On 10/02/2015 6:55 p.m., Cameron Charles wrote:
> Our setup contains a bunch of, mostly external, acls some http_access
> followed by some http_reply_access, these acls use EXT_LOG frequently,
> however we are having issues at the point of the last http_access and first
> http_reply_access acls (bo
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 17/02/2015 7:38 a.m., Yuri Voinov wrote:
> We are talking not about the differences between any *NIX-based or
> *NIX-like OS. Android just an example. I guess an observerd
> behaviour of redirector's processes is not expected.
>
> Now I've observe
On 17/02/2015 10:30 a.m., Alfredo Rezinovsky wrote:
>
> If I do a traffic analisys in the internet traffic I can see the server
> sends squid an Internal Server Error (500) at the middle of the POST
> (BEFORE the POST is complete).
>
> The error comes from the server. But this doesn't happens in
On 17/02/2015 1:30 p.m., Eliezer Croitoru wrote:
> Hey Marcus,
>
> Great to hear about it!!
> I must say that the mentioned issues are the killers for squidGuard
> usage in many systems.
>
Yeah and one of the many reasons its effectively a dead project now.
IIRC, Shalla were going to maintain SG
On 17/02/2015 11:21 p.m., snakeeyes wrote:
> Hi Guys,
>
> I wanted to ask .
>
>
>
> If I have as topology below :
>
>
>
>
>
> Client>(HAPRoxy or redirector )==>squid with ACLs & basic ncsa
> authentication
>
>
>
> The client when it ask google.com
>
> It will passs thorugh the
Hey,
Squid and any other HTTP proxy cannot support basic authentication when
it is being used as an intercept proxy.
The only options to do such a thing is to use some kind of a captive
portal or an external network system which will identify the user
directly in a webserver or another way whi
Hey Marcus,
Great to hear about it!!
I must say that the mentioned issues are the killers for squidGuard
usage in many systems.
Eliezer
On 17/02/2015 02:07, Marcus Kool wrote:
Off list, Yuri asked help for compilation on Solaris and I made a fix
for ufdbGuard which is availabe for Yuri.
If t
Hi Guys,
I wanted to ask .
If I have as topology below :
Client>(HAPRoxy or redirector )==>squid with ACLs & basic ncsa
authentication
The client when it ask google.com
It will passs thorugh the HAproxy , and it will direct the request to the
squid
Example =>
Client go to
On 02/16/2015 08:00 PM, Eliezer Croitoru wrote:
Hey Yuri,
OK I have seen something...
Now we might need also the virtual memory which might be vsz.
And the cachemgr output is not from squidview..
The last image I have seen from cachemgr was much helpful(with 10 helpers).
From what I have see
On 17/02/2015 4:13 a.m., Eliezer Croitoru wrote:
> Hey,
>
> There are couple things to consider while using multiple IPs for the
> same network\user.
> It is possible to do what you want in the OS level and in a way using
> squid.
> You should consider first what is the exact effect you want\need
On 17/02/15 11:34, Amos Jeffries wrote:
> There is splice mode in 3.5. Which is to say "dont bump that traffic".
If you have a reverse-proxy between a client and backend server and the
backend server insists on seeing the client cert, then I think at best
squid is simply a tcp forwarder (ie splice
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 17/02/2015 4:27 a.m., Yuri Voinov wrote:
> Yep.
>
> 16.02.15 20:58, Eliezer Croitoru пишет:
>> On 16/02/2015 15:23, Yuri Voinov wrote:
>>> http://i58.tinypic.com/rsqwxh.png
>>>
>>> 0 shutting down. Always.
>>>
>>> During nights and weekends.
Um,
On 17/02/2015 6:28 a.m., Ignazio Raia wrote:
> Hi Amos
> I finally made the changes you suggested and now I have squid asks
> authentication as required.
> I still have two troubles:
> 1) the directive auth_param basic credentialsttl 60 seconds doesn't work.
> Squid doesn't ask me a new login requ
On 17/02/2015 5:16 a.m., Alan Palmer wrote:
> Tried the two links provided, still no luck.
