Re: [squid-users] Performance Issues Using NTML

2007-11-09 Thread Adrian Chadd
On Sat, Nov 10, 2007, Amos Jeffries wrote: > >cache_log /usr/local/squid/var/logs/cache.log > >cache_store_log /usr/local/squid/var/logs/store.log > > I'm not certain why this is even still around. Its only useful for > debugging the cache store. you an safely set it to "none" and reduce > load

Re: [squid-users] Configure squid based on content type of http response

2007-11-09 Thread ying lcs
On Nov 9, 2007 9:59 PM, Henrik Nordstrom <[EMAIL PROTECTED]> wrote: > On tis, 2007-10-30 at 15:21 -0600, Dmitry S. Makovey wrote: > > > /etc/squid/squid.conf: > > ... > > acl plain_content rep_mime_type -i text/plain > > # http_reply_access allow GET_method xml_content from_clients > > redirect_pro

Re: [squid-users] How to install Intermediate CA cert in squid

2007-11-09 Thread Henrik Nordstrom
On ons, 2007-10-31 at 14:49 -0700, Srinivas B wrote: > I have installed the certificate in squid, its working fine when I > include intermediate certificate in my root CA list of browser. But I > can't tell my customer to include cert in their browsers. Add the certificate chain after the issued

Re: [squid-users] Configure squid based on content type of http response

2007-11-09 Thread Henrik Nordstrom
On tis, 2007-10-30 at 15:21 -0600, Dmitry S. Makovey wrote: > /etc/squid/squid.conf: > ... > acl plain_content rep_mime_type -i text/plain > # http_reply_access allow GET_method xml_content from_clients > redirect_program /usr/local/bin/myscript > redirector_access plain_content rep_mime_type is

Re: [squid-users] Prevent caching of 302's?

2007-11-09 Thread Henrik Nordstrom
On tis, 2007-10-30 at 10:49 +1100, Tim Bates wrote: > It seems our squid box is caching 302 Moved Temporarily responses... Only if the 302 have an Expires / max-age making the response fresh. Regards Henrik signature.asc Description: This is a digitally signed message part

Re: [squid-users] Squid as transparent proxy for Outlook Web Access

2007-11-09 Thread Amos Jeffries
[EMAIL PROTECTED] wrote: Hi everyone, After a long period of trying and testing, i got squid to work as a transparent reverse proxy. The final goal is to place it in front of our company outlook web access server, and I'm trying to get there in small steps. My current problem: Squid works ex

Re: [squid-users] Performance Issues Using NTML

2007-11-09 Thread Amos Jeffries
Scott Anctil wrote: I have deployed a Squid server for a local school board to help with there ever increasing bandwidth issues. It is running Squid 2.6 Stable 16 under Ubuntu 7.10 server on a HP DL380. This server has 2GB of RAM, 2 dual core 3.06 GHz processors and 288 GB of SAS 15k storage (RAI

Re: [squid-users] Performance Issues Using NTML

2007-11-09 Thread Chris Robertson
Scott Anctil wrote: I have deployed a Squid server for a local school board to help with there ever increasing bandwidth issues. It is running Squid 2.6 Stable 16 under Ubuntu 7.10 server on a HP DL380. This server has 2GB of RAM, 2 dual core 3.06 GHz processors and 288 GB of SAS 15k storage (RAI

Re: [squid-users] Invalid Response

2007-11-09 Thread Amos Jeffries
[EMAIL PROTECTED] wrote: Hi, I encounter An "invalid Response" on a particular site. This is what I get from squid : -- The requested URL could not be retrieved While trying to process the request: GET /nms/jsp/webForm.jsp?fo=bl&id=S7Nn7isL2GdroOkABgb1B35boKb4Z2SiMGMF

Re: [squid-users] how to redirect https 80 requests to a cache listening to https on port 8080

2007-11-09 Thread Amos Jeffries
nick humphrey wrote: i thought the "defaultsite" was supposed to reflect what was entered into the browser on the outside of the internal network...maybe i had just misunderstood that part... No you understood correctly. i'll give it a try... thanks chris have a nice night/day 2007/11/9, Chr

Re: [squid-users] Squid not responding

2007-11-09 Thread Amos Jeffries
stephane lepain wrote: On Friday 09 November 2007 15:20:04 Tek Bahadur Limbu wrote: Hi Stephane, stephane lepain wrote: Hi Guys, Squid did not respond when I restarted my PC. I don't have any error message in /etc/squid/squid.out. It seems that squid is not even registering. Since I don't hav

[squid-users] Performance Issues Using NTML

2007-11-09 Thread Scott Anctil
I have deployed a Squid server for a local school board to help with there ever increasing bandwidth issues. It is running Squid 2.6 Stable 16 under Ubuntu 7.10 server on a HP DL380. This server has 2GB of RAM, 2 dual core 3.06 GHz processors and 288 GB of SAS 15k storage (RAID). I am using NTLM au

Re: [squid-users] Squid Performance (with Polygraph)

