Re: [squid-users] cache_peer_domain + POST

2008-07-06 Thread Henrik Nordstrom
On sön, 2008-07-06 at 15:49 +0200, Sébastien WENSKE wrote:
 Hi all,
 
 I have set a cache_peer_domain to use a parent proxy for a specific domain.
 
  cache_peer 10.147.113.254   parent218   0  proxy-only name=office
  cache_peer_domain office .specific.net
  acl specific dstdomain specific.net
  never_direct allow specific
 
 It will work fine until i try to post a form

You'll need never_direct as well.

POST isn't normally cachable so Squid does not bother to use peer caches
if it doesn't have to.

Regards
Henrik


signature.asc
Description: This is a digitally signed message part


Re: [squid-users] cache_peer_domain + POST

2008-07-06 Thread Sébastien WENSKE

Thanks Henrik,

I've try to do this, but I don't know how to specify never_direct POST 
method only for this specific domain, i need to get this parent proxy fot 
this domain because it's IP filtred and only the IP of my office is allowed.


Sebastien.

- Original Message - 
From: Henrik Nordstrom [EMAIL PROTECTED]

To: Sébastien WENSKE [EMAIL PROTECTED]
Cc: squid-users@squid-cache.org
Sent: Sunday, July 06, 2008 9:10 PM
Subject: Re: [squid-users] cache_peer_domain + POST

On sön, 2008-07-06 at 15:49 +0200, Sébastien WENSKE wrote:

Hi all,

I have set a cache_peer_domain to use a parent proxy for a specific 
domain.


 cache_peer 10.147.113.254   parent218   0  proxy-only name=office
 cache_peer_domain office .specific.net
 acl specific dstdomain specific.net
 never_direct allow specific

It will work fine until i try to post a form


You'll need never_direct as well.

POST isn't normally cachable so Squid does not bother to use peer caches
if it doesn't have to.

Regards
Henrik 





Re: [squid-users] cache_peer_domain + POST

2008-07-06 Thread Henrik Nordstrom
On sön, 2008-07-06 at 21:57 +0200, Sébastien WENSKE wrote:
 Thanks Henrik,
 
 I've try to do this, but I don't know how to specify never_direct POST 
 method only for this specific domain, i need to get this parent proxy fot 
 this domain because it's IP filtred and only the IP of my office is allowed.

Sorry, read your configuration again and I now see that you did try to
use never_direct. But a . was missing from your acl.. (but present in
cache_peer_domain..)

Try this:

acl specific dstdomain .specific.net
cache_peer 10.147.113.254   parent218   0  proxy-only name=office
cache_peer_access office allow specific
never_direct allow specific


that cache_peer_access line is equivalent to a cache_peer_domain using
the same domains, but as you also need an acl matching these domains
cache_peer_access is easier as there is less duplication and less risk
for unnoticed configuration errors...

Regards
Henrik


signature.asc
Description: This is a digitally signed message part


Re: [squid-users] cache_peer_domain + POST

2008-07-06 Thread Sébastien WENSKE

It works fine !! thank you so much !!!

- Original Message - 
From: Henrik Nordstrom [EMAIL PROTECTED]

To: Sébastien WENSKE [EMAIL PROTECTED]
Cc: squid-users@squid-cache.org
Sent: Sunday, July 06, 2008 10:51 PM
Subject: Re: [squid-users] cache_peer_domain + POST

On sön, 2008-07-06 at 21:57 +0200, Sébastien WENSKE wrote:

Thanks Henrik,

I've try to do this, but I don't know how to specify never_direct POST
method only for this specific domain, i need to get this parent proxy fot
this domain because it's IP filtred and only the IP of my office is 
allowed.


Sorry, read your configuration again and I now see that you did try to
use never_direct. But a . was missing from your acl.. (but present in
cache_peer_domain..)

Try this:

acl specific dstdomain .specific.net
cache_peer 10.147.113.254   parent218   0  proxy-only name=office
cache_peer_access office allow specific
never_direct allow specific


that cache_peer_access line is equivalent to a cache_peer_domain using
the same domains, but as you also need an acl matching these domains
cache_peer_access is easier as there is less duplication and less risk
for unnoticed configuration errors...

Regards
Henrik