[squid-users] Speed ​​limit from file size

2018-06-20 Thread Amos Jeffries
On 21/06/18 21:44, Michael Pro wrote: > Is it possible to limit the speed of receiving the file to the client > depending on the file size? NP: HTTP has no concept of "file". There are only messages. A message may contain 0 or more *pieces* of those things we humans call "files". > Let's say,

Re: [squid-users] Speed ​​limit from file size

2018-06-20 Thread Alex Rousskov
On 06/20/2018 01:44 PM, Michael Pro wrote: > Is it possible to limit the speed of receiving the file to the client > depending on the file size? > Let's say, > file =<1MB client download with 400Kbit/s > file 1MB...5MB client donload with 4Mbit/s > file >5MB - no speed limit For HTTP responses

Re: [squid-users] YUM Repo

2018-06-20 Thread Eliezer Croitoru
Hey Christian, I had the server down for maintenance and also blocked couple lechers. If the repo is up for you then great. If it's still not working for you as expected contact me via email and we can try to find out why it doesn't work for you. Eliezer On 2018-06-19 16:13, Christian

[squid-users] Speed ​​limit from file size

2018-06-20 Thread Michael Pro
Is it possible to limit the speed of receiving the file to the client depending on the file size? Let's say, file =<1MB client download with 400Kbit/s file 1MB...5MB client donload with 4Mbit/s file >5MB - no speed limit I try fore some settings delay_pools 1 delay_class 1 2 delay_access 1 allow

Re: [squid-users] Ignore SSL error and splice by ssl::server_name at the same time

2018-06-20 Thread Ahmad, Sarfaraz
Yes. As always appreciate the quick support this community provides. :) Thank you guys ! Regards, Sarfaraz -Original Message- From: squid-users On Behalf Of Amos Jeffries Sent: Wednesday, June 20, 2018 6:53 PM To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] Ignore SSL

Re: [squid-users] Active Directory Authentication?

2018-06-20 Thread Amos Jeffries
On 19/06/18 04:53, Beto Moreno wrote: > Hi guys. > > Just wondering, if we want squid Authenticate users from our Active > Directory Windows 2012 server, do we need to have our Linux-Squid > 3.5.x be part of the domain or a LDAP query can work without be part > of the domain? See my response to

Re: [squid-users] Ignore SSL error and splice by ssl::server_name at the same time

2018-06-20 Thread Amos Jeffries
On 21/06/18 00:25, Ahmad, Sarfaraz wrote: > I found the answer to my problem. The SNI and Subject CN were different > in my case and I was not peeking at step2 (meaning not looking at the > server certificate) that is why my ACLs were ineffective. > Ah, excellent. Does that mean your problem is

Re: [squid-users] Ignore SSL error and splice by ssl::server_name at the same time

2018-06-20 Thread Ahmad, Sarfaraz
I found the answer to my problem. The SNI and Subject CN were different in my case and I was not peeking at step2 (meaning not looking at the server certificate) that is why my ACLs were ineffective. Regards, Sarfaraz From: Ahmad, Sarfaraz Sent: Wednesday, June 20, 2018 3:25 PM To:

Re: [squid-users] Ignore SSL error and splice by ssl::server_name at the same time

2018-06-20 Thread Ahmad, Sarfaraz
Forgot to add. Remote IP addresses are not expected to remain constant. So I cannot build ACLs that way. So ssl::server_name is the only other hope. From: Ahmad, Sarfaraz Sent: Wednesday, June 20, 2018 2:34 PM To: 'squid-users@lists.squid-cache.org' Subject: Ignore SSL error and splice by

[squid-users] Ignore SSL error and splice by ssl::server_name at the same time

2018-06-20 Thread Ahmad, Sarfaraz
Hi, I need to provide access to a API service exposed on the internet to my clients. That API uses a certificate signed by a private CA. I don't want to trust that private CA in my proxies (lest it gets abused and I end up trusting certificates in the proxy that I shouldn't be. My clients