, Jorge Bastos,
[squid-users] HELP: UPDATE
Ok, I rm -rf`d all directories named squid from my box thinking that attempting to do a fresh install after would fix everything NOPE, and wtf, apparently the install binary wont recreate the directories now, yay! wtf symlink madness any suggestions how to just get squid to reinstall from apt would be, so awesome. I removed squid due to a botched attempt to build and isntall from source, ok, then when I reinstalled squid after doing a make uninstall, squid was complaining about the error pages missing, it was looking for them in a new dir that it should not have been. rm -rf /usr/share/squid3/ --squid3.1.6 SHOULD be looking here rm -rf /usr/share/squid-langpack ---but,squid keeps looking for them here deviant:/# apt-get install squid3 Reading package lists... Done Building dependency tree Reading state information... Done Suggested packages: squidclient squid-cgi resolvconf The following NEW packages will be installed: squid3 0 upgraded, 1 newly installed, 0 to remove and 2 not upgraded. Need to get 0 B/1,445 kB of archives. After this operation, 3,666 kB of additional disk space will be used. Selecting previously deselected package squid3. (Reading database ... 249217 files and directories currently installed.) Unpacking squid3 (from .../squid3_3.1.6-1.2+squeeze1_i386.deb) ... Processing triggers for man-db ... Setting up squid3 (3.1.6-1.2+squeeze1) ... Restarting Squid HTTP Proxy 3.x: squid3FATAL: MIME Config Table /usr/share/squid3/mime.conf: (2) No such file or directory Squid Cache (Version 3.1.6): Terminated abnormally. CPU Usage: 0.012 seconds = 0.004 user + 0.008 sys Maximum Resident Size: 16320 KB Page faults with physical i/o: 0 failed! cache.log === 2011/12/31 00:10:46| Starting Squid Cache version 3.1.6 for i486-pc-linux-gnu... 2011/12/31 00:10:46| Process ID 25488 2011/12/31 00:10:46| With 65535 file descriptors available 2011/12/31 00:10:46| Initializing IP Cache... 2011/12/31 00:10:46| DNS Socket created at [::], FD 7 2011/12/31 00:10:46| DNS Socket created at 0.0.0.0, FD 8 2011/12/31 00:10:46| Adding nameserver 127.0.0.1 from squid.conf 2011/12/31 00:10:46| errorpage.cc(293) errorTryLoadText: '/usr/share/squid3/errors/templates/ERR_LIFETIME_EXP': (2) No such file or directory FATAL: failed to find or read error text file. Squid Cache (Version 3.1.6): Terminated abnormally. CPU Usage: 0.040 seconds = 0.008 user + 0.032 sys Maximum Resident Size: 41792 KB Page faults with physical i/o: 0
Re: [squid-users] HELP: UPDATE
THANK YOU for your response Peter. deviant:/home/devadmin# dpkg -l | grep squid ii sarg 2.2.5-2 squid analysis report generator rc squid 2.7.STABLE9-2.1 Internet object cache (WWW proxy cache) ii squid-cgi 3.1.6-1.2+squeeze1 A full featured Web Proxy cache (HTTP proxy) - control CGI ii squid-common 2.7.STABLE9-2.1 Internet object cache (WWW proxy cache) - common files ii squid-langpack20100628-1 Localized error pages for Squid rc squid33.1.6-1.2+squeeze1 A full featured Web Proxy cache (HTTP proxy) ii squid3-common 3.1.6-1.2+squeeze1 A full featured Web Proxy cache (HTTP proxy) - common files ii squidclient 3.1.6-1.2+squeeze1 A full featured Web Proxy cache (HTTP proxy) - control utility But yeah basically after I failed to compiled a newer version, because I need SSL, I just decided I would reinstall the vanilla squid3.1.6 from debian squeeze repos, but when I installed it, it kept complaining about files missing, as if somehow some symlinks were made, and Im guessing that make install from debian 3.1.8 must have not cleaned up after itself after doing a 'make uninstall' of course im