[squid-users] cachemgr storeEntries count and coss

2008-07-22 Thread Manoj_Rajkarnikar
Hi all. I've recently added a coss storage to our cache and is performing great. But I see that the cachemgr is showing the decrease in storeEntries count and also the mean object size has increased from ~15k to ~25k. before coss was introduced, we had 64G of cache_dir split into 2 scsi disks

Re: [squid-users] how to cache POST request response ?

2008-07-22 Thread Henrik Nordstrom
On tis, 2008-07-22 at 09:14 +0700, johan firdianto wrote: Hi Henrik, Could reverse proxy handle this situation ? A reverse proxy is not applicable as rapidshare is not your site. It is possible to work around rapidshare POST logics by adding rapidshare specific logics to the proxy. But it

Re: [squid-users] could reverse proxy cache POST request

2008-07-22 Thread Henrik Nordstrom
On tis, 2008-07-22 at 09:53 +0700, johan firdianto wrote: hi all, could reverse proxy cache POST request /response ? No. See other response regarding your rapidshare question. Regards Henrik signature.asc Description: This is a digitally signed message part

[squid-users] Blocking non-safe ports

2008-07-22 Thread Paul Cocker
The first three http_access lines in my squid.conf file look like this: http_access allow manager localhost http_access deny manager http_access deny !Safe_ports Yet if I try and connect to http://bbc.co.uk:16825 I get a Connection Timed Out error not an Access Denied one. Isn't it the later I

Re: [squid-users] Problem with start squid

2008-07-22 Thread Egi
Hello, Try with: squid -d 1 and see what the error message is, maybe your logfiles are to big. Egi [EMAIL PROTECTED] wrote: I have installed and configured Squid 3 Stable 6, with the following options: ./configure --prefix=/usr/local/squid --enable-linux-netfilter --enable-arp-acl

[squid-users] Squid Maxing Out - Help required

2008-07-22 Thread Thompson, Scott (WA)
Hi all We are seeing some weird behaviour with our Squid server Thru out the day Internet Explorer will come back with Internet Explorer cannot display the page No errors from Squid as such, it appears that IE simply cannot contact the squid server, that's what it looks like to me! I have MRTG

[squid-users] Regarding FTP access through Squid

2008-07-22 Thread Sunny Bhatheja
Hello, I am using Squid 2.5 in RHEL-4 U - 4. My clients behind the proxy server is able to access the internet . But when on of my client trying to access the non-anonymous ftp server. Then that time it got stuck. So please suggest me why it is happening and how can i resolve this

Re: [squid-users] DNS configuration

2008-07-22 Thread elsergio
Henrik Nordstrom-5 wrote: On mån, 2008-07-21 at 15:18 -0700, elsergio wrote: I am trying to configure a reverse proxy. The idea is to have several web servers in my network and also a DNS. The dns server will have the planning logic for choosing the optimal web server. I want Squid to

Re: [squid-users] Url Re-director Fails

2008-07-22 Thread Shaine
Hi Actually i stuck in this problem , and I had to test in deeply by having more debug sessions.finally i got the following message form squid WARNING! Your cache is running out of filedescriptors i googled and found some informations in following url,

Re: [squid-users] SQUID port to port

2008-07-22 Thread elsergio
Henrik Nordstrom-5 wrote: On mån, 2008-07-21 at 15:19 -0700, elsergio wrote: Hi, Here comes another squid question: It is possible to have a squid proxy working like this: listening on port 80 and forward connection to ip1 on port 8080 listening on port 81 and forward connection to

Re: [squid-users] always_direct

2008-07-22 Thread John Doe
I was trying to go direct in case of videos (in a reverse proxy setup): acl askdirect req_mime_type -i video/x-flv This is not what you expect it to be. req_mime_type is the mime type of the request, not the response. The response mime type is only known when the response from the

Re: [squid-users] Squid Maxing Out - Help required

2008-07-22 Thread Adrian Chadd
The first thing to do is update to Squid-2.6 at the very least, perhaps Squid-2.7 when the next STABLE release is made. The CPU should drop quite dramatically. Of course, since you're maxing out the LAN interface, you may wish to also install a GigE adaptor with that. adrian 2008/7/22

Re: [squid-users] Regarding FTP access through Squid

2008-07-22 Thread Angela Williams
On Tuesday 22 July 2008, Sunny Bhatheja wrote: Hello, I am using Squid 2.5 in RHEL-4 U - 4. My clients behind the proxy server is able to access the internet . But when on of my client trying to access the non-anonymous ftp server. Then that time it got stuck. So please suggest

[squid-users] segmentation fault

2008-07-22 Thread Shaine
Hi This is about my url-redirect program . Its almost working fine. for now around 10 hours its working fine. But unfortunately squid gave a segmentation fault and dead. please help. what is the reason. === 2008/07/22 09:05:43| Redirector Result: `�U

Re: [squid-users] Cache URL with ?