>
> details:
> squid -v
> Squid Cache: Version 3.4.11
> configure options: '--disable-strict-error-checking'
> '--disable-arch-native' '--enable-shared'
> '--datadir=/usr/local/share/squid'
> '--libexecdir=
On 17/02/2015 3:16 a.m., Martin Fuchs wrote:
> Hi !
>
>
>
> I'm looking for a possibility to tell squid to pass a certificate presented
> by the client to a cache peer.
>
> Since i did not find anything, i decided to ask here ;-)
>
> I saw that it's possibe to let squid pass a client crtifica
On 16/02/2015 6:54 p.m., John Killimangalam Jacob wrote:
> Hi All,
>
> I am trying to configure an intercept proxy with
> peek/splice/terminate features in Squid 3.5.1 on CentOS 7 - 64 bit. I
> wanted to peak at steps 1 and step 2 and to decide on terminate on
> step 3 based on the SNI and server
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 16/02/2015 3:38 p.m., James Beecham wrote:
> Hi Amos,
>
> Thank you for your reply.
>
> The information I need to apply to the header is client specific,
> ex their internal ip address.
>
> The issue I am facing is that the network that is hostin
Hey Yuri,
OK I have seen something...
Now we might need also the virtual memory which might be vsz.
And the cachemgr output is not from squidview..
The last image I have seen from cachemgr was much helpful(with 10 helpers).
From what I have seen until now squidGuard uses about 13 MB of ram
cons
I'm using a custom compiled version
Squid Cache: Version 3.5.1-20150206-r13746
Service Name: squid
configure options: '--disable-auth' '--disable-auto-locale'
'--disable-cache-digests' '--disable-cpu-profiling'
'--disable-debug-cbdata' '--disable-delay-pools' '--disable-devpoll'
'--disable-ecap' '
Good to hear. It seems freebsd has com_err.h why I did not come across it
lately.
Markus
"Simon Stäheli" wrote in message
news:ee58fc57-6b97-4de6-9fdf-2881209a5...@open.ch...
On 14.02.2015, at 15:43, Markus Moeller wrote:
On 12.02.2015, at 17:58, Amos Jeffries wrote:
On 13/
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Now:
2015/02/16 23:10:23 kid1| store_swap_size = 29826351.50 KB
2015/02/16 23:10:24 kid1| storeLateRelease: released 0 objects
2015/02/16 23:15:01 kid1| Starting new redirector helpers...
2015/02/16 23:15:01 kid1| helperOpenServers: Starting 1/100
'
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Sure.
Here is it:
root @ cthulhu / # ps -e -o user,pid,rss,comm
USER PID RSS COMMAND
root 00 sched
root 50 zpool-rpool
root 60 kmem_task
root 1 1360 /sbin/init
root 20 pageout
root
On 16/02/2015 21:10, Yuri Voinov wrote:
root @ cthulhu / # ps -e
Yuri,
Can you find the right ps command that will include user and memory
usage by each process?
Thanks,
Eliezer
___
squid-users mailing list
squid-users@lists.squid-cache.org
http:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I know. Now I see Squid source to determine helper's shutdown logic. I
see helper shutdown subroutine, but not find fire conditions yet.
Look:
root @ cthulhu / # ps -e
PID TTY TIME CMD
0 ? 1:21 sched
5 ? 6:10
Hey Yuri,
You missed the whole point.
I didn't wanted you to grep any output.
I wanted to see the whole server process list as a whole to understand
the issue you see.
If you see the server only with grep you might missing something since I
have yet to see your server do any swap what so ever u
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
root @ cthulhu / # ps -efl|grep squidGuard|grep -v grep|awk {'print $2
" " $5'}
S 6475
Now you can see one squidGuard process. Squid was restarted hour ago.
Process is idle (no traffic now), but this is as desired by config. As
you can see, it state
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
We are talking not about the differences between any *NIX-based or
*NIX-like OS. Android just an example. I guess an observerd behaviour
of redirector's processes is not expected.
Now I've observed mentioned behaviour of redirectors over one month. I
Hey Yuri,
I looked eventually at Solaris 11 man pages at:
http://docs.oracle.com/cd/E26502_01/html/E29030/ps-1.html#scrolltoc
Just to be sure the next command would run:
"ps -e"
There is no subject to the discussion yet since the issue is yet to be
defined as an issue.
