Re: [squid-users] Ignore "pragma:no-cache /cache-control:no-cache" header in HTTP request< config help>

2016-02-27 Thread Anonymous cross
Sorry for nagging. We want to use both tproxy and accelerator mode. Mainly tproxy for internet traffic and accelerator mode for web server. Also we want to ignore cache control header in the HTTP requests destined for our webserver (abcexample.com) Does the below configuration work ? or Do we nee

Re: [squid-users] Ignore "pragma:no-cache /cache-control:no-cache" header in HTTP request< config help>

2016-02-27 Thread Amos Jeffries
On 28/02/2016 5:31 p.m., Anonymous cross wrote: > Hi, Amos, > We are using forward tproxy . We used to redirect the packets coming from > client for port 80 to squid proxy server. Squid spoofs the request and > establishes a connection with Server transparently. Please find the > configuration bel

Re: [squid-users] Ignore "pragma:no-cache /cache-control:no-cache" header in HTTP request< config help>

2016-02-27 Thread Anonymous cross
Hi, Amos, We are using forward tproxy . We used to redirect the packets coming from client for port 80 to squid proxy server. Squid spoofs the request and establishes a connection with Server transparently. Please find the configuration below Client --- > Squid proxy server --- > web Server

Re: [squid-users] Squid ssl bump with upstream proxy

2016-02-27 Thread Baselsayeh
Ok can you give me a config example -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-ssl-bump-with-upstream-proxy-tp4676279p4676294.html Sent from the Squid - Users mailing list archive at Nabble.com. ___ squid

Re: [squid-users] A squid current version status JSON feed.

2016-02-27 Thread Eliezer Croitoru
On 28/02/2016 00:03, Yuri Voinov wrote: Ah, you want icing on that cake too? Sure :) My table is open for anyone that wants\needs to grab a bite, just let me know an hour before so I would be able to make sure that the cake and drinks will be ready the jokes are on me. For now I am

Re: [squid-users] A squid current version status JSON feed.

2016-02-27 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 28.02.16 3:39, Amos Jeffries пишет: > On 28/02/2016 9:00 a.m., Yuri Voinov wrote: >> >> Wow, this is only for major releases? >> > > Yes. > >> Does this can work with nightly build? >> > > No. Snapshots are not listed in the date Eliezer is proce

Re: [squid-users] A squid current version status JSON feed.

2016-02-27 Thread Amos Jeffries
On 28/02/2016 9:00 a.m., Yuri Voinov wrote: > > Wow, this is only for major releases? > Yes. > Does this can work with nightly build? > No. Snapshots are not listed in the date Eliezer is processing to get the feed. Downloading tarballs is also the wrong way to be fetching if you need to do

Re: [squid-users] Survey on assertions: When the impossible happens

2016-02-27 Thread Amos Jeffries
On 28/02/2016 7:52 a.m., joe wrote: > right Asserts is the best choice for critical function im with you define "critical". It is not always obvious. > on that in the other hand some function its not critical to have > asserts just trace() or some other function to notify the cache log Now yo

Re: [squid-users] A squid current version status JSON feed.

2016-02-27 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Eliezer, you don't believe ; Korn and sometimes perl :) This was a joke, there is simple thing to parse release page and extract fresh nightly build ;) 28.02.16 2:41, Eliezer Croitoru пишет: > Hey Yuri, > > Currently this specifi

Re: [squid-users] A squid current version status JSON feed.

2016-02-27 Thread Eliezer Croitoru
Hey Yuri, Currently this specific feed is for releases and not auto-generated releases since I am using it for my builds only. To generate the link for the latest auto-generated release you can choose a branch and parse the page for the latest tar.gz\bz2. Since all these pages are templates it

Re: [squid-users] Squid ssl bump with upstream proxy

2016-02-27 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Aha, I'm stupid. Squid can't re-crypted peer connections. You need to splice peered URL's before tunnel it into your peer. 28.02.16 2:07, Baselsayeh пишет: > No > What I need i need is > Get ssl info from browser - squid - upstream proxy - inter

Re: [squid-users] Squid ssl bump with upstream proxy

2016-02-27 Thread Baselsayeh
No What I need i need is Get ssl info from browser - squid - upstream proxy - internet Using cache_peer With ssl_bump But for some reason the upstream proxy wont get the https requests All I want is https -> sslbump -> upstream proxy via CONNECT request -- View this message in context: http://s

Re: [squid-users] A squid current version status JSON feed.

