Re: [squid-users] squid-users Digest, Vol 13, Issue 62

2015-09-23 Thread Mumin Coder
I need database to store sanitized websites (cleaned from javascript malicious parts). If CRC changes webpage should be resanitized, otherwise serve proxy version of the website. Von: squid-users-requ...@lists.squid-cache.org Gesendet: ‎Montag‎, ‎21‎. ‎September‎ ‎2015 ‎13‎:‎59 An: squid-use

Re: [squid-users] Sanitised websites

2015-09-23 Thread Antony Stone
Please don't reply to entire digest posts - trim them to contain only the part you are replying to. Also please change the subject line to be more relevant. On Tuesday 22 September 2015 at 11:38:26, Mumin Coder wrote: > I need database to store sanitized websites (cleaned from javascript > mali

Re: [squid-users] refresh_pattern and same objects

2015-09-23 Thread FredB
Hi all, Just for information, mixed results were obtained The HIT increases 30% to 40%, but the bandwidth saved still the same +- 20% And the load average and cpu resource are a little more important (regex for refresh pattern I suppose) Fred ___ s

Re: [squid-users] AUFS vs. DISKS

2015-09-23 Thread FredB
> > Hi Fred, > > No error, no crash. > Some warnings only: > 2015/07/21 11:21:02 kid1| DiskThreadsDiskFile::openDone: (2) No such > file or > directory > But we can live with these warnings, Squid will take care the missing > objects... > > Bye Fred > > FI Tried with squid 3.5.9 and no prob

Re: [squid-users] Is it possible to send the connection, starting with the CONNECT, to cache-peer?

2015-09-23 Thread Yuri Voinov
Look: # Tor acl acl tor_url url_regex -i "/usr/local/squid/etc/url.tor" url.tor contains: ^https?.*torproject.* May be, I'm an idiot, but where is the error? All other url.tor entries works perfectly. WIth HTTP only. 23.09.15 7:44, Amos Jeffries пишет: On 23/09/2015 4:39 a.m., Yuri Voinov wr

Re: [squid-users] Is it possible to send the connection, starting with the CONNECT, to cache-peer?

2015-09-23 Thread Matus UHLAR - fantomas
Hello, On 17.09.15 18:47, Yuri Voinov wrote: acl NoSSLIntercept ssl::server_name_regex -i localhost \.icq\.* kaspi\.kz ssl_bump splice NoSSLIntercept # Privoxy+Tor access rules never_direct allow tor_url cache_peer_access 127.0.0.1 allow tor_url 18.09.15 21:22, Matus UHLAR - fantomas п

Re: [squid-users] Is it possible to send the connection, starting with the CONNECT, to cache-peer?

2015-09-23 Thread Yuri Voinov
23.09.15 17:07, Matus UHLAR - fantomas пишет: Hello, On 17.09.15 18:47, Yuri Voinov wrote: acl NoSSLIntercept ssl::server_name_regex -i localhost \.icq\.* kaspi\.kz ssl_bump splice NoSSLIntercept # Privoxy+Tor access rules never_direct allow tor_url cache_peer_access 127.0.0.1 allow t

Re: [squid-users] Is it possible to send the connection, starting with the CONNECT, to cache-peer?

2015-09-23 Thread Amos Jeffries
On 23/09/2015 11:01 p.m., Yuri Voinov wrote: > Look: > > # Tor acl > acl tor_url url_regex -i "/usr/local/squid/etc/url.tor" > > url.tor contains: > ^https?.*torproject.* > > May be, I'm an idiot, but where is the error? The URL on the CONNECT requests ("torproject.om:443") are not starting wit

Re: [squid-users] refresh_pattern and same objects

2015-09-23 Thread FredT
Hi Fred, you cannot expect a higher % saving without using a storeid tool. 20% saved band is already good with a simple squid... bye Fred -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/refresh-pattern-and-same-objects-tp4672792p4673368.html Sent from the S

Re: [squid-users] AUFS vs. DISKS

2015-09-23 Thread FredT
Fred, We now have the 3.5.8 deployed with our clients, not yet switched to the 3.5.9... "strange" messages are not a problem because i suspect it's generated by the cache_swap_low/high, cleaning old objects. I suppose the Squid cleans old objects but another squid process does not take care this cl

Re: [squid-users] refresh_pattern and same objects

2015-09-23 Thread FredB
> > Hi Fred, > you cannot expect a higher % saving without using a storeid tool. > 20% saved band is already good with a simple squid... > > bye Fred > > Yes but enough for me, saving bandwidth is just one part of my usage ... It was just an interesting test, compare 6 proxies with same, high

Re: [squid-users] AUFS vs. DISKS

2015-09-23 Thread FredB
. > > Based on previous answers, diskd is for freebsd with 1 process only, > when > the ufs/aufs are with many processes. > Also, as you said, it seems the diskd process was modified with the > latest > builds... > I don't know about freebsd, diskd is a separate process with a light consumption

Re: [squid-users] Is it possible to send the connection, starting with the CONNECT, to cache-peer?