2008-07-22 Thread Frog
Michael Alger wrote: On Tue, Jul 22, 2008 at 01:22:53PM +0900, KwangYul Seo wrote: It seems that squid never caches the URL with parameters. For example, every time a browser accesses http://www.naver.com/css/www.css?20080722, a cache miss occurs in squid. However, the server response

[squid-users] Redirector Result

2008-07-22 Thread Shaine
Hi, When i run the squid in debug mode , it displays some non-aschii charactors that freeze the standard output. How can i locate the String called Redirector Result in the source ? Why i am getting such non-standard out put ? Please help me to sorted out such minor things in my setup Thank

Re: [squid-users] Blocking non-safe ports

2008-07-22 Thread Amos Jeffries
Paul Cocker wrote: The first three http_access lines in my squid.conf file look like this: http_access allow manager localhost http_access deny manager http_access deny !Safe_ports Yet if I try and connect to http://bbc.co.uk:16825 I get a Connection Timed Out error not an Access Denied

Re: [squid-users] Cache URL with ?

2008-07-22 Thread Amos Jeffries
Frog wrote: Michael Alger wrote: On Tue, Jul 22, 2008 at 01:22:53PM +0900, KwangYul Seo wrote: It seems that squid never caches the URL with parameters. For example, every time a browser accesses http://www.naver.com/css/www.css?20080722, a cache miss occurs in squid. However, the server

Re: [squid-users] Problem with start squid

2008-07-22 Thread Amos Jeffries
Michael Alger wrote: On Mon, Jul 21, 2008 at 10:53:10PM -0500, [EMAIL PROTECTED] wrote: I have installed and configured Squid 3 Stable 6 It works correctly and completely for days and even weeks, but all of a sudden, and without reason it stops working, and there is nothing I can do to put it

Re: [squid-users] SQUID port to port

2008-07-22 Thread Amos Jeffries
elsergio wrote: Henrik Nordstrom-5 wrote: On mån, 2008-07-21 at 15:19 -0700, elsergio wrote: Hi, Here comes another squid question: It is possible to have a squid proxy working like this: listening on port 80 and forward connection to ip1 on port 8080 listening on port 81 and forward

Re: [squid-users] Redirector Result

2008-07-22 Thread Amos Jeffries
Shaine wrote: Hi, When i run the squid in debug mode , it displays some non-aschii charactors that freeze the standard output. How can i locate the String called Redirector Result in the source ? Why i am getting such non-standard out put ? Please help me to sorted out such minor things in

Re: [squid-users] Squid Maxing Out - Help required

2008-07-22 Thread Michael Alger
On Tue, Jul 22, 2008 at 03:44:13PM +0800, Thompson, Scott (WA) wrote: I have MRTG installed and for HTTP In and Out we are seeing it max out at 14.4MB/s as well as Server In/Out traffic Is this HTTP In and Out actually measuring HTTP traffic, or simply traffic coming to/from the squid server?

[squid-users] how to use IP addresses delivered by client?

2008-07-22 Thread Cezary Rzewuski
Hi, Is there any possibility for squid not to make DNS lookups at all but be provided with the server IP address from client? The issue is that we're using squid as a proxy for crawling malicious sites and the, so called, fast-flux attacks are quite popular these days. In this kind of attack DNS

Re: [squid-users] how to use IP addresses delivered by client?

2008-07-22 Thread Amos Jeffries
Cezary Rzewuski wrote: Hi, Is there any possibility for squid not to make DNS lookups at all but be provided with the server IP address from client? The issue is that we're using squid as a proxy for crawling malicious sites and the, so called, fast-flux attacks are quite popular these days. In

[squid-users] storeUpdateCopy: Aborted errors in 2.7

2008-07-22 Thread Chris Woodfield
Hi, We're testing a migration from 2.6 to 2.7, primarily to get the HTTP/ 1.1 header in squid-to-origin requests in a reverse proxy environment. Per our test plan, we migrated one of two servers sitting behind a load balancer to 2.7STABLE3 with the patch for bug 2406 applied; that bugfix

Re: [squid-users] SQUID port to port

2008-07-22 Thread elsergio
Hi all, I have been suggested this http_port 80 81 #to make squid listen to the desired ports One per line. Do I have to do something like this? http_port 80 acl all src 0.0.0.0/0.0.0.0 always_direct allow all cache_peer ip1 parent 8080 0 no-query origin_server name=DS1 cache_peer_access

Re: [squid-users] how to use IP addresses delivered by client?

