[squid-users] IOWAIT and second disk

2006-09-19 Thread Michał Margula
Hello! I have a aufs on /dev/sdc. Iowait takes about 40% of CPU. If I add another disk, will it make that load lower? Is it good idea to use two disks with aufs (diskd is unstable unfortunately)? -- Michał Margula, [EMAIL PROTECTED], http://alchemyx.uznam.net.pl/ W życiu piękne są tylko

Re: [squid-users] IOWAIT and second disk

2006-09-19 Thread Adrian Chadd
On Tue, Sep 19, 2006, Micha? Margula wrote: Hello! I have a aufs on /dev/sdc. Iowait takes about 40% of CPU. If I add another disk, will it make that load lower? Is it good idea to use two disks with aufs (diskd is unstable unfortunately)? Yes, AUFS is fine. Take a look at

Re: [squid-users] [squid-users]: WARNING: Disk space over limit: 31457564 KB 31457280 KB. How to avoid it?

2006-09-19 Thread Matus UHLAR - fantomas
m?n 2006-09-18 klockan 10:31 -0700 skrev Pranav Desai: I am running some polymix-4 tests with squid 2.6-S3. Every single test I have run so far has these warning. Some FAQs and other searches suggest that this is caused by a corrupted swap.state, and the solution is to wipe out the cache

Re: [squid-users] Efficiency of around 10%, is that normal

2006-09-19 Thread Matus UHLAR - fantomas
On 18.09.06 13:21, Bas Rijniersce wrote: I was used to getting efficiencies of around 50%. My current setup does not get past 10% as reported by Calamaris. There are around 40 people behind the proxy. After Googling around I added the following lines to squid.conf: cache_mem 256 MB

Re: [squid-users] IOWAIT and second disk

2006-09-19 Thread Michał Margula
Adrian Chadd wrote: On Tue, Sep 19, 2006, Micha? Margula wrote: Hello! I have a aufs on /dev/sdc. Iowait takes about 40% of CPU. If I add another disk, will it make that load lower? Is it good idea to use two disks with aufs (diskd is unstable unfortunately)? Yes, AUFS is fine. Take a

Re: [squid-users] IOWAIT and second disk

2006-09-19 Thread Adrian Chadd
I'd suggest splitting it - one disk for AUFS (36 gig), one disk for COSS. Don't use a filesystem w/ a 36 gig file on it. Just tell Squid to use the raw disk device. It works really well. Just remember to read the COSS setup example in the Wiki.

[squid-users] Reverse proxy HTTPS port on 8443

2006-09-19 Thread Mohamed Navas V
hi, We have one setup with a reverse proxy for multiple backend back servers. All these servers are for HTTPtraffic only with accel port 80. But it's propsed one additional with the existing setup as follows:- request on port 8080 request on port 8080 user

Re: [squid-users] IOWAIT and second disk

2006-09-19 Thread Matus UHLAR - fantomas
On 19.09.06 09:56, Michał Margula wrote: Hardware is 2 x Xeon 3.6, 2GB RAM, SCSI storage controller: LSI Logic 53c1030 PCI-X Fusion-MPT Dual Ultra320 SCSI on Intel E7520. Now in topic of COSS, what is better solution (/dev/sdc is 36 GB and /dev/sdd also will be 36 GB, same disk model):

Re: [squid-users] Squid 2.6 + COSS comparison

2006-09-19 Thread Matus UHLAR - fantomas
On 19.09.06 10:11, Adrian Chadd wrote: The COSS code in Squid-2.6 has come quite far from its original design by Eric Stern. Steven Wilton has put an enormous amount of effort into the COSS design to fix the remaining bugs and dramatically improve its performance. I've assembled a quick

Re: [squid-users] Squid 2.6 + COSS comparison

2006-09-19 Thread Adrian Chadd
On Tue, Sep 19, 2006, Matus UHLAR - fantomas wrote: On 19.09.06 10:11, Adrian Chadd wrote: The COSS code in Squid-2.6 has come quite far from its original design by Eric Stern. Steven Wilton has put an enormous amount of effort into the COSS design to fix the remaining bugs and dramatically

[squid-users] parseHttpRequest: NF getsockopt(SO_ORIGINAL_DST) failed: (92) Protocol not available

2006-09-19 Thread Víctor J. Hernández Gómez
Hi, we have a new transparent-proxy configuration built using the following options: ./configure \ --prefix=/usr/local/squid-2.6.STABLE3 \ --disable-wccp \ --disable-wccp2 \ --enable-ssl \ --with-openssl=/usr/local/ssl \ --enable-default-err-language=Spanish \ --enable-err-languages=Spanish