2016-02-27 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 You come in the morning - and Freshly squid dirtied dumps the system partition and lying in maintenanse :) 28.02.16 1:58, Eliezer Croitoru пишет: > I have built a JSON feed that displays the latest squid version per branch > from old to new at th

Re: [squid-users] A squid current version status JSON feed.

2016-02-27 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I have an automated build script for squid (written in shell ;)), it accepts URL/archive name (squid*.tar.gz) to build squid on my platform, re-build SSL db, set it up, set correct permissions and re-start SMF service ;) Just need download URL ;)

Re: [squid-users] A squid current version status JSON feed.

2016-02-27 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Wow, this is only for major releases? Does this can work with nightly build? And, of course, generate download URL to make systems auto-updates via cron, for example? ;) 28.02.16 1:58, Eliezer Croitoru пишет: > I have built a JSON feed that disp

[squid-users] A squid current version status JSON feed.

2016-02-27 Thread Eliezer Croitoru
I have built a JSON feed that displays the latest squid version per branch from old to new at the url: https://ngtech.co.il/ruby/squid/versions.cgi It is being updated from the www.squid-cache.org periodically and depends on the squid-cache mirrors update time. The feed can be used in monitor

Re: [squid-users] Squid ssl bump with upstream proxy

2016-02-27 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 You need just to install into your downstream proxy CA's from your upstream proxy. :) 28.02.16 1:20, Baselsayeh пишет: > Hello > Im trying to get ssl bump to work with an upstream proxy > The problem is that the upstram proxy only supports CONNECT

[squid-users] Squid ssl bump with upstream proxy

2016-02-27 Thread Baselsayeh
Hello Im trying to get ssl bump to work with an upstream proxy The problem is that the upstram proxy only supports CONNECT and not ssl So I tried with squid http and https intercept ports with ssl bump and genetare host certs is on But it wont work in ssl (http works fine) -- View this message i

Re: [squid-users] Ignore "pragma:no-cache /cache-control:no-cache" header in HTTP request< config help>

2016-02-27 Thread Amos Jeffries
On 28/02/2016 6:46 a.m., Yuri Voinov wrote: > > request_header_accesss cache-control deny all > > and > > acl specified_clients src 192.168.100.1 192.168.100.2 > request_header_accesss cache-control deny specified_clients > All tht directive controls is what Squid *outputs* to server on its o

Re: [squid-users] proxy not staying logged in

2016-02-27 Thread Amos Jeffries
On 27/02/2016 10:30 p.m., Kevin Giger wrote: > I have users of my proxy when they add stuff to cart its ok but checkout > won't work > > see the robert is his user name I can't figure out how to keep that logged > in to not get denied errors. > > > 1456556236.501336 52.25.202.130 TCP_MISS/20

Re: [squid-users] Survey on assertions: When the impossible happens

2016-02-27 Thread joe
right Asserts is the best choice for critical function im with you on that in the other hand some function its not critical to have asserts just trace() or some other function to notify the cache log for warning and do not halt just keep running its choice of what function need to have asserts

Re: [squid-users] Squid as forward proxy far slow than Shadowsocks

2016-02-27 Thread zw963
Hi, I had read some squid wiki about following info. >> For example you might get faster traffic by moving from > stunnel+Squid to a Squid with intercept >> Squid with intercept, >> ssl-bump and "ssl_bump splice all" in the latest Squid-3.5 releases. My current case is, from china inner Intrane