You mentioned Android
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Just look at this:
http://i.imgur.com/fFRW3Hv.png
Now i've tried to toggle 'I' on top. To show idle processes.
Did you seen?
16.02.15 22:48, Eliezer Croitoru пишет:
> Hey Yuri,
>
> I would try first "ps -aux" just to find out if this is the right
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I think, this looks like platform-specific bug.
Yes, sir.
AFAIK, Solaris idle processes almost never has state 'Idle', but 'Sleep',
so this is why Squid doesn't shutting down idle redirectors.
Amos, is this explanation possible?
16.02.15 22:48, El
Hi Amos
I finally made the changes you suggested and now I have squid asks
authentication as required.
I still have two troubles:
1) the directive auth_param basic credentialsttl 60 seconds doesn't work.
Squid doesn't ask me a new login request
2) If I use Internet Explorer I don't have the login
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
You can see:
root @ cthulhu / # ps -efl|grep squidGuard|grep -v grep
0 Ssquid 3648 44198 0 40 20? 3674? 23:01:39
? 0:00 (squidGuard) -c /usr/local/squidGua
0 Ssquid 3647 44198 0 40 20? 3674
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
root @ cthulhu / # ps -aux
ps: unknown user x
Really, I don't understand subject of discussion.
I think, will good to have possibility to autoclose idle Squid
redirectors after time specified. Regardless of the operating system.
Like autoclose applic
Hey Yuri,
I would try first "ps -aux" just to find out if this is the right way to
use ps in solaris.
If it works show me the details first and we will see what to do next.
Eliezer
On 16/02/2015 18:37, Yuri Voinov wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Yes.
root @ cthulhu /
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Yes.
root @ cthulhu / # uname -a
SunOS cthulhu 5.10 Generic_150401-16 i86pc i386 i86pc Solaris
Are you an expert in it?
16.02.15 22:35, Antony Stone пишет:
> On Monday 16 Feb 2015 at 16:20, Yuri Voinov wrote:
>
>> root @ cthulhu / # ps axuf usage:
On Monday 16 Feb 2015 at 16:20, Yuri Voinov wrote:
> root @ cthulhu / # ps axuf
> usage: ps [ -aAdeflcjLPyZ ] [ -o format ] [ -t termlist ]
> [ -u userlist ] [ -U userlist ] [ -G grouplist ]
> [ -p proclist ] [ -g pgrplist ] [ -s sidlist ] [ -z zonelist ]
> May be, you want to kno
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
root @ cthulhu / # ps axuf
usage: ps [ -aAdeflcjLPyZ ] [ -o format ] [ -t termlist ]
[ -u userlist ] [ -U userlist ] [ -G grouplist ]
[ -p proclist ] [ -g pgrplist ] [ -s sidlist ] [ -z zonelist ]
'format' is one or more of:
u
On 16/02/2015 17:27, Yuri Voinov wrote:
root @ cthulhu / # top -n 1 -b
last pid: 43244; load avg: 0.06, 0.07, 0.07; up 7+22:16:44
21:27:15
62 processes: 61 sleeping, 1 on cpu
CPU states: 99.3% idle, 0.5% user, 0.2% kernel, 0.0% iowait, 0.0% swap
Kernel: 510 ctxsw, 4 trap, 754 intr, 107
Tried the two links provided, still no luck.
details:
squid -v
Squid Cache: Version 3.4.11
configure options: '--disable-strict-error-checking'
'--disable-arch-native' '--enable-shared'
'--datadir=/usr/local/share/squid'
'--libexecdir=/usr/local/libexec/squid' '--disable-loadable-modules'
'-
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Yep.
16.02.15 20:58, Eliezer Croitoru пишет:
> On 16/02/2015 15:23, Yuri Voinov wrote:
>> http://i58.tinypic.com/rsqwxh.png
>>
>> 0 shutting down. Always.
>>
>> During nights and weekends.