Re: [squid-users] IOWAIT and second disk

2006-09-19 Thread Michał Margula
Matus UHLAR - fantomas wrote: I would use the 4), decrease cache_disk for both disks and create ~1GB file for COSS on both disks. Can you explain why? I am not saying you're wrong, but I want to understand :) -- Michał Margula, [EMAIL PROTECTED], http://alchemyx.uznam.net.pl/ W życiu

[squid-users] Reverse proxy for multiple backend servers

2006-09-19 Thread Mohamed Navas V
Hi, The reverse proxy to redirect for 1 web backend server is working fine for me ... Still I am confused with some setting for multiple backend servers. For single backend server setup http://proxy.my-domain.com is redirecting to http://backendserver1.my-domain.com For multiple backend server

Re: [squid-users] Reverse proxy HTTPS port on 8443

2006-09-19 Thread fulan Peng
I show you a workable configuration file for 2.6 S3. You can replace those things. http_port 127.0.0.1:80 defaultsite=ddint.org https_port 443 cert=c:\squid\etc\cert.pem key=c:\squid\etc\key.pem defaultsite=zyzg.org.ru https_port 9001 cert=c:\squid\etc\cert.pem key=c:\squid\etc\key.pem

Re: [squid-users] caching geoserver

2006-09-19 Thread Peppo Herney
Hello, thanks for your previous reply. Unfourtunatly I could not resolve the issue, after following your hints. Here is log output from access.log: 1158668471.343156 129.26.149.240 TCP_MISS/200 29792 GET

[squid-users] squid limits and known constrains

2006-09-19 Thread Benner, Uwe
Dear all, We want to setup a squid proxy env. for the headquarters and subsidiaries. Before I start the project I should know the hardware requirements (sizing) and if any limits or constrains regarding squid are known (the OS will be linux) Were can I find this information - the FQAs and

Re: [squid-users] squid limits and known constrains

2006-09-19 Thread Adrian Chadd
On Tue, Sep 19, 2006, Benner, Uwe wrote: Dear all, We want to setup a squid proxy env. for the headquarters and subsidiaries. Before I start the project I should know the hardware requirements (sizing) and if any limits or constrains regarding squid are known (the OS will be linux)

[squid-users] Squid ACL (Is this Possible)

2006-09-19 Thread Mehmet, Levent \(Accenture\)
All I currently have a setup which sends different domains to different Cache_peers. This has been working fine with the below config.: cache_peer 1.1.1.1 parent 80 80 no-query cache_peer 2.2.2.2 parent 80 80 no-query cache_peer 3.3.3.3 parent 3128 3130 no-query cache_peer_domain 3.3.3.3

AW: [squid-users] squid limits and known constrains

2006-09-19 Thread Benner, Uwe
Thx for your fast response. I am thinking about a parent /sibling setup. The range of users will be (located in different subs) 50 150 - 200 ~ 900 ~1500 Bandwidth of the internet link and the links between subs still unknown Uwe Dear all, We want to setup a squid proxy env. for the

Re: [squid-users] squid limits and known constrains

2006-09-19 Thread Adrian Chadd
On Tue, Sep 19, 2006, Benner, Uwe wrote: Thx for your fast response. I am thinking about a parent /sibling setup. The range of users will be (located in different subs) 50 150 - 200 ~ 900 ~1500 Bandwidth of the internet link and the links between subs still unknown Anything reasonably

[squid-users] Force squid to timeout and internet explorer hanging

2006-09-19 Thread Irwan Hadi
We have a problem right now with our Squid 2.5 Stable 10 where if IE tried to open some websites with many advertisements, eg: msnbc.com, cnn.com, IE will hang. The main problem is we just implement a intrusion firewall at our border router that blocks advertisement websites. So, when Squid

[squid-users] Squid Multiwan

2006-09-19 Thread sOngUs
Hello guys!! I got a linux server with two WAN interfaces to two different ISP's and im using SQUID to cache and filter some things to the users... is there a way i can select wich route to squid take to go to the internet? i want some hosts to go to the internet using a different route than

[squid-users] changing cache_dir size

2006-09-19 Thread Lawrence Wang
hi, if i change the size of a cache_dir in squid.conf, do i have to re-initialize the dir with squid -z?