2007-11-09 Thread Adrian Chadd
On Fri, Nov 09, 2007, Dave Raven wrote: > Hi Adrian, > > It works for the full 4 hours with a null cache directory. How would > I see any kind of stats/information on disk IO? From the stats I can see so > far, the disk stats don't change at all when it fails ... That'd be because you're pr

Re: [squid-users] Squid not responding

2007-11-09 Thread stephane lepain
On Friday 09 November 2007 15:20:04 Tek Bahadur Limbu wrote: > Hi Stephane, > > stephane lepain wrote: > > Hi Guys, > > > > Squid did not respond when I restarted my PC. I don't have any error > > message in /etc/squid/squid.out. It seems that squid is not even > > registering. Since I don't have a

[squid-users] Fwd: Differentiating http and ssl requests.

2007-11-09 Thread Srinivas B
Forwarding my earlier post. Any idea? -- Forwarded message -- From: Srinivas B <[EMAIL PROTECTED]> Date: Nov 6, 2007 10:28 AM Subject: Differentiating http and ssl requests. To: squid-users@squid-cache.org Hi All, I am using Squid 2.6 Stable 12. I have my configuration like bel

Re: [squid-users] how to redirect https 80 requests to a cache listening to https on port 8080

2007-11-09 Thread nick humphrey
i thought the "defaultsite" was supposed to reflect what was entered into the browser on the outside of the internal network...maybe i had just misunderstood that part... i'll give it a try... thanks chris have a nice night/day 2007/11/9, Chris Robertson <[EMAIL PROTECTED]>: > nick humphrey wrote:

Re: [squid-users] What to do if no expire info received from server

2007-11-09 Thread Chris Robertson
Dirk Taggesell wrote: Hi folks, there's a web-server, that sends no info about caching or expiry of documents. That is the http header received while fetching a flash applet: HTTP/1.x 200 OK Date: Fri, 09 Nov 2007 15:26:46 GMT Server: Jetty/5.1.x (Mac OS X/10.4.9 i386 java/1.5.0_07 Content-Type

Re: [squid-users] how to redirect https 80 requests to a cache listening to https on port 8080

2007-11-09 Thread nick humphrey
well, yeah i nat to the accelerator, but i don't know why it won't send 80 from the accelerator to the cache on 8080. do i only need to add a new https_port line, nothing else? like this: https_port 8080 cert=/usr/local/squid/etc/key.crt key=/usr/local/squid/etc/key.key defaultsite=mycompany.no-ip

Re: [squid-users] how to redirect https 80 requests to a cache listening to https on port 8080

2007-11-09 Thread nick humphrey
yeah i tried adding an extra line too and it didn't work. why not? weird i don't want to use nat on router because i want the reverse proxy benefits... 2007/11/9, Chris Robertson <[EMAIL PROTECTED]>: > nick humphrey wrote: > > i already have a working configuration listening for ssl/https > > req

Re: [squid-users] how to redirect https 80 requests to a cache listening to https on port 8080

2007-11-09 Thread Chris Robertson
nick humphrey wrote: i already have a working configuration listening for ssl/https requests on port 8080, but i also want to forward all requests using port 80 to the same server. what is the trick? here are my relevant lines of working code right now: https_port 8080 cert=/usr/local/squid/etc/

[squid-users] Squid as transparent proxy for Outlook Web Access

2007-11-09 Thread Killing-Time
Hi everyone, After a long period of trying and testing, i got squid to work as a transparent reverse proxy. The final goal is to place it in front of our company outlook web access server, and I'm trying to get there in small steps. My current problem: Squid works exactly as it should when con

Re: [squid-users] Squid Performance (with Polygraph)

2007-11-09 Thread Marcello Romani
Dave Raven ha scritto: Hi Adrian, It works for the full 4 hours with a null cache directory. How would I see any kind of stats/information on disk IO? From the stats I can see so far, the disk stats don't change at all when it fails ... I'm currently using COSS, but I've also tried this

[squid-users] What to do if no expire info received from server

2007-11-09 Thread Dirk Taggesell
Hi folks, there's a web-server, that sends no info about caching or expiry of documents. That is the http header received while fetching a flash applet: HTTP/1.x 200 OK Date: Fri, 09 Nov 2007 15:26:46 GMT Server: Jetty/5.1.x (Mac OS X/10.4.9 i386 java/1.5.0_07 Content-Type: application/x-shockwav

Re: [squid-users] Maximum users a squid-server can handle

2007-11-09 Thread Tek Bahadur Limbu
Hi Goj, Goj, Dirk wrote: Hi there :) Is it possible to give any forecast about the maximum clients a specified machine can server in future ? I know it depends hardly on the behave of the clients... It will also depend on the hardware of your Squid machine. More memory and fast hard drive