2008-07-22 Thread Cezary Rzewuski
On Wed, 23 Jul 2008, Amos Jeffries wrote: If you want to maintain data integrity during these test operations you really do not want the sites to be cached at all between the testing engine and the tested site. If anything needs to be stored for records, its best done by the engine which

[squid-users] Problem with increasing memory utilization

2008-07-22 Thread Leandro Oliveira da Silva
Hello all! I have a strange problem with squid. I use squid not for caching, but for control with squidGuard, manage two links using tcp_outgoing_address and control traffic with delay_pool. Because of a known bug in 2.6 versions I couldn’t use the delay pool since I use reconfigure from time to

Re: [squid-users] Same port for http and https ??

2008-07-22 Thread Karandeep Malik
On Tue, Jul 22, 2008 at 2:39 AM, Henrik Nordstrom [EMAIL PROTECTED] wrote: mån 2008-07-21 klockan 09:08 +0200 skrev Matus UHLAR - fantomas: On fre, 2008-07-18 at 15:30 +0530, Karandeep Malik wrote: I am using a standard proxy configuration. Can I use same port for https and https ? On

[squid-users] Memory usage...

2008-07-22 Thread John Doe
Hi, I saw this formula; is it correct? RAM needed ~= 10MB x cache_dir GB + cache_mem + 20MB recommanded ~= 2*RAM Exemple for 100GB of disk cache and 128MB of cache_mem: RAM ~= 10*100+128+20 ~= 1.148GB recommanded ~= 2*RAM ~= 2.296GB Exemple for 2GB of RAM and 128MB of cache_mem:

Re: [squid-users] SQUID port to port

2008-07-22 Thread Michael Alger
On Tue, Jul 22, 2008 at 07:01:42AM -0700, elsergio wrote: I have been suggested this http_port 80 81 #to make squid listen to the desired ports One per line. Do I have to do something like this? http_port 80 acl all src 0.0.0.0/0.0.0.0 always_direct allow all cache_peer ip1

[squid-users] Squid + Kerberos Auth

2008-07-22 Thread Alexandre augusto
Hi all, about environment: Squid version = squid-3.0.STABLE8 Active Directory Windows 2003 Linux Redhat EL 5 I´m trying using kerberos auth with squid_kerb_auth looking for http://klaubert.wordpress.com/2008/01/09/squid-kerberos-authentication-and-ldap-authorization-in-active-directory/

[squid-users] linux+tproxy+squid

2008-07-22 Thread Abdock
Hello Squid users, I want to test squid with tproxy, I have centos 5, but am lost on kernel patching on tproxy. Can somebody help or point me to a site which has a little how to so i can deploy squid + tproxy + transparent. Many thanks.

Re: [squid-users] Problem with increasing memory utilization

2008-07-22 Thread Adrian Chadd
Try squid-2.7; a bunch of delay pools related fixes went into there which should be fix the reconfigure case? Adrian 2008/7/22 Leandro Oliveira da Silva [EMAIL PROTECTED]: Hello all! I have a strange problem with squid. I use squid not for caching, but for control with squidGuard, manage

Re: [squid-users] storeUpdateCopy: Aborted errors in 2.7

2008-07-22 Thread Adrian Chadd
I think its fine to ignore for now. Henrik will have more details. Basically, someone aborted the connection whilst the store was being updated with the relevant reply, and the update itself was aborted. I -think- its harmless. Adrian 2008/7/22 Chris Woodfield [EMAIL PROTECTED]: Hi, We're

Re: [squid-users] Problem with increasing memory utilization

2008-07-22 Thread Leandro Oliveira da Silva
Hi! I'll give a try, but something that deserve mention is that in my office I have a linux server with squid 3.0 and this is not happening. Besides the machine itself, the other difference is the mandriva version (here I have 2006.0 and in my clients I have 2008.0). I'm downloading the 2008.1

Re: [squid-users] Problem with increasing memory utilization

2008-07-22 Thread Adrian Chadd
Well its certainly possible that a regression was introduced between versions. Just file a bug report in bugzilla - http://bugs.squid-cache.org/ 2008/7/23 Leandro Oliveira da Silva [EMAIL PROTECTED]: Hi! I'll give a try, but something that deserve mention is that in my office I have a linux

Re: [squid-users] how to cache POST request response ?