[squid-users] Re: Squid 2.6 + COSS comparison

2006-09-19 Thread Joost de Heer
Adrian Chadd wrote: Hi everyone, The COSS code in Squid-2.6 has come quite far from its original design by Eric Stern. Steven Wilton has put an enormous amount of effort into the COSS design to fix the remaining bugs and dramatically improve its performance. I've assembled a quick webpage

Re: [squid-users] Squid ACL (Is this Possible)

2006-09-19 Thread Chris Robertson
Mehmet, Levent (Accenture) wrote: All I currently have a setup which sends different domains to different Cache_peers. This has been working fine with the below config.: cache_peer 1.1.1.1 parent 80 80 no-query cache_peer 2.2.2.2 parent 80 80 no-query cache_peer 3.3.3.3 parent 3128 3130

Re: [squid-users] Persistent Connections

2006-09-19 Thread Henrik Nordstrom
tis 2006-09-19 klockan 10:02 -0700 skrev Mark Nottingham: 1) Squid supports HTTP/1.0-style persistent connections; i.e., if it gets a request with a Connection: keep-alive header in it, it will reuse the connection. Yes. However, if it receives a HTTP/1.1 request, it will fall back to

Re: [squid-users] [squid-users]: WARNING: Disk space over limit: 31457564 KB 31457280 KB. How to avoid it?

2006-09-19 Thread Henrik Nordstrom
mån 2006-09-18 klockan 16:40 -0700 skrev Pranav Desai: Could any of the above have any impact on the performance. Well.. it's a sign that your cache_dir is probably overloaded, or that you have set cache_swap_high too high making it overly hard for the LRU garbage collection to keep up.

Re: [squid-users] parseHttpRequest: NF getsockopt(SO_ORIGINAL_DST) failed: (92) Protocol not available

2006-09-19 Thread Henrik Nordstrom
tis 2006-09-19 klockan 11:53 +0200 skrev Víctor J. Hernández Gómez: 2006/09/19 11:44:30| parseHttpRequest: NF getsockopt(SO_ORIGINAL_DST) failed: (92) Protocol not available ...in our cache.log. Any idea on what is going on? Do you have the NAT iptable loaded? Regards Henrik

Re: [squid-users] Reverse proxy for multiple backend servers

2006-09-19 Thread Henrik Nordstrom
tis 2006-09-19 klockan 15:18 +0400 skrev Mohamed Navas V: Hi, The reverse proxy to redirect for 1 web backend server is working fine for me ... Still I am confused with some setting for multiple backend servers. For single backend server setup http://proxy.my-domain.com is redirecting to

Re: [squid-users] caching geoserver

2006-09-19 Thread Henrik Nordstrom
tis 2006-09-19 klockan 15:28 +0200 skrev Peppo Herney: 1158668471.343156 129.26.149.240 TCP_MISS/200 29792 GET http://129.26.151.234:8080/geoserver/wms?bbox=-130,24,-66,50styles=populationFormat=image/pngrequest=GetMaplayers=topp:stateswidth=550height=250srs=EPSG:4326 -

Re: [squid-users] Force squid to timeout and internet explorer hanging

2006-09-19 Thread Henrik Nordstrom
tis 2006-09-19 klockan 10:20 -0600 skrev Irwan Hadi: The main problem is we just implement a intrusion firewall at our border router that blocks advertisement websites. So, when Squid can't open this advertisement link, and thus caused the client (IE) to hang. Hmm... you should reconfigure

Re: [squid-users] Squid Multiwan

2006-09-19 Thread Henrik Nordstrom
tis 2006-09-19 klockan 10:52 -0600 skrev sOngUs: Hello guys!! I got a linux server with two WAN interfaces to two different ISP's and im using SQUID to cache and filter some things to the users... is there a way i can select wich route to squid take to go to the internet? Squid doesn't do

Re: [squid-users] Squid Multiwan

2006-09-19 Thread sOngUs
Ok thanks! Im doing some testing using this: http://devel.squid-cache.org/tosaddracl/example.html But it doesnt work, it gives me timeouts! I got many questions... like... tcp_outgoing_address 192.168.0.1 someacl ( src acl) What does this rule do? im guessing: opens the connection from

[squid-users] Re: redirect access to wpad.dat

2006-09-19 Thread dny
On 9/19/06, dny [EMAIL PROTECTED] wrote: how can i redirect access to wpad.dat to my own version of this file using squid? tia dny can i put this in squid.conf ?? acl wpad url_regex -i \wpad.dat$ http_access deny wpad deny_info myownwpad.dat any suggestion? tia dny ---

[squid-users] squid error running out of filedescriptors and others

2006-09-19 Thread dny
hi, just check my cache log and found these error. what are these? and how to fix it? tnxrgds, dny 2006/09/19 13:37:43| storeAufsOpenDone: (2) No such file or directory 2006/09/19 13:37:43|/var/log/cache/02/13/000213E4 2006/09/19 13:41:10| storeAufsOpenDone: (2) No such file or directory

Re: [squid-users] Reverse proxy HTTPS port on 8443

2006-09-19 Thread Mohamed Navas
OK, here the problem is SSL certificate is keeping in the destination backend server and this is initializing the SSL transaction. The proxy server itself has some SSL cert/key for other servers for any HTTPS request from the clients ... I had tried redirection from