[squid-users] Invalid Response

2007-11-09 Thread apmailist
Hi, I encounter An "invalid Response" on a particular site. This is what I get from squid : -- The requested URL could not be retrieved While trying to process the request: GET /nms/jsp/webForm.jsp?fo=bl&id=S7Nn7isL2GdroOkABgb1B35boKb4Z2SiMGMFGb/VEkJUIAIA HTTP/1.1 Host:

RE: [squid-users] Squid Performance (with Polygraph)

2007-11-09 Thread Dave Raven
Hi Adrian, It works for the full 4 hours with a null cache directory. How would I see any kind of stats/information on disk IO? From the stats I can see so far, the disk stats don't change at all when it fails ... I'm currently using COSS, but I've also tried this with ufs and diskd (with

[squid-users] how to redirect https 80 requests to a cache listening to https on port 8080

2007-11-09 Thread nick humphrey
i already have a working configuration listening for ssl/https requests on port 8080, but i also want to forward all requests using port 80 to the same server. what is the trick? here are my relevant lines of working code right now: https_port 8080 cert=/usr/local/squid/etc/key.crt key=/usr/local/

Re: [squid-users] Squid not responding

2007-11-09 Thread Tek Bahadur Limbu
Hi Stephane, stephane lepain wrote: Hi Guys, Squid did not respond when I restarted my PC. I don't have any error message in /etc/squid/squid.out. It seems that squid is not even registering. Since I don't have an error message, I can't sort this out. I also tried a restart, stop and start

Re: [squid-users] Squid Performance (with Polygraph)

2007-11-09 Thread Adrian Chadd
Rightio; this reads like you're running out of disk IO. Try running the test with a null cache dir and make sure the box can handle that load. Squid unfortunately had crap disk IO code for whats available these days. Adrian On Fri, Nov 09, 2007, Dave Raven wrote: > Hi all, > Okay I mana

RE: [squid-users] Squid Performance (with Polygraph)

2007-11-09 Thread Dave Raven
Hi all, Okay I managed to do a lot more testing at the office today. Firstly some of the questions asked -- CPU Usage: The cpu usage is around 30% during the test, when the unit begins to fail it actually goes down a bit. Mbufs/Clusters: All fine - they do rise quickly after the problem

Re: [squid-users] Maximum users a squid-server can handle

2007-11-09 Thread Adrian Chadd
Setup polygraph, create a workload which simulates your projected loads, and do some testing. Adrian On Fri, Nov 09, 2007, Goj, Dirk wrote: > Hi there :) > > Is it possible to give any forecast about the maximum clients a specified > machine can server in future ? I know it depends hardly on

Re: [squid-users] Maximum users a squid-server can handle

2007-11-09 Thread Amos Jeffries
Goj, Dirk wrote: Hi there :) Is it possible to give any forecast about the maximum clients a specified machine can server in future ? I know it depends hardly on the behave of the clients... More detailed... a the moment we're using one squid to serve only about 150 inhouse users. In future

[squid-users] Maximum users a squid-server can handle

2007-11-09 Thread Goj, Dirk
Hi there :) Is it possible to give any forecast about the maximum clients a specified machine can server in future ? I know it depends hardly on the behave of the clients... More detailed... a the moment we're using one squid to serve only about 150 inhouse users. In future the proxy should se

Re: [squid-users] Squid not responding

2007-11-09 Thread Tony Dodd
stephane lepain wrote: Hi Guys, Squid did not respond when I restarted my PC. I don't have any error message in /etc/squid/squid.out. It seems that squid is not even registering. Since I don't have an error message, I can't sort this out. I also tried a restart, stop and start but nothing wou

[squid-users] Squid not responding

2007-11-09 Thread stephane lepain
Hi Guys, Squid did not respond when I restarted my PC. I don't have any error message in /etc/squid/squid.out. It seems that squid is not even registering. Since I don't have an error message, I can't sort this out. I also tried a restart, stop and start but nothing would do. /etc/rc.d/init.d/

Re: [squid-users] Squid Performance (with Polygraph)

2007-11-09 Thread Adrian Chadd
Check netstat -mb and see if you're running out of mbufs? You haven't mentioned whether the CPU is being pegged at this point? Adrian On Fri, Nov 09, 2007, Dave Raven wrote: > Hi all, > Okay I've done some of what you requested, and unfortunately failed > to find anything specific. I can

Re: [squid-users] WCCPv2 and HTTPS problems

2007-11-09 Thread Adrian Chadd
On Fri, Nov 09, 2007, Hemant Raj Chhetri wrote: > I have installed squid2.6STABLE16 in > transparent mode on freebsd 6.2. The router which I am > using is cisco 1841 series router with IOS 12.4. I have > implemented ipfw on my freebsd cache server . I've covered the things to try whe

Re: [squid-users] Squid Performance (with Polygraph)

2007-11-09 Thread Marcello Romani
Dave Raven ha scritto: Hi all, Okay I've done some of what you requested, and unfortunately failed to find anything specific. I can pretty much guarantee the times at which the requests will slow down now. 600RPS = 15 minutes, 800 RPS = 11 minutes, 400 RPS = ~80 minutes. During that ti