Re: [squid-users] retrieving 1 file with 50 concurrent connections from memory cache in reverse proxy is really slow?

2008-05-15 Thread Mark Nottingham
ab is good for some kinds of benchmarking, but one of the problems with it is that it doesn't give you enough information to determine if the bottleneck is in the server, the network or the client. Take a look at httperf... Cheers, On 15/05/2008, at 8:15 AM, wheres theph wrote: I set up

Re: [squid-users] Configuring cache_peer to use ssl

2008-05-15 Thread Jancs
Quoting Amos Jeffries [EMAIL PROTECTED]: in access.log 192.168.0.1 TCP_MISS/000 0 CONNECT sourceforge.net:443 - FIRST_UP_PARENT/__ip__ - What does cache.log have to say about those failed requests? What version is the parent cache? Same details from them if possible. it says nothing

[squid-users] Hardware placement in existing network?

2008-05-15 Thread syslock
Hello there... I am looking to setup a transparent cache for a non-profit with a slow internet connection. I decided I would try and setup a transparent squid cache for home use first and use that knowledge to build a transparent cache for the non-profit. I want squid to be able to cache pages

[squid-users] Squid logging to a database

2008-05-15 Thread Wundy
Hi! I currently have a transparent squid in place that used squidguard as a blocking filter. squid version is 2.6 STABLE. I would like to import the access.log into a database for safe keeping and easy access with queries. a request from the company I do the internschip with. I have read

Re: [squid-users] Squid logging to a database

2008-05-15 Thread Cassiano Martin
You could write one yourself, as squid supports a 'logfile' daemon, or try mysar. It reads the squid logfile and import all content into a mysql database. get it at mysar.sf.net and the fast C code version at www.polaco.pro.br/mysar Wundy wrote: Hi! I currently have a transparent squid in

Re: [squid-users] Hardware placement in existing network?

2008-05-15 Thread Adrian Chadd
It depends whats doing NAT and stuff on your home network. If the cable modem is doing NAT, and your wireless router is actually a wireless bridge, then I'd put it between the cable modem and the wireless router. If the cable modem is just being a bridge and providing one IP; and your wireless

Re: [squid-users] How to set human readable date and time in logs

2008-05-15 Thread Henrik Nordstrom
On ons, 2008-05-14 at 11:21 -0300, Eriberto wrote: I need to set Squid to show comprehensible date and time in logs (contrary to epoc). I use emulate_httpd_log on. It worked formerly. But, how to set it now? access_log /usr/local/squid/var/logs/access.log common Regards Henrik

Re: [squid-users] Stupid newbie question regarding the cache

2008-05-15 Thread Henrik Nordstrom
On ons, 2008-05-14 at 14:38 -0700, Chris Zimmerman wrote: I am using squid 2.6 to proxy internal users to a limited access website containing documents that are updated regularly. How can I configure the cache to expire the objects at some regular interval so I can be sure that the new

Re: [squid-users] retrieving 1 file with 50 concurrent connections from memory cache in reverse proxy is really slow?

2008-05-15 Thread Henrik Nordstrom
On ons, 2008-05-14 at 15:15 -0700, wheres theph wrote: No errors show up in squid.out. Any ideas on why serving a static image from memory is so slow that ApacheBench times out? Anything in /var/log/messages? Regards Henrik

Re: [squid-users] Configuring cache_peer to use ssl

2008-05-15 Thread Henrik Nordstrom
On tor, 2008-05-15 at 11:27 +0300, Jancs wrote: 2008/05/15 11:20:04| clientNegotiateSSL: Error negotiating SSL connection on FD 17: error:1407609B:SSL routines:SSL23_GET_CLIENT_HELLO:https proxy request (1/-1) This means a proxy client contacted a https_port when it should have talked to

[squid-users] mystery traffic

2008-05-15 Thread Alan Lehman
While diagnosing an unrelated network problem, I ran tcpdump on my Squid (2.5-STABLE3) box. I found the following pattern repeating several times per second. I don't know how long this has been going on, but at least several days. If I kill Squid, it stops. x.x.x.99 = DMZ network port on Squid

Re: [squid-users] mystery traffic

2008-05-15 Thread Amos Jeffries
Alan Lehman wrote: While diagnosing an unrelated network problem, I ran tcpdump on my Squid (2.5-STABLE3) box. I found the following pattern repeating several times per second. I don't know how long this has been going on, but at least several days. If I kill Squid, it stops. x.x.x.99 = DMZ

Re: [squid-users] Squid logging to a database

2008-05-15 Thread Amos Jeffries
Wundy wrote: Hi! I currently have a transparent squid in place that used squidguard as a blocking filter. squid version is 2.6 STABLE. I would like to import the access.log into a database for safe keeping and easy access with queries. a request from the company I do the internschip with. I

Re: [squid-users] NTLM filtering single user

2008-05-15 Thread Amos Jeffries
Luca Dell'Oca wrote: On 5/13/08 4:00 PM, Amos Jeffries [EMAIL PROTECTED] wrote: acl Java browser Java/1.4 Java/1.5 http_access allow Java Ah, bingo. great big security hole. Anyone claiming to be Java now gets unlimited web browsing. And I do mean ANYONE, anywhere on the net. I've said I am

Re: [squid-users] Squid logging to a database

2008-05-15 Thread Henrik Nordstrom
On fre, 2008-05-16 at 01:52 +1200, Amos Jeffries wrote: As stated elsewhere 2.6 now supports custom logging daemons. Which would be the easiest and involve less experimental code. That's a 2.7 feature. Not found in 2.6. Regards Henrik

Re: [squid-users] Configuring cache_peer to use ssl

2008-05-15 Thread Jancs
Quoting Henrik Nordstrom [EMAIL PROTECTED]: On tor, 2008-05-15 at 11:27 +0300, Jancs wrote: 2008/05/15 11:20:04| clientNegotiateSSL: Error negotiating SSL connection on FD 17: error:1407609B:SSL routines:SSL23_GET_CLIENT_HELLO:https proxy request (1/-1) This means a proxy client contacted a

Re: [squid-users] retrieving 1 file with 50 concurrent connectionsfrom memory cache in reverse proxy is really slow?

