Re: [PATCH] HelperReply upgrade stage 3

2012-11-30 Thread Amos Jeffries
Updated patch attached for review. On 27/11/2012 9:10 a.m., Alex Rousskov wrote: On 11/24/2012 08:27 AM, Amos Jeffries wrote: This stage of the helper reply protocol adds kv-pair support to the url_rewrite_helper interfacefor URL redirect and rewriteoperations. It uses the new Notes objects

Re: [PATCH] cert validation cache

2012-11-30 Thread Amos Jeffries
On 25/11/2012 4:53 a.m., Tsantilas Christos wrote: I am sending an updated patch for cert validation cache. This is a patch over the latest SSL server certificate validator implementation (cert_validator-v3.patch) I posted in this mailing list No patch was attached. Is there something coming?

Re: [PATCH] SSL server certificate fingerprint ACL type

2012-11-30 Thread Amos Jeffries
On 25/11/2012 4:47 a.m., Tsantilas Christos wrote: On 11/23/2012 01:49 PM, Amos Jeffries wrote: On 15/11/2012 1:12 a.m., Tsantilas Christos wrote: SSL server certificate fingerprint ACL type This patch add the server_ssl_cert_fingerprint acl type to match against server SSL certificate

Re: [PATCH] cleanup UFS swaplog messages

2012-11-30 Thread Amos Jeffries
On 20/11/2012 6:43 a.m., Alex Rousskov wrote: On 11/18/2012 10:28 PM, Amos Jeffries wrote: Inspired by bug 3663 - does not fix it, but then I'm not sure the report is a squid bug or if it is regular filesystem permissions error. This patch seeks to improve the messages output by UFS swap log

Re: [PATCH] cert validation cache

2012-11-30 Thread Tsantilas Christos
On 11/24/2012 05:53 PM, Tsantilas Christos wrote: I am sending an updated patch for cert validation cache. This is a patch over the latest SSL server certificate validator implementation (cert_validator-v3.patch) I posted in this mailing list I am reposting with patch attached. On

Re: [PATCH] cert validation cache

2012-11-30 Thread Tsantilas Christos
On 11/30/2012 01:30 PM, Amos Jeffries wrote: On 25/11/2012 4:53 a.m., Tsantilas Christos wrote: I am sending an updated patch for cert validation cache. This is a patch over the latest SSL server certificate validator implementation (cert_validator-v3.patch) I posted in this mailing list

Known v6 bug?

2012-11-30 Thread Arzhel Younsi
Hey list! Last week we ran into what I believe is a ipv6 implementation bug. We used to have a default IPv6 route (sent by the router via RA) on our Squid hosts but only fe80 (linklocal) addresses. A normal behavior would have been to not try to reach any v6 services outside its scope (same vlan)

Re: ICAP vectoring points

2012-11-30 Thread Alex Rousskov
On 11/28/2012 11:26 AM, Steve Hill wrote: On 28.11.12 16:19, Alex Rousskov wrote: Yes, it is both very far from trivial and, in most cases, avoidable by redesigning the adaptation approach itself. I have seen many use cases that started with a post-cache requirement, but were

Re: [PATCH] HelperReply upgrade stage 3

2012-11-30 Thread Alex Rousskov
On 11/30/2012 04:28 AM, Amos Jeffries wrote: Updated patch attached for review. +if (!helperNotes) { +delete helperNotes; +helperNotes = NULL; +} Wrong condition. +Notes *helperNotes; // collection of meta notes associated with this request. Please

Re: [PATCH] SSL server certificate fingerprint ACL type

2012-11-30 Thread Alex Rousskov
On 11/30/2012 04:49 AM, Amos Jeffries wrote: On 25/11/2012 4:47 a.m., Tsantilas Christos wrote: acl aclname server_ssl_cert_fingerprint [-sha1] fingerprint1 ... * ACL name seems to be a bit on the long side. How about dropping the ssl_ sub-section out of it and changing _fingerprint to