totally freaking out coz producting is in 5 hours and I just figured Id clarify. On Sat, 2011-12-31 at 22:45 +1300, Pieter De Wit wrote: On 31/12/2011 21:32, someone wrote: Ok, I rm -rf`d all directories named squid from my box thinking that attempting to do a fresh install after would fix everything NOPE, and wtf, apparently the install binary wont recreate the directories now, yay! wtf symlink madness any suggestions how to just get squid to reinstall from apt would be, so awesome. I removed squid due to a botched attempt to build and isntall from source, ok, then when I reinstalled squid after doing a make uninstall, squid was complaining about the error pages missing, it was looking for them in a new dir that it should not have been. rm -rf /usr/share/squid3/--squid3.1.6 SHOULD be looking here rm -rf /usr/share/squid-langpack---but,squid keeps looking for them here deviant:/# apt-get install squid3 Reading package lists... Done Building dependency tree Reading state information... Done Suggested packages: squidclient squid-cgi resolvconf The following NEW packages will be installed: squid3 0 upgraded, 1 newly installed, 0 to remove and 2 not upgraded. Need to get 0 B/1,445 kB of archives. After this operation, 3,666 kB of additional disk space will be used. Selecting previously deselected package squid3. (Reading database ... 249217 files and directories currently installed.) Unpacking squid3 (from .../squid3_3.1.6-1.2+squeeze1_i386.deb) ... Processing triggers for man-db ... Setting up squid3 (3.1.6-1.2+squeeze1) ... Restarting Squid HTTP Proxy 3.x: squid3FATAL: MIME Config Table /usr/share/squid3/mime.conf: (2) No such file or directory Squid Cache (Version 3.1.6): Terminated abnormally. CPU Usage: 0.012 seconds = 0.004 user + 0.008 sys Maximum Resident Size: 16320 KB Page faults with physical i/o: 0 failed! cache.log === 2011/12/31 00:10:46| Starting Squid Cache version 3.1.6 for i486-pc-linux-gnu... 2011/12/31 00:10:46| Process ID 25488 2011/12/31 00:10:46| With 65535 file descriptors available 2011/12/31 00:10:46| Initializing IP Cache... 2011/12/31 00:10:46| DNS Socket created at [::], FD 7 2011/12/31 00:10:46| DNS Socket created at 0.0.0.0, FD 8 2011/12/31 00:10:46| Adding nameserver 127.0.0.1 from squid.conf 2011/12/31 00:10:46| errorpage.cc(293) errorTryLoadText: '/usr/share/squid3/errors/templates/ERR_LIFETIME_EXP': (2) No such file or directory FATAL: failed to find or read error text file. Squid Cache (Version 3.1.6): Terminated abnormally. CPU Usage: 0.040 seconds = 0.008 user + 0.032 sys Maximum Resident Size: 41792 KB Page faults with physical i/o: 0 Hi, What does dpkg -l | grep squid show ? Cheers, Pieter
Re: [squid-users] Problem Compiling Squid 1.1.8 (noob?)
Well I copied the configuration from my at the time, current squid, 3.1.6, which doesnt isnt built with ssl support, which is why im trying to build 3.1.8, ok and I got all my configure directives from the output of the squid3 -v command since im a total noob and figured that would be easiest and I would just add the --enable-ssl option to it. But I also ended up copying that as well. So hope that clarifies. But still cannot build, I mean it almost finishes but this error is not gunna fly. On Sat, 2011-12-31 at 10:31 +0100, Helmut Hullen wrote: Hallo, someone, Du meintest am 30.12.11: Problem Compiling Squid 1.1.8 deviant:/home/devadmin/source/squid-3.1.18# ./configure -O2' --with-squid=/build/buildd-squid3_3.1.6-1.2+squeeze1-i386-_y3HlV /squid3-3.1.6 Just for curiosity: which squid version do you really mean? Viele Gruesse! Helmut
Re: [squid-users] HELP: UPDATE
