[squid-users] Query about login=pass

2016-04-01 Thread Sreenath BH
Hi All, We have a setup with two squid servers lets say, squid1 and squid2. Requests land at Squid1 and it sends the request to squid2. Squid2 uses X-User-ID and Authorization headers for authenticating the user, and on success, fetches data from another webserver and returns the data. If authenti

[squid-users] conditionally running url rewriter helper

2016-02-08 Thread Sreenath BH
Hi All, Is there a way to make Squid invoke the external URL helper only for some requests(depending on some component of the PATH)? While it is possible to check the URL and take no action inside the rewriter, I want to know if this overhead can be avoided. thanks for any hints. Sreenath __

Re: [squid-users] Sending json error messages

2016-02-01 Thread Sreenath BH
just that based on your external helper logic it might be possible > to use ICAP or eCAP instead of an external acl helper(if indeed your > helper is externel_acl type) > > Eliezer > > On 01/02/2016 19:53, Sreenath BH wrote: >> Hi All, >> >> We want to send error m

[squid-users] Sending json error messages

2016-02-01 Thread Sreenath BH
Hi All, We want to send error message in json format when external acl deny's a request. Even if we send a json formatted message (using message= key value pair) in external helper, the final output is still html. We have a custom error file in share/error/templates directory, and we use %o to pi

Re: [squid-users] external acl helpers working with deny_info

2016-01-25 Thread Sreenath BH
t. Thanks, Sreenath On 1/25/16, Amos Jeffries wrote: > On 25/01/2016 5:18 a.m., Sreenath BH wrote: >> Hi All, >> >> I am trying to validate my understanding of external acl, deny_info >> and http_access deny all" interaction. >> >> My squid conf has ju

[squid-users] external acl helpers working with deny_info

2016-01-24 Thread Sreenath BH
Hi All, I am trying to validate my understanding of external acl, deny_info and http_access deny all" interaction. My squid conf has just two rules. First is external ACL helper and then the "deny all" as follows: Case (1) --- external_acl_type my_helper ttl=0 negative_ttl=0 children-max

Re: [squid-users] behavior of external acl helper in Squid 3.5.13

2016-01-22 Thread Sreenath BH
Hi All, before posting I should have read documentation completely. I set both ttl and negative_ttl to zero, and it is working fine. thanks, Sreenath On 1/22/16, Sreenath BH wrote: > Hi > > I am using an external helper for authentication. I have just one > http_access in squ

[squid-users] behavior of external acl helper in Squid 3.5.13

2016-01-22 Thread Sreenath BH
Hi I am using an external helper for authentication. I have just one http_access in squid.conf that refers to this external helper. I also have a url rewriter to which I pass some information using "tag" key. I observed that the acl is not invoked in several cases, just calling the url rewriter.

Re: [squid-users] key-value pairs output from external helper

2016-01-22 Thread Sreenath BH
16, Alex Rousskov wrote: > On 01/20/2016 09:33 AM, Sreenath BH wrote: > >> Squid allows external acl helpers to write arbitrary key-value pairs >> in its output. > >> Are these available for use by other modules of Squid? > > The answer depends on the helper: eCAP

[squid-users] key-value pairs output from external helper

2016-01-20 Thread Sreenath BH
Hi, Squid allows external acl helpers to write arbitrary key-value pairs in its output. As per documentation, these values can be set in both ERR and OK cases. Are these available for use by other modules of Squid? Specifically, can these be accessed by URL rewriter helper. We would like to rewr

[squid-users] dynamic messages from acl helper program

2016-01-19 Thread Sreenath BH
Hi All, We are using acl helper to authenticate users. Squid allows a template file that will be used to send a custom error message when the ACL sends an "ERR" string back to squid. In our case the acl helper contacts another web service for authentication. Is there a way to send the message we

Re: [squid-users] Time for cache synchronization between siblings

2015-12-18 Thread Sreenath BH
wrote: > On 18/12/2015 1:21 a.m., Sreenath BH wrote: >> Hi, >> >> Thanks for the detailed response. I really appreciate it. >> >> Unfortunately the load balancer we use is not a squid load balancer >> and for now I will have to use HTCP. >> >> Please

Re: [squid-users] Time for cache synchronization between siblings

2015-12-17 Thread Sreenath BH
would have fared better since it uses just the URL. Might that be a reason? thanks, Sreenath On 12/17/15, Amos Jeffries wrote: > On 17/12/2015 3:10 a.m., Sreenath BH wrote: >> Hi, >> >> Thanks for the tips. After disabling digest I believe performance >> improved. >

Re: [squid-users] Time for cache synchronization between siblings

2015-12-16 Thread Sreenath BH
? We will have a load balancer that sends requests to each squid server, and we want cache peering to work correctly in this case. thanks, Sreenath On 12/16/15, Amos Jeffries wrote: > On 16/12/2015 7:16 a.m., Sreenath BH wrote: >> Hi, >> >> I have a setup with three squ

[squid-users] Time for cache synchronization between siblings

2015-12-15 Thread Sreenath BH
Hi, I have a setup with three squid peers (siblings in squid.conf) and three upstream servers(peers with parent and originserver in squid.conf). I am using htcp for the three squid siblings. How much time does it take for one squid server to 'know' that another peer has a particular object cached

Re: [squid-users] routing to parent using carp

2015-11-24 Thread Sreenath BH
Thanks. I should have read the documentation completely before posting. carp-key=key-specification rgds, Sreenath On 11/24/15, Amos Jeffries wrote: > On 24/11/2015 11:11 p.m., Sreenath BH wrote: >> Hi all, >> >> We are planning to use carp to route requests based on requ

[squid-users] routing to parent using carp

2015-11-24 Thread Sreenath BH
Hi all, We are planning to use carp to route requests based on request URL. A part of the URL refers to a part of the file that is being requested in the GET request(say a part of a video file) However, to make the back-end more efficient, it would be great if all requests for a particular file

Re: [squid-users] Subject: Re: authentication of every GET request from part of URL?

2015-11-11 Thread Sreenath BH
downstream caches and overall performance. Thanks for driving home the important point. regards, Sreenath On 11/9/15, Amos Jeffries wrote: > On 10/11/2015 6:12 a.m., Sreenath BH wrote: >> Hi Alex, >> >> thanks for your detailed asnwers. >> >> Here are more detail

Re: [squid-users] Subject: Re: authentication of every GET request from part of URL?

2015-11-09 Thread Sreenath BH
an do arbitrary validations in it, so should work. Is it correct to assume that the external ACL code runs before url rewriting?, Does the URL rewriter run before a cache lookup? thanks, Sreenath On 11/8/15, Alex Rousskov wrote: > On 11/08/2015 06:34 AM, Sreenath BH wrote: > >> Is ther

[squid-users] Subject: Re: authentication of every GET request from part of URL?

2015-11-08 Thread Sreenath BH
. If the token is not found in database, return with an error, so that Squid can send back a not found type (some HTTP error) of response. thanks, Sreenath On 7/11/2015 1:33 a.m., Sreenath BH wrote: > Hi > I am very new to Squid, and think have a strange requirement. > We want to ser

[squid-users] authentication of every GET request from part of URL?

2015-11-06 Thread Sreenath BH
Hi I am very new to Squid, and think have a strange requirement. We want to serve cached content only if the client has been authenticated before. Since we don't expect the client software to send any information in headers, we embed a token in the URL that we present to the user. So when the clie