Re: ICAP vectoring points

2012-11-30 Thread Alex Rousskov
On 11/29/2012 02:32 AM, Steve Hill wrote: On 29.11.12 04:16, Eliezer Croitoru wrote: I was just wondering what exactly you need to do? What is the goal\task of the ICAP server. The ICAP server does on-the-fly content filtering - it analyses the request headers (in reqmod), the response

Re: Multiple issues in Squid-3.2.3 SMP + rock + aufs + a bit of load

2012-11-30 Thread Alex Rousskov
On 11/28/2012 04:07 PM, Henrik Nordström wrote: - each worker restarting at startup due to rock store DB open failures (timeout). This seems to settle once the rock store have completed rebuilding, but not 100% sure that's the cause as logs are a bit inclusive. Might also be related to the

Re: [PATCH] Refactoring url to original url (storeurl step 1)

2012-11-30 Thread Alex Rousskov
On 11/28/2012 09:39 PM, Eliezer Croitoru wrote: On 11/28/2012 6:36 PM, Alex Rousskov wrote: Overall, I think this change is a very important step, but it should not be committed until we have other steps (or at all): These point of change do reflect in major points of the code the

Build failed in Jenkins: 3.2-matrix » master #281

2012-11-30 Thread noc
See http://build.squid-cache.org/job/3.2-matrix/./label=master/281/changes Changes: [Amos Jeffries] Fix accept_filter on Linux accept_filter directive on Linux requires TCP_DEFER_ACCEPT which in turn requires netinet/tcp.h. This was removed when splitting comm into libcomm.la. [Amos Jeffries]

Re: Multiple issues in Squid-3.2.3 SMP + rock + aufs + a bit of load

2012-11-30 Thread Henrik Nordström
fre 2012-11-30 klockan 10:47 -0700 skrev Alex Rousskov: IIRC, Rock store diskers should process queries while rebuilding so db open should not fail due to rebuild itself. I bet this is actually related to the problem discussed below. I think so too. - kid registration failures at startup

Re: Known v6 bug?

2012-11-30 Thread Amos Jeffries
On 1/12/2012 3:09 a.m., Arzhel Younsi wrote: Hey list! Last week we ran into what I believe is a ipv6 implementation bug. We used to have a default IPv6 route (sent by the router via RA) on our Squid hosts but only fe80 (linklocal) addresses. A normal behavior would have been to not try to

Re: Multiple issues in Squid-3.2.3 SMP + rock + aufs + a bit of load

2012-11-30 Thread Alex Rousskov
On 11/30/2012 02:25 PM, Henrik Nordström wrote: We should look into why it is at all needed. From what I can understand it should not be needed. Agreed. Please do that if you can. Have the foreground/background store rebuild logics been changed somehow? I do not recall changes to

Re: [PATCH] HelperReply upgrade stage 3

2012-11-30 Thread Amos Jeffries
On 1/12/2012 5:56 a.m., Alex Rousskov wrote: On 11/30/2012 04:28 AM, Amos Jeffries wrote: Updated patch attached for review. +if (!helperNotes) { +delete helperNotes; +helperNotes = NULL; +} Wrong condition. :-( fixed. +Notes *helperNotes; // collection

Re: ICAP connections under heavy loads

2012-11-30 Thread Amos Jeffries
On 30/11/2012 5:59 p.m., Eliezer Croitoru wrote: Bump. I was wondering if there was any progress about this matter? The xaction-orphans patch has been picked up separately by one Daniel B. and is being tracked with http://bugs.squid-cache.org/show_bug.cgi?id=3688. With only good results

Jenkins build is back to normal : 3.1-matrix » master #153

2012-11-30 Thread noc
See http://build.squid-cache.org/job/3.1-matrix/./label=master/153/changes

Build failed in Jenkins: 3.1-matrix » obsd-49-x86 #153

2012-11-30 Thread noc
See http://build.squid-cache.org/job/3.1-matrix/./label=obsd-49-x86/153/ -- Started by upstream project 3.1-matrix build number 153 originally caused by: Started by user Amos Jeffries Building remotely on obsd-49-x86 in workspace

subscribe request

2012-11-30 Thread Bob Cochran
Hello, I'll be looking at the code to use in an embedded environment. I'll be looking at reducing the footprint, cross compiling, and increasing performance with the smaller footprint. I have been developing for over 20 years. Thanks, Bob Cochran Mind Chasers Inc.