2015-09-23 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Through assertion and then restarts squid: 2015/09/23 20:03:25 kid1| Validated 35899 Entries 2015/09/23 20:03:25 kid1| store_swap_size = 1730768.00 KB 2015/09/23 20:03:26 kid1| storeLateRelease: released 0 objects 2015/09/23 20:03:26 kid1| ass

Re: [squid-users] SSL Bump in intercept mode

2015-09-23 Thread Alex Rousskov
On 09/23/2015 12:16 AM, Степаненко Сергей wrote: > My proxy certificate released by subca, i.e CA - SubCA - Proxy. > OS - Centos6.7, squid - 3.5.7 from www1.ngtech.co.il repo > ssl_bump stare all > ssl_bump bump all > ssl_bump splice all step3 Please note that the last "splice" rule will never

Re: [squid-users] Lots of "Vary object loop!"

2015-09-23 Thread Sebastián Goicochea
It happens without disk caches too. Was anyone able to reproduce it? El 21/09/15 a las 07:03, Eliezer Croitoru escribió: Is it happening also with ram cahce only? no disk cache? Eliezer On 04/09/2015 00:02, Sebastián Goicochea wrote: But still seeing all those Vary loops all the time :(

Re: [squid-users] Lots of "Vary object loop!"

2015-09-23 Thread FredB
> > > It happens without disk caches too. Was anyone able to reproduce it? > > > Same messages here, some days many, some days not one, a message among others 2015/09/23 13:50:33 kid1| WARNING: HTTP: Invalid Response: Bad header encountered from http://www.cdiscount.com/auto/porte-velos/l

Re: [squid-users] Lots of "Vary object loop!"

2015-09-23 Thread Sebastián Goicochea
Hi FredB, Do you have collapsed_forwarding in your config? El 23/09/15 a las 13:42, FredB escribió: It happens without disk caches too. Was anyone able to reproduce it? Same messages here, some days many, some days not one, a message among others 2015/09/23 13:50:33 kid1| WARNING: HTTP: I

Re: [squid-users] SSL Bump in intercept mode

2015-09-23 Thread Eliezer Croitoru
Not related exactly to the bug but an updates version is preset as far as I know and I will update to 3.5.9 in the next week or two. Eliezer On 23/09/2015 09:16, Степаненко Сергей wrote: OS - Centos6.7, squid - 3.5.7 from www1.ngtech.co.il repo PS Sorry for bad English.

Re: [squid-users] AUFS vs. DISKS

2015-09-23 Thread Eliezer Croitoru
On 23/09/2015 16:55, FredB wrote: I don't know about freebsd, diskd is a separate process with a light consumption Top with 3000 simultaneous users (2 x caches 250 Go full) Just as a side note: I have tested and compared RAM only squid FreeBSD VS Linux and it seems like FreeBSD tests results s

Re: [squid-users] Open StoreID http interface from ngtech.

2015-09-23 Thread Eliezer Croitoru
An update. I closed the API since there was almost no use in this one. But I have been working on some ways to handle youtube using ECAP. It's not yet clear when but it will happen some day. Eliezer On 29/08/2014 14:12, Eliezer Croitoru wrote: Inspired by unveiltech.com I have tried to write a

[squid-users] Squid 3.5.9 RPM are available

2015-09-23 Thread Eliezer Croitoru
Since it's a security release I will not write an article this time. But I am happy to release the new RPMs for squid cache 3.5.9. In this release the major thing is a security update while I have ECAP support for the CentOS 7 RPMs. It is now a requirement for squid on CentOS 7 to have libecap l

Re: [squid-users] Is it possible to send the connection, starting with the CONNECT, to cache-peer?

2015-09-23 Thread Amos Jeffries
On 24/09/2015 2:04 a.m., Yuri Voinov wrote: > > Through assertion and then restarts squid: > > 2015/09/23 20:03:25 kid1| Validated 35899 Entries > 2015/09/23 20:03:25 kid1| store_swap_size = 1730768.00 KB > 2015/09/23 20:03:26 kid1| storeLateRelease: released 0 objects > 2015/09/23 20:03:26 k

Re: [squid-users] AUFS vs. DISKS

2015-09-23 Thread Amos Jeffries
On 24/09/2015 12:48 a.m., FredT wrote: > Fred, > We now have the 3.5.8 deployed with our clients, not yet switched to the > 3.5.9... > "strange" messages are not a problem because i suspect it's generated by the > cache_swap_low/high, cleaning old objects. > I suppose the Squid cleans old objects b

Re: [squid-users] Lots of "Vary object loop!"

2015-09-23 Thread FredB
- Mail original - > De: "Sebastián Goicochea" > À: squid-users@lists.squid-cache.org > Envoyé: Mercredi 23 Septembre 2015 19:12:33 > Objet: Re: [squid-users] Lots of "Vary object loop!" > > > Hi FredB, > > Do you have collapsed_forwarding in your config? > No ___