Thanks guys! ---noob! it worked! I did try apt-get purge by itself, wasnt aware that I needed to also include the names of the packages, but IT WORKED! THANK YOU! well tommarow Ill get back at compiling and I will check out that link of requisites for building squid amos. THANKS AGAIN! BACK IN PRODUCTION... On Sun, 2012-01-01 at 00:17 +1300, Amos Jeffries wrote: On 31/12/2011 11:56 p.m., someone wrote: THANK YOU for your response Peter. deviant:/home/devadmin# dpkg -l | grep squid ii sarg 2.2.5-2 squid analysis report generator rc squid 2.7.STABLE9-2.1 Internet object cache (WWW proxy cache) ii squid-cgi 3.1.6-1.2+squeeze1 A full featured Web Proxy cache (HTTP proxy) - control CGI ii squid-common 2.7.STABLE9-2.1 Internet object cache (WWW proxy cache) - common files ii squid-langpack20100628-1 Localized error pages for Squid rc squid33.1.6-1.2+squeeze1 A full featured Web Proxy cache (HTTP proxy) ii squid3-common 3.1.6-1.2+squeeze1 A full featured Web Proxy cache (HTTP proxy) - common files ii squidclient 3.1.6-1.2+squeeze1 A full featured Web Proxy cache (HTTP proxy) - control utility But yeah basically after I failed to compiled a newer version, because I need SSL, I just decided I would reinstall the vanilla squid3.1.6 from debian squeeze repos, but when I installed it, it kept complaining about files missing, as if somehow some symlinks were made, and Im guessing that make install from debian 3.1.8 must have not cleaned up after itself after doing a 'make uninstall' of course im totally freaking out coz producting is in 5 hours and I just figured Id clarify. aptitude purge to remove a package in future ;). You will need to begin by running aptitude purge squid squid3 squid-langpack squid-common squid3-common. Then re-install squid3 and apt should be able to pull the others back in properly as dependencies. wiki.squid-cache.org/KnowledgeBase/Debian has the set of minimum required ./configure options to build squid for Debian. *Except* that the official packages use squid3 instead of squid in the paths, and the custom built binary is also called /usr/sbin/squid so the squid3 packages /etc/init.d/squid3 script needs a small edit to change the executables name. Amos
[squid-users] Problem Compiling Squid 1.1.8 (noob?)
Problem Compiling Squid 1.1.8 (novice user is confused by this output)
=
deviant:/home/devadmin/source/squid-3.1.18# ./configure '--enable-ssl'
'--build=i486-linux-gnu' '--prefix=/usr' '--includedir=
${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=
${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var'
'--libexecdir=${prefix}/lib/squid3' '--disable-maintainer-mode'
'--disable-dependency-tracking' '--disable-silent-rules' '--srcdir=.'
'--datadir=/usr/share/squid3' '--sysconfdir=/etc/squid3'
'--mandir=/usr/share/man' '--with-cppunit-basedir=/usr'
'--enable-inline' '--enable-async-io=8'
'--enable-storeio=ufs,aufs,diskd' '--enable-removal-policies=lru,heap'
'--enable-delay-pools' '--enable-cache-digests' '--enable-underscores'
'--enable-icap-client' '--enable-follow-x-forwarded-for'
'--enable-auth=basic,digest,ntlm,negotiate'
'--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group'
'--enable-arp-acl' '--enable-esi' '--disable-translation'
'--with-logdir=/var/log/squid3' '--with-pidfile=/var/run/squid3.pid'
'--with-filedescriptors=65536' '--with-large-files' '--with-default-user=proxy'
'--enable-linux-netfilter' 'build_alias=i486-linux-gnu' 'CFLAGS=-g -O2 -g -Wall
-O2' 'LDFLAGS=' 'CPPFLAGS=' 'CXXFLAGS=-g -O2 -g -Wall -O2'
--with-squid=/build/buildd-squid3_3.1.6-1.2+squeeze1-i386-_y3HlV/squid3-3.1.6
Configure passes with NO errors, however...