2008-07-22 Thread Henrik Nordstrom
Please keep discussions on the mailinglist. On tis, 2008-07-22 at 14:12 +0700, johan firdianto wrote: what kind logic ? 1. Analysing how rapidshare really works.. 2. From the analysis, figure out how to properly identify downloads. 3. Add code to Squid (or maybe an ICAP server) capable of

[squid-users] SQUID CBN Stream

2008-07-22 Thread Araripe Moreira
Hi I hope one of you will be able to help! Somebody can listen CNN Radio using Squid? I can't believe I'm the only one... If anyone can listen CNN Radio * without bypass squid * , please send me your squid.conf!! I think a lot people are using squid and can listen radios or streaming audio (may

Re: [squid-users] Newbie question on Squid Reverse Proxy configuration

2008-07-22 Thread aspasia
Thank you so much Michael for the response ... more response inline: You don't do transparent interception in a reverse proxy setup, you just make the reverse proxy the public face of your web site, and it fetches content from the appropriate backend / origin servers. Have you seen

[squid-users] Squid 3HEAD w/ tproxy : invalid headers client error

2008-07-22 Thread Ritter, Nicholas
I am not sure if it site or application centric, but I have some HTTP driven applications failing due to an error the the HTTP server sent invalid reply headers. I am running squid-3.HEAD-20080721 and I have not changed any of the settings in squid.conf with the exception of those mentioned in

Re: [squid-users] Squid Maxing Out - Help required

2008-07-22 Thread Henrik Nordstrom
On tis, 2008-07-22 at 15:44 +0800, Thompson, Scott (WA) wrote: Hi all We are seeing some weird behaviour with our Squid server Thru out the day Internet Explorer will come back with Internet Explorer cannot display the page No errors from Squid as such, it appears that IE simply cannot

[squid-users] Who is first?

2008-07-22 Thread Luis Daniel Lucio Quiroz
Hi Squids, I have a squid that is child of other. The child has in its configuration a url_rewriteprogram redirector and a parent squid. The question is, what is the correct flow: squid-child-squid-parent-squid-child-redirector-action or

Re: [squid-users] DNS configuration

2008-07-22 Thread Henrik Nordstrom
On tis, 2008-07-22 at 01:53 -0700, elsergio wrote: Hi Henrik, - http_port 80 accel vhost# accel vhost? what is used for? accel vhost means reverse proxy with host/domain based support using the Host header to figure out the requested sitename. - allways_direct allow all #do I need

Re: [squid-users] Cache URL with ?

2008-07-22 Thread Henrik Nordstrom
On tis, 2008-07-22 at 23:37 +1200, Amos Jeffries wrote: Only one issue has come up: under sibling relationships, squids method of relaying requests to sibling is slightly bad and may break the proper expected behavior. All other setups should be fine. Also seen in parent relations. Regards

Re: [squid-users] storeUpdateCopy: Aborted errors in 2.7

2008-07-22 Thread Henrik Nordstrom
On tis, 2008-07-22 at 09:47 -0400, Chris Woodfield wrote: Getting to my point, we've been noticing the following errors on syslog on the 2.7 instance. We've never seen this before 2.7, so I was wondering what it means (I'm guessing it reports either a failure to save a cacheable object

Re: [squid-users] Squid 3HEAD w/ tproxy : invalid headers client error

2008-07-22 Thread Henrik Nordstrom
On tis, 2008-07-22 at 14:27 -0500, Ritter, Nicholas wrote: I am not sure if it site or application centric, but I have some HTTP driven applications failing due to an error the the HTTP server sent invalid reply headers. So far the only application giving this error is apt-get on ubuntu. I

Re: [squid-users] Newbie question on Squid Reverse Proxy configuration

2008-07-22 Thread Henrik Nordstrom
On tis, 2008-07-22 at 12:26 -0700, aspasia wrote: The above paper though shows how to configure based upon Squid 2.5; the examples shown display arguments that do not exist any longer for Squid 2.6. Would you or anyone happen to know a link or how to configured for Squid 2.6?