2008-05-15 Thread Gordon McKee
This souuds like exactly what I have been having trouble with!! Has anyone got any ideas on how to debug this one. I plugged my old FreeBSD box in yesterday with the same config and everything worked. Very odd!! It happened when I upgraded from freebsd 6 i386 to 7 amd64 I get no errors

Re: [squid-users] Configuring cache_peer to use ssl

2008-05-15 Thread Henrik Nordstrom
On tor, 2008-05-15 at 19:16 +0300, Jancs wrote: didn't got: i am on my machine trying to contact https://sourceforge.net/my/, my browser contacts slave cache, which in it's order connects to parent cache using ssl and parent is supposed to connect to the site I want. In no place use

Re: [squid-users] Strange behaviour with website and squid

2008-05-15 Thread Henrik Nordstrom
On tis, 2008-05-13 at 07:38 -0300, Cassiano Martin wrote: Got the same problem here, after loding the Site on IE, doesnt show up when reloading. header: HTTP/1.1 200 OK Server: Oracle9iAS/9.0.2.2.0 Oracle HTTP Server Last-Modified: Mon, 17 Sep 2007 13:17:10 GMT Cache-Control: private

[squid-users] Remote squidclient

2008-05-15 Thread Ron Richardson
I have the MacPort of Squid running on a Mac Mini. Works great. But I don't want to tax it with all of the reporting stuff (Apache, RRDTool, etc.). I want to run those on an existing web server. I read in Duane Wessel's book (page 288) that If you have additional trusted hosts, you may want to

Re: [squid-users] Strange behaviour with website and squid

2008-05-15 Thread Cassiano Martin
Got it using lynx. Thanks Henrik Nordstrom wrote: On tis, 2008-05-13 at 07:38 -0300, Cassiano Martin wrote: Got the same problem here, after loding the Site on IE, doesnt show up when reloading. header: HTTP/1.1 200 OK Server: Oracle9iAS/9.0.2.2.0 Oracle HTTP Server Last-Modified: Mon,

[squid-users] store.log details?

2008-05-15 Thread Bashar
Hello, I have configured squid to be protected by user/pass using: auth_param basic program /usr/local/libexec/squid/ncsa_auth /usr/local/squid/squid_passwd i was wondering is it possible to know the users who accessed the links from the users locates at squid_passwd ? Best regards, Bashar

[squid-users] Don't want to start a flamewar, but...

2008-05-15 Thread Ray Van Dolson
I am using the 2.7.HEAD branch -- specifically for the Store URL rewrite options added by Adrian. This makes 3.0 currently not an option for me. I'm curious what the long-term plans are for the 2.x branch and the 3.x branch. Will the store URL stuff be ported to 3.x eventually? Adrian, you

[squid-users] NTLM authentication to two different domains

2008-05-15 Thread flubu
Hi, I'm wondering if it is possible to use NTLM authentication in squid for users in two different Windows domains. Depending on the users subnet, he would have to authenticate either to domain A or to domain B. What would one need to configure to make this work ? Thanks

Re: [squid-users] Problem in allowing only selected https sites and denying all others !!!

2008-05-15 Thread Chris Robertson
Shiva Raman wrote: Hi I am using Centos 5, Squid Cache: Version 2.6.STABLE6 and my local lan network is 192.168.10.0/24. More than 150 users are concurrently accessing the squid proxy server. Following is my requirement 1) Access to all http sites 2) Access to only selected https sites like

Re: [squid-users] Remote squidclient

2008-05-15 Thread Chris Robertson
Ron Richardson wrote: I have the MacPort of Squid running on a Mac Mini. Works great. But I don't want to tax it with all of the reporting stuff (Apache, RRDTool, etc.). I want to run those on an existing web server. I read in Duane Wessel's book (page 288) that If you have additional

Re: [squid-users] store.log details?

2008-05-15 Thread Chris Robertson
Bashar wrote: Hello, I have configured squid to be protected by user/pass using: auth_param basic program /usr/local/libexec/squid/ncsa_auth /usr/local/squid/squid_passwd i was wondering is it possible to know the users who accessed the links from the users locates at squid_passwd ?

Re: [squid-users] store.log details?

2008-05-15 Thread Bashar
Chris Robertson wrote, On 5/16/2008 3:24 AM: Bashar wrote: Hello, I have configured squid to be protected by user/pass using: auth_param basic program /usr/local/libexec/squid/ncsa_auth /usr/local/squid/squid_passwd i was wondering is it possible to know the users who accessed the links

Re: [squid-users] Don't want to start a flamewar, but...

2008-05-15 Thread Amos Jeffries
Keep in ind that the following is my own personal view of Squid future, other developers may differ. Ray Van Dolson wrote: I am using the 2.7.HEAD branch -- specifically for the Store URL rewrite options added by Adrian. This makes 3.0 currently not an option for me. I'm curious what the