Re: [squid-users] Advice on Cache Peer ACLs

2019-08-30 Thread creditu
Thanks for the great explanation. Much appreciated. On Fri, Aug 30, 2019, at 2:10 PM, Alex Rousskov wrote: > On 8/30/19 2:41 PM, sq...@buglecreek.com wrote: > > > All requests will always start with www.example.com / or > > origin-www.example.com/ > > If that is true, why check domain na

Re: [squid-users] Advice on Cache Peer ACLs

2019-08-30 Thread Alex Rousskov
On 8/30/19 2:41 PM, sq...@buglecreek.com wrote: > All requests will always start with www.example.com / or > origin-www.example.com/ If that is true, why check domain names at all? When you write an ACL that checks for X, it is reasonable to assume that X may not happen. My evaluation of you

Re: [squid-users] Advice on Cache Peer ACLs

2019-08-30 Thread squid
Thank you for the reply. It appears that I had a IP address typo in one of the cache_peer lines that allowed the requests with /tst/map1 or map2 to slip bye. It appears to be working. I think you confirmed what I'm trying to do should work. One question about your last statement concerning

Re: [squid-users] Advice on Cache Peer ACLs

2019-08-30 Thread Alex Rousskov
On 8/30/19 11:44 AM, cred...@eml.cc wrote: > We use several squid servers in accelerator mode for load balancing to send > public requests to backend servers. The squids don't do any caching, they > just forward requests to the backend. > > We have cache_peer directives to send the incoming r

[squid-users] Advice on Cache Peer ACLs

2019-08-30 Thread creditu
We use several squid servers in accelerator mode for load balancing to send public requests to backend servers. The squids don't do any caching, they just forward requests to the backend. We have cache_peer directives to send the incoming requests to the backend Apache servers. What I need

Re: [squid-users] Linearly increasing delays in HTTPS proxy CONNECTS / 3.5.20

2019-08-30 Thread Alex Rousskov
On 8/30/19 8:16 AM, Ilari Laitinen wrote: > I also noticed that the platform (in general) tries to resolve ipv6 > first, but the TCP dumps have no ipv6 packages at all. This is > baffling, because there were indeed some unrelated open ipv6 > connections on the Squid server (reported by netstat).

Re: [squid-users] Linearly increasing delays in HTTPS proxy CONNECTS / 3.5.20

2019-08-30 Thread Ilari Laitinen
>> I noticed small but consistent spikes in squid's disk cache usage >> coinciding with the issue at hand. This seemed strange, given there >> was no other traffic during the tests and proxied HTTPS means there's >> nothing to cache (right?). > > Correct. To avoid suspecting disks, configure Squid