Re: [squid-users] --foreground vs -N

2019-09-18 Thread Alex Rousskov
On 9/18/19 4:24 PM, B. Cook wrote: > Would you suggest I go back to -N? I cannot make a specific recommendation due to insufficient information. In general, --foreground is meant for startup scripts, while -N is meant for triage and development. For example, scripts using --foreground would not n

Re: [squid-users] --foreground vs -N

2019-09-18 Thread B. Cook
Would you suggest I go back to -N? I've not seen anything awkward or out of the ordinary in cache.log.. I downloaded and tried to build squid-5 from AUR.. squid -v Squid Cache: Version 5.0.0-20190909-ra70e75b76 Service Name: squid Intercept/WCCPv2/SSL/CRTD/(A)UFS/DISKD/ROCK/eCAP/ICAP/64/GCC Pro

Re: [squid-users] --foreground vs -N

2019-09-18 Thread Alex Rousskov
On 9/18/19 3:37 PM, B. Cook wrote: > this is /dev/shm with --foreground (no workers) > -rw--- 1 proxy proxy8 2019-09-18 10:30 squid-cf__metadata.shm > -rw--- 1 proxy proxy 8216 2019-09-18 10:30 squid-cf__queues.shm > -rw--- 1 proxy proxy 36 2019-09-18 10:30 squid-cf__readers.

Re: [squid-users] Problem with ssl_choose_client_version:inappropriate fallback on some sites when using TLS1.2

2019-09-18 Thread John
Hi Amos Thank you for your help. On Tue, 17 Sep 2019 at 07:26, Amos Jeffries wrote: > ... > > Cipher Suite: TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca9) > > I suspect it might have something to do with these ECDSA keys. > > You do not have Elliptic-Curves enabled on the https_port

Re: [squid-users] --foreground vs -N

2019-09-18 Thread B. Cook
Thank you for the response.. Confused what you mean.. this is /dev/shm with --foreground (no workers) root:/dev/shm # ls -al total 12 drwxrwxrwt 2 root root 100 2019-09-18 10:30 . drwxr-xr-x 17 root root 3120 2019-09-17 09:08 .. -rw--- 1 proxy proxy8 2019-09-18 10:30 squid-cf__met

Re: [squid-users] SSL termination problem - squid's requests using https

2019-09-18 Thread Sam Holden
On Wed, Sep 18, 2019 at 7:11 AM Amos Jeffries wrote: > > > All these *_port things are a red herring. The initial problem was > connections to the origin server using HTTPS. > > Connections to originserver peer do not send URL scheme, and use the > settings on the cache_peer directive as the proto

Re: [squid-users] --foreground vs -N

2019-09-18 Thread Alex Rousskov
On 9/18/19 1:59 PM, B. Cook wrote: > is there any functional difference between the two? Yes: --foreground disables backgrounding of the master process. -N disables all SMP features and also implies --foreground. Bugs notwithstanding, the two options should have the same effect in your part

[squid-users] --foreground vs -N

2019-09-18 Thread B. Cook
tl;dr: is there any functional difference between the two? Using runit to handle my squid processes. I have Observium graphing system information. My data/traffic is consistent In my run file I changed from squid -N to squid --foreground #!/bin/sh -e exec \ chpst -o 131070 \ chpst -e ./env \

Re: [squid-users] SSL termination problem - squid's requests using https

2019-09-18 Thread Amos Jeffries
On 18/09/19 10:22 am, Alex Rousskov wrote: > On 9/17/19 5:02 PM, Sam Holden wrote: > >> When I have protocol=http is reports: >> 2019/09/17 20:08:55| Accepting reverse-proxy HTTP Socket connections > >> When I don't set the protocol is reports: >> 2019/09/17 20:17:38| Accepting reverse-proxy HTTP