Re: [PATCH] Do not send unretriable requests on reused pinned connections

2012-11-30 Thread Henrik Nordström
fre 2012-11-30 klockan 15:30 -0700 skrev Alex Rousskov: Squid is sending POST requests on reused pinned connections, and some of those requests fail due to a pconn race, with no possibility for a retry. Yes... and we have to for NTLM, TPROXY and friends or they get in a bit of trouble

Build failed in Jenkins: 3.HEAD-amd64-CentOS-5.3 #2162

2012-11-30 Thread noc
See http://build.squid-cache.org/job/3.HEAD-amd64-CentOS-5.3/2162/changes Changes: [Amos Jeffries] Add kv-pair support to url_rewrite_helper interface This stage of the helper reply protocol adds kv-pair support to the url_rewrite_helper interfacefor URL redirect and rewrite operations. It

Build failed in Jenkins: 3.HEAD-amd64-CentOS-5.3 #2163

2012-11-30 Thread noc
See http://build.squid-cache.org/job/3.HEAD-amd64-CentOS-5.3/2163/changes Changes: [Automatic source maintenance] SourceFormat Enforcement -- [...truncated 7833 lines...] 373b802000-373ba01000 ---p 2000 fd:00 130496

Re: [PATCH] Do not send unretriable requests on reused pinned connections

2012-11-30 Thread Amos Jeffries
On 1/12/2012 1:31 p.m., Henrik Nordström wrote: fre 2012-11-30 klockan 15:30 -0700 skrev Alex Rousskov: Squid is sending POST requests on reused pinned connections, and some of those requests fail due to a pconn race, with no possibility for a retry. Yes... and we have to for NTLM,

Re: subscribe request

2012-11-30 Thread Amos Jeffries
On 1/12/2012 6:00 a.m., Bob Cochran wrote: Hello, I'll be looking at the code to use in an embedded environment. I'll be looking at reducing the footprint, cross compiling, and increasing performance with the smaller footprint. I have been developing for over 20 years. Thanks, Bob Cochran

mapping of ecap LogVerbosity to debug_options levels

2012-11-30 Thread carteriii
The logging functionality of the ecap adapter allows users to specify a LogVerbosity which is a mask of Importance, Frequency, and Message Size: enum ImportanceLevel { ilDebug = 0, ilNormal = 1, ilCritical = 2 }; // 0xF enum FrequencyLevel { flOperation = 0, flXaction = 1 4, flApplication = 2

Build failed in Jenkins: 3.HEAD-amd64-CentOS-5.3 #2164

2012-11-30 Thread noc
See http://build.squid-cache.org/job/3.HEAD-amd64-CentOS-5.3/2164/changes Changes: [Amos Jeffries] Bug 3688: Lots of Orphan Comm:Connections to ICAP server -- [...truncated 7835 lines...] 373b802000-373ba01000 ---p 2000 fd:00 130496

Re: ICAP connections under heavy loads

2012-11-30 Thread Eliezer Croitoru
Thanks, This cleared it out. I saw the patch at the Bugzilla but wasnt sure about it. Eliezer On 12/1/2012 1:39 AM, Amos Jeffries wrote: On 30/11/2012 5:59 p.m., Eliezer Croitoru wrote: Bump. I was wondering if there was any progress about this matter? The xaction-orphans patch has been

Re: [PATCH] Do not send unretriable requests on reused pinned connections

2012-11-30 Thread Alex Rousskov
On 11/30/2012 05:31 PM, Henrik Nordström wrote: fre 2012-11-30 klockan 15:30 -0700 skrev Alex Rousskov: Squid is sending POST requests on reused pinned connections, and some of those requests fail due to a pconn race, with no possibility for a retry. Yes... and we have to for NTLM,