[squid-users] Caching URL with ?

2017-10-02 Thread Hector Chan
I have a question about caching URLs with an auth token embedded in the URL parameter. For example: https://www.example.com/path/page?token=xxx135ynjy93tqi The page can be uniquely identified without the URL parameters. It appears squid is using the full URL, including the URL parameters, as

[squid-users] dumping POST requests to files

2016-07-27 Thread Hector Chan
Hi, Is there anyway I can configure squid such that it will dump all incoming POST requests to some files while having proxying the requests to the origin servers at the same time? I have configured squid to run as a reverse proxy, and it's version 3.4.14. Thanks, Hector

Re: [squid-users] cache_peer directive with SNI

2016-06-23 Thread Hector Chan
eature’, which I’m guessing my next viable option is to see if I > can bridge the SNI gap with something like STUNNEL. > > > > Anyone else have any thoughts? > > > > *From:* Hector Chan [mailto:hectorc...@gmail.com] > *Sent:* June 22, 2016 1:09 AM > *To:* Kristopher

Re: [squid-users] cache_peer directive with SNI

2016-06-21 Thread Hector Chan
Have you looked at the options forceddomain and ssldomain under the cache_peer directive? Those may be just what you need. On Tue, Jun 21, 2016 at 8:14 PM, Kristopher Lalletti wrote: > Hi All, > > I'm replacing an Apache setup as a reverse-proxy with Squid v3.5, and

[squid-users] SSL cipher list

2016-01-15 Thread Hector Chan
Hi, I am running the squid 3.4.x line. I am looking into hardening our squid server. One of the things I am looking at is the SSL cipher list. Does anyone know how do I find out what SSL cipher list squid support? I read from another post that squid doesn't support the ECDHE ciphers, but I am

Re: [squid-users] TCP_MISS/503

2015-06-24 Thread Hector Chan
Not sure if this will help you, but I saw 503s on my squid when the origin server has an invalid SSL certificate -- expired cert, self-signed cert, etc. On Tue, Jun 23, 2015 at 7:25 PM, HackXBack hack.b...@hotmail.com wrote: The requested URL could not be retrieved -- View this message in

[squid-users] Delay pool change

2015-04-14 Thread Hector Chan
Hi all, If I configure a new delay pool in the config file or reconfigure an existing delay pool, do I have to restart squid? Can I send a SIGHUP to it to re-read the config file instead ? If I send a SIGHUP, what would happen to downloads that are in progress ? Thanks, Hector

[squid-users] squid with slow client

2015-03-31 Thread Hector Chan
Hi all, How does squid behave when it is downloading a 5+GB file with a slow client? I see my client (curl) exited with error code 18 ( CURLE_PARTIAL_FILE) when downloading a 5+GB file from squid. It was a cache miss, so the file was actually being fetched from the origin server. When it is

[squid-users] delay pool

2015-02-19 Thread Hector Chan
Hi all, Is there anyway I can apply the delay pool to only cache miss ? I wanted to let the client download as fast as possible if the request resulted in a cache hit, but not on cache miss. Thanks, Hector ___ squid-users mailing list

Re: [squid-users] usage of sslcapath in cache_peer

2015-02-17 Thread Hector Chan
Forgot to add. The actual cert is world readable. [admin@dsg214 ~]# ll /data/cacerts/../certs/a4a521af41327a4ab3ff1feb16a1a76888a0c2ea.crt -rw-r--r-- 1 admin root 1108 Feb 18 00:21 /data/cacerts/../certs/a4a521af41327a4ab3ff1feb16a1a76888a0c2ea.crt On Tue, Feb 17, 2015 at 5:18 PM, Hector Chan

Re: [squid-users] Default CA file

2015-02-07 Thread Hector Chan
Yuri and Amos, thanks for the replies! There is an openssl command that tells where OpenSSL will search for CA certs. $ openssl version -d OPENSSLDIR: /etc/pki/tls On Sat, Feb 7, 2015 at 5:19 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 8/02/2015 9:28 a.m., Hector Chan wrote: Hi all

Re: [squid-users] Squid going through another forward proxy

2014-11-21 Thread Hector Chan
, Hector Chan hectorc...@gmail.com wrote: Hi Amos, For the following cache_peer: cache_peer forward-proxy.example.com parent 3128 0 name=C Would squid do the proper HTTP CONNECT before forwarding the request there ? Thanks, Hector On Thu, Nov 13, 2014 at 10:35 PM, Amos Jeffries squ

[squid-users] Squid going through another forward proxy

2014-11-13 Thread Hector Chan
Hi, Does anyone have any idea how to setup squid (reverse proxy) behind a forward proxy ? Thanks, Hector ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Squid going through another forward proxy

2014-11-13 Thread Hector Chan
of (A) and (C). Thanks again, Hector On Thu, Nov 13, 2014 at 2:49 PM, Antony Stone antony.st...@squid.open.source.it wrote: On Thursday 13 November 2014 at 19:50:36 (EU time), Hector Chan wrote: Hi, Does anyone have any idea how to setup squid (reverse proxy) behind a forward proxy