[squid-users] Survey on assertions: When the impossible happens

2016-02-27 Thread Alex Rousskov
On 02/27/2016 05:02 AM, joe wrote: > isn't better to use for kid1| assertion failed: store.cc:1890: "isEmpty()" > in store.cc line 1890 assert (isEmpty()); > insted replace it with VERIFY (isEmpty()); > assert force the program to halt that's why the restart happen > and its very bad wen squid

Re: [squid-users] Ignore "pragma:no-cache /cache-control:no-cache" header in HTTP request< config help>

2016-02-27 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 request_header_accesss cache-control deny all and acl specified_clients src 192.168.100.1 192.168.100.2 request_header_accesss cache-control deny specified_clients and, finally, http://wiki.squid-cache.org/ feel free to read fine manuals first

[squid-users] Ignore "pragma:no-cache /cache-control:no-cache" header in HTTP request< config help>

2016-02-27 Thread Anonymous cross
Hi, All, I want squid to ignore "pragma:no-cache/cache-control:no-cache" header in HTTP client request. Is there any configuration available in squid to achieve this? Also i want to ignore cache control header only for specific URL's? Is there any way in squid to achieve this? Regards, Cross. ___

Re: [squid-users] rev 3.5.15

2016-02-27 Thread Alex Rousskov
On 02/26/2016 08:00 PM, joe wrote: > thank you guys also i got 2 error so fare in my cache,log > kid1| assertion failed: store.cc:1890: "isEmpty()" > > and it look like squid restart after eatch one > 2016/02/27 04:12:35 kid1| assertion failed: FwdState.cc:447: > "serverConnection() == conn" htt

Re: [squid-users] Squid as forward proxy far slow than Shadowsocks

2016-02-27 Thread zw963
Thanks you very much for your reply. it help me a lot! I will have a try to `ssl-bump' in recent days. Although, i still have one question about squid. if speed is the major reason which can not access twitter in my android, But, i can access twitter from my laptop firefox (proxy to squid with l

Re: [squid-users] squid SMP rock store , any luck with new releases ?

2016-02-27 Thread Alex Rousskov
On 02/27/2016 02:01 AM, Ahmad wrote: > How much can we store in rock ? As much as your disk space allows, essentially. A single cache_dir (of any type) is limited to about 16 million objects (of any size). > I already used the rock with 3.5.15 squid and it seems mean object size like > 35K T

Re: [squid-users] rev 3.5.15

2016-02-27 Thread joe
isn't better to use for kid1| assertion failed: store.cc:1890: "isEmpty()" in store.cc line 1890 assert (isEmpty()); insted replace it with VERIFY (isEmpty()); assert force the program to halt that's why the restart happen and its very bad wen squid restart doing huge rebuild it take time to f

Re: [squid-users] Fwd: Re: Authentification LDAP Exception for IP adresse

2016-02-27 Thread Jérôme Seuniac
Thanks for your advice, your are a good community :-) Le 26 févr. 2016 17:57, "Amos Jeffries" a écrit : > On 26/02/2016 10:43 p.m., Jérôme Seuniac wrote: > > Thanks for your help. > > > > I have change my configuration with your advice. > > > > It's works ! > > > > :-) > > > > Please also run the

[squid-users] proxy not staying logged in

2016-02-27 Thread Kevin Giger
I have users of my proxy when they add stuff to cart its ok but checkout won't work see the robert is his user name I can't figure out how to keep that logged in to not get denied errors. 1456556236.501336 52.25.202.130 TCP_MISS/200 7333 POST http://www.footlocker.com/catalog/miniAddToCart.c

[squid-users] رد: squid SMP rock store , any luck with new releases ?

2016-02-27 Thread Ahmad
How much can we store in rock ? I already used the rock with 3.5.15 squid and it seems mean object size like 35K So im not getting any good things Can I cache like 10 M object size in rock ? Can I cache that in memeory ? Can u just tell me the max object size I can have with the last version