=
MAKE RESULTS IN THE FOLLOWING:
Wcomments -Werror -D_REENTRANT -m32 -D_LARGEFILE_SOURCE
-D_FILE_OFFSET_BITS=64 -g -O2 -g -Wall -O2 -c -o store.o store.cc
store.cc: In member function ‘void StoreEntry::deferProducer(const
RefCountAsyncCall)’:
store.cc:376: error: no match for ‘operator’ in ‘std::operator [with
_Traits = std::char_traitschar](((std::basic_ostreamchar,
std::char_traitschar
)((std::ostream*)operator(((std::ostream)((std::basic_ostreamchar,
std::char_traitschar *)std::operator [with _Traits =
std::char_traitschar](((std::basic_ostreamchar,
std::char_traitschar )((std::basic_ostreamchar,
std::char_traitschar *)std::operator [with _Traits =
std::char_traitschar](((std::basic_ostreamchar,
std::char_traitschar )((std::basic_ostreamchar,
std::char_traitschar *)std::operator [with _Traits =
std::char_traitschar](((std::basic_ostreamchar,
std::char_traitschar )((std::basic_ostreamchar,
std::char_traitschar *)std::operator [with _Traits =
std::char_traitschar](((std::basic_ostreamchar,
std::char_traitschar )((std::basic_ostreamchar,
std::char_traitschar *)((std::basic_ostreamchar,
std::char_traitschar *)std::operator [with _Traits =
std::char_traitschar](((std::basic_ostreamchar,
std::char_traitschar )((std::basic_ostreamchar,
std::char_traitschar *)std::operator [with _Traits =
std::char_traitschar](((std::basic_ostreamchar,
std::char_traitschar )((std::ostream*)Debug::getDebugOut())),
((const char*)store.cc, ((const
char*)()))-std::basic_ostream_CharT, _Traits::operator [with
_CharT = char, _Traits = std::char_traitschar](377))), ((const
char*)) , ((const char*)( __FUNCTION__), ((const char*):
, ((const char*)Deferred producer call is allready set to: ,
((AsyncCall)((AsyncCall*)((StoreEntry*)this)-StoreEntry::deferredProducer.RefCountC::operator*
[with C = AsyncCall]()), ((const char*), requested call: )) ((const
RefCountAsyncCall*)producer)-RefCountC::operator* [with C = AsyncCall]()’
/usr/include/c++/4.4/ostream:108: note: candidates are:
std::basic_ostream_CharT, _Traits std::basic_ostream_CharT,
_Traits::operator(std::basic_ostream_CharT, _Traits
(*)(std::basic_ostream_CharT, _Traits)) [with _CharT = char, _Traits
= std::char_traitschar]
/usr/include/c++/4.4/ostream:117: note:
std::basic_ostream_CharT, _Traits std::basic_ostream_CharT,
_Traits::operator(std::basic_ios_CharT, _Traits
(*)(std::basic_ios_CharT, _Traits)) [with _CharT = char, _Traits =
std::char_traitschar]
/usr/include/c++/4.4/ostream:127: note:
std::basic_ostream_CharT, _Traits std::basic_ostream_CharT,
_Traits::operator(std::ios_base (*)(std::ios_base)) [with _CharT =
char, _Traits = std::char_traitschar]
/usr/include/c++/4.4/ostream:165: note:
std::basic_ostream_CharT, _Traits std::basic_ostream_CharT,
_Traits::operator(long int) [with _CharT = char, _Traits =
std::char_traitschar]
/usr/include/c++/4.4/ostream:169: note:
std::basic_ostream_CharT, _Traits std::basic_ostream_CharT,
_Traits::operator(long unsigned int) [with _CharT = char, _Traits =
std::char_traitschar]
/usr/include/c++/4.4/ostream:173: note:
std::basic_ostream_CharT, _Traits std::basic_ostream_CharT,
_Traits::operator(bool) [with _CharT = char, _Traits =
std::char_traitschar]
/usr/include/c++/4.4/bits/ostream.tcc:91: note:
std::basic_ostream_CharT, _Traits std::basic_ostream_CharT,
_Traits::operator(short int) [with _CharT = char, _Traits =
std::char_traitschar]
[squid-users] Adjusting Squid stale cache timeout for dead hosts
I just had one of my webservers go down, unrelated to my squid server on my local lan, but I noticed that after a certain ammount of time, seems that once squid realizes that a host is down it will then serve the most recent version of the site from cache, which I think is EXCELLENT, i never noticed this before, of course i recently upgraded from squid3 debian lenny, to squid 3.1 in debian squeeze. One thing tho, how do I adjust the timing on this, in other words, I mean, instead of squid taking 2 minutes or so to realize the actual host is down and serve cache, how can I reduce this period? to say 20-30 seconds? Clearly I wouldnt want squid to give up on a host with high latency, but I would like to know how to fine tune this until I get a satisfactory timing. Or if its possible at all for that matter. I just think this is a great feature but in order to really make use of it when there are connectivity issues, would like to reduce the ttl on the cached version served. Thanks in advance!
[squid-users] enabling https 443 on vanilla squid -debian squeeze-
Allright, many of you know me here from some of my previous posts, and
Im sure if I went a googling Id find answers to my questions but hey,
why, when im subscribed to the squid-cache users mailing list~ hehe.
Well anyway, ive never used squid for ssl/https:443 before and noticed
one of my clients playing a lot of that farmville crap on facebook,
sometimes uses ssl, and farmville uses a considerable ammount of
bandwidth. I wanna intercept all of that wasted redownloads so, since
farmville seems to be using https more, my clients arent getting the
benefit of my squid cache :(, welp now its time to enable ssl bump or
w/e they call it in squid.
ok, as I understand squid must be compiled to cache ssl http content?