Re: [squid-users] problem with squid 3.0 and filedescriptors

2008-07-22 Thread Leonardo Rodrigues Magalhães
Amos Jeffries escreveu: Leonardo Rodrigues Magalhães wrote: Hello Guys, This is the third time i have 'Your cache is running out of filedescriptors' problem with squid 3.0. I have never had similar problem with 2.5 versions which i was used to use (skipped from 2.5 directly to 3.0)

[squid-users] How to disable TCP_NEGATIVE_HIT?

2008-07-22 Thread xufeng
Hi Squid Users, I use squid to accelerate my website, for example www.example.com. In the access.log, I found such 222.xx.yy.zz - - [22/Jul/2008:15:02:26 +0800] GET http://www.example.com/ HTTP/1.1 503 858 - Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; .NET CLR 1.1.4322)

RE: [squid-users] Squid Maxing Out - Help required

2008-07-22 Thread Thompson, Scott (WA)
Thx Henrik Nothing I can see that is obvious tail messages Jul 23 08:15:26 pelpx01 squid[29720]: Squid Parent: child process 12961 started Jul 23 08:34:01 pelpx01 squid[29720]: Squid Parent: child process 12961 exited due to signal 6 Jul 23 08:34:04 pelpx01 squid[29720]: Squid Parent: child

Re: [squid-users] problem with squid 3.0 and filedescriptors

2008-07-22 Thread Amos Jeffries
Amos Jeffries escreveu: Leonardo Rodrigues Magalhães wrote: Hello Guys, This is the third time i have 'Your cache is running out of filedescriptors' problem with squid 3.0. I have never had similar problem with 2.5 versions which i was used to use (skipped from 2.5 directly to

RE: [squid-users] Squid Maxing Out - Help required

2008-07-22 Thread Thompson, Scott (WA)
Further to the Page Cannot be Displayed errors I am getting From the cache.log 2008/07/23 10:47:50| The request POST http://webmail.controlpanel.com.au/ is ALLOWED, because it matched 'PowerProxy' 2008/07/23 10:47:50| The reply for POST http://webmail.controlpanel.com.au/ is ALLOWED, because it

Re: [squid-users] SQUID port to port

2008-07-22 Thread Amos Jeffries
Hi all, I have been suggested this http_port 80 81 #to make squid listen to the desired ports One per line. Do I have to do something like this? http_port 80 acl all src 0.0.0.0/0.0.0.0 always_direct allow all cache_peer ip1 parent 8080 0 no-query origin_server name=DS1

[squid-users] Squid connections

2008-07-22 Thread Marcos Dutra
Hi people I have a server with redhat enterprise 5 Xeon 3.06 4 processors, 8Gb RAM and 160GB SAS disk, well I ran the command in linux netstat -an |grep 3128| wc and when arrives in 2500 connections, it is very slow. How can I improve performance, I changed from diskd to aufs and I don't get any

RE: [squid-users] Squid Maxing Out - Help required

2008-07-22 Thread Amos Jeffries
Further to the Page Cannot be Displayed errors I am getting From the cache.log 2008/07/23 10:47:50| The request POST http://webmail.controlpanel.com.au/ is ALLOWED, because it matched 'PowerProxy' 2008/07/23 10:47:50| The reply for POST http://webmail.controlpanel.com.au/ is ALLOWED,

Re: [squid-users] How to disable TCP_NEGATIVE_HIT?

2008-07-22 Thread Amos Jeffries
Hi Squid Users, I use squid to accelerate my website, for example www.example.com. In the access.log, I found such 222.xx.yy.zz - - [22/Jul/2008:15:02:26 +0800] GET http://www.example.com/ HTTP/1.1 503 858 - Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; .NET CLR 1.1.4322)

Re: [squid-users] linux+tproxy+squid

2008-07-22 Thread bijayant kumar
Hi, I have implemented tproxy on gentoo system following this great howto http://fuzzylab00net.blog.dada.net/post/413913/Squid-2.6-+-tproxy-+-bridge-+-gentoo.html May be it can help you also. Bijayant Kumar --- On Tue, 22/7/08, Abdock [EMAIL PROTECTED] wrote: From: Abdock [EMAIL PROTECTED]

Re: [squid-users] Memory usage...

2008-07-22 Thread Amos Jeffries
John Doe wrote: Hi, I saw this formula; is it correct? RAM needed ~= 10MB x cache_dir GB + cache_mem