Re: [squid-users] sourcehash load balance

2016-10-24 Thread André Janna
On 23/10/2016 10:35 a.m., Amos Jeffries wrote: On 22/10/2016 12:21 a.m., André Janna wrote: I set up a Squid proxy that forwards all requests to 2 parent caches. I'm using Squid version 3.5.19. My goal is that multiple connection from a client to a server should be forwarded to the same parent

[squid-users] sourcehash load balance

2016-10-21 Thread André Janna
client are not sent to the same parent cache. How can I force Squid to always use source hash parent selection method? Regards, André Janna ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] file descriptors leak

2015-12-15 Thread André Janna
Em 28/11/2015 22:46, André Janna escreveu: I took another network trace this time both at Squid and Windows client ends. cache.log: 2015/11/27 11:30:55.610 kid1| SECURITY ALERT: Host header forgery detected on local=177.43.198.106:443 remote=192.168.64.4:61802 FD 5465 flags=33 (local IP does

Re: [squid-users] file descriptors leak

2015-11-28 Thread André Janna
Citando Amos Jeffries : So, the first place to look is not Squid I think. But why at least 6 of those ACK packets did not make it back to the client. That needs resolving first to esure that the TCP level is operating correctly. Only then if the problem remains looking at Squid, the use of port

Re: [squid-users] file descriptors leak

2015-11-26 Thread André Janna
Assinatura Em 24/11/2015 00:54, Amos Jeffries escreveu: FYI: unless you have a specific need for 3.5 you should be fine with the 3.4 squid3 package that is available for Jesse from Debian backports. The alternative is going the other way and upgrading right to the latest 3.5 snapshot (and/or 4

Re: [squid-users] file descriptors leak

2015-11-23 Thread André Janna
Assin Em 22/11/2015 16:25, Eliezer Croitoru escreveu: Hey Andre, There are couple things to the picture. It's not only squid that is the "blame". It depends on what your OS tcp stack settings are. To verify couple things you can try to use the netstat tool. run the command "netstat -nto" to see

Re: [squid-users] file descriptors leak

2015-11-22 Thread André Janna
Citando André Janna: Squid is still using file descriptors 12 and 14 (and a lot of others) for the same connections as yesterday, although the mobile devices it was connected to have not been online in our network for at least 15 hours.   Update: Squid released file descriptors after about

Re: [squid-users] file descriptors leak

2015-11-22 Thread André Janna
Citando Amos Jeffries : CONNECT requests with tunnels can be particularly long lived, mobiles and their applications stay active for weeks on end with few outward signs of what is happening inside the encrypted tunnel. The only way to be sure the connection is finished with is when one of the c

[squid-users] file descriptors leak

2015-11-21 Thread André Janna
I'm running Squid 3.5.10 on Debian Jessie and after some hours of execution it runs out of file descriptors. Squid is listening on port 3125, 3126 and 3127. Port 3126 is used for intercepting, via iptables redirect, https connections mostly from mobile devices like smartphones. On this port is act