Because im using a vanilla version that ships with debian squeeze. see
below.
I dont see any --enable ssl below :(
deviant:/home/devadmin# squid3 -v
Squid Cache: Version 3.1.6
configure options: '--build=i486-linux-gnu' '--prefix=/usr'
'--includedir=${prefix}/include' '--mandir=${prefix}/share/man'
'--infodir=${prefix}/share/info' '--sysconfdir=/etc'
'--localstatedir=/var' '--libexecdir=${prefix}/lib/squid3'
'--disable-maintainer-mode' '--disable-dependency-tracking'
'--disable-silent-rules' '--srcdir=.' '--datadir=/usr/share/squid3'
'--sysconfdir=/etc/squid3' '--mandir=/usr/share/man'
'--with-cppunit-basedir=/usr' '--enable-inline' '--enable-async-io=8'
'--enable-storeio=ufs,aufs,diskd' '--enable-removal-policies=lru,heap'
'--enable-delay-pools' '--enable-cache-digests' '--enable-underscores'
'--enable-icap-client' '--enable-follow-x-forwarded-for'
'--enable-auth=basic,digest,ntlm,negotiate'
'--enable-basic-auth-helpers=LDAP,MSNT,NCSA,PAM,SASL,SMB,YP,DB,POP3,getpwnam,squid_radius_auth,multi-domain-NTLM'
'--enable-ntlm-auth-helpers=smb_lm,'
'--enable-digest-auth-helpers=ldap,password'
'--enable-negotiate-auth-helpers=squid_kerb_auth'
'--enable-external-acl-helpers=ip_user,ldap_group,session,unix_group,wbinfo_group'
'--enable-arp-acl' '--enable-esi' '--disable-translation'
'--with-logdir=/var/log/squid3' '--with-pidfile=/var/run/squid3.pid'
'--with-filedescriptors=65536' '--with-large-files' '--with-default-user=proxy'
'--enable-linux-netfilter' 'build_alias=i486-linux-gnu' 'CFLAGS=-g -O2 -g -Wall
-O2' 'LDFLAGS=' 'CPPFLAGS=' 'CXXFLAGS=-g -O2 -g -Wall -O2'
--with-squid=/build/buildd-squid3_3.1.6-1.2+squeeze1-i386-_y3HlV/squid3-3.1.6
Why wouldnt they ship the vanilla binarie with ssl enabled??
bawww
[squid-users] scheduling not working for me, what am I doing wrong?
I am unable to limit the hours squid will accept requests squid3 -v Squid Cache: Version 3.0.STABLE8 ---yes I know its older but will do for my needs. Ive tried this: acl ACLTIME time SMTWHFA 06:00-23:30 http_access allow ACLTIME and ive tried this: acl ACLTIME time 06:00-23:30 http_access allow ACLTIME None of the above actually works. I am trying to shut off squids access between 23:30pm and 06:00am
[squid-users] hey guise
I want my squid to stop serving internet at specified times I ADDED THESE LINES TO MY CONF then ran Squid -k reconfigure acl hours time 06:00-23:00 http_access allow hours yet it is now Mon Nov 21 23:16:10 PST 2011 and squid is still serving up internet hot and fresh I didnt try completely restarting squid yet, but I have a suspicion that wont do it either Squid Cache: Version 3.0.STABLE8 ---yes I know its a bit outdated but it works for me :)
[squid-users] Erm, Need Make Install Command Syntax for Debian
Im trying to Upgrade my squid install, I need to compile a newer version of squid 3.1 on a debian machine, but when I run Make Install, it puts everything in the wrong directories. Does anyone know the proper Make Install command for debian so everything goes into the proper directories? Example: should be /etc/squid3/squid.conf but instead its this /usr/local/squid/etc/squid.conf Thats all I really need to get this upgraded, so any help would be grately appreciated, thanks!
[squid-users] Squid 3.0 Stable-8 How to Hide or Spoof User Agent?
Squid 3.0 Stable-8: How to Hide or Spoof User Agent? Does anyone know how to achieve this, or what entries are required for the .conf ? I have all my lan traffic automatically routed through a transparent squid cache running squid 3.0 stable 8. And everythings working great, I just thought masking my user agents would be another nice layer of security.