>
> Are you talking about these 10? I am unsure I understan
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
root @ cthulhu / # top -n 1 -b
last pid: 43244; load avg: 0.06, 0.07, 0.07; up 7+22:16:44
21:27:15
62 processes: 61 sleeping, 1 on cpu
CPU states: 99.3% idle, 0.5% user, 0.2% kernel, 0.0% iowait, 0.0% swap
Kernel: 510 ctxsw, 4 trap, 754 intr,
Hey,
There are couple things to consider while using multiple IPs for the
same network\user.
It is possible to do what you want in the OS level and in a way using squid.
You should consider first what is the exact effect you want\need and if
it can meet reality in usability level.
It is not ve
On 16/02/2015 15:23, Yuri Voinov wrote:
http://i58.tinypic.com/rsqwxh.png
0 shutting down. Always.
During nights and weekends.
Are you talking about these 10? I am unsure I understand the issue
yet..(I need to understand a bit more), is this the situation which
stays forever?
Eliezer
___
On 16/02/2015 15:17, Yuri Voinov wrote:
root @ cthulhu / # top -n1 -b
top: illegal option -- 1
Top version 3.7
Hey Yuri,
Since top is missing couple details..
You can try "-n 1" instead of "-n1" and it will might show more details.
If it's not working then a simple "ps" might shed some more lig
Hi !
I'm looking for a possibility to tell squid to pass a certificate presented
by the client to a cache peer.
Since i did not find anything, i decided to ask here ;-)
I saw that it's possibe to let squid pass a client crtificate tot he cache
peer, but this would not work for out purposes.
Hi , a
All I need I need to load balance my request as I can
So ,
I want if I go 1st time to ==> whatismyipaddfress.com
I want to be ip1
2nd time ==>ip2
3rd time==> ip3
And so on
Do u think my config needs to be modified ?
cheers
-Original Message-
From: squid-users [mailto:squid-u
On Monday 16 Feb 2015 at 22:54, snakeeyes wrote:
> Hi ,
>
> I have many account from same provider and I would like to use those
> accounts as round robin and each request has different IP as possible
How many client machines are you trying to distribute in this way? Your
example suggests you'
http://i58.tinypic.com/rsqwxh.png
0 shutting down. Always.
During nights and weekends.
16.02.15 19:13, Eliezer Croitoru пишет:
Hey Yuri,
There are couple sides and side-effects to the issue you describe.
If it's OK with you I will for a sec look aside squid and the helpers
code to another is
root @ cthulhu / # top -n1 -b
top: illegal option -- 1
Top version 3.7
Usage: top [-ISTabcinqu] [-d x] [-s x] [-o field] [-U username] [number]
root @ cthulhu / # top -n -b
last pid: 7353; load avg: 0.16, 0.14, 0.13; up 7+20:05:37
19:16:08
72 processes: 71 sleeping, 1 on cpu
CPU sta
Hey Yuri,
There are couple sides and side-effects to the issue you describe.
If it's OK with you I will for a sec look aside squid and the helpers
code to another issue in Computer Science.
Let say we are running some server\software which it's purpose is to
calculate the distance from point
Hi ,
I have many account from same provider and I would like to use those
accounts as round robin and each request has different IP as possible
The issue is , I open whatismyipaddress.com
for some freshesh I can see my ip is rotating but after about 1 minute I
see my ip is stuck on same
On 14.02.2015, at 15:43, Markus Moeller wrote:
>>
>> On 12.02.2015, at 17:58, Amos Jeffries wrote:
>>
>>> On 13/02/2015 5:41 a.m., Simon Stäheli wrote:
hmh, HAVE_KRB5 seems not to be set in include/autoconf.h
What is the correct way to provide squid the path to the kerbe
Figured out the problem (I had another squid on the network that was
intercepting my requests)...sorry about that!
Luis
On Sun, Feb 15, 2015 at 11:26 PM, Luis Miguel Silva <
luismiguelferreirasi...@gmail.com> wrote:
> Dear all,
>
> As I was playing around with Squid and e-cap, I decided to shutd
On 02/12/2015 09:51 AM, Amos Jeffries wrote:
> On 12/02/2015 9:03 p.m., Silamael Darkomen wrote:
>>
>> I will file a proper bug report with debug output and such when I'm back
>> at work next monday.
>> Any idea what's wrong here? For me it seems that the index.html Squid is
>> generating for FTP r
54 matches
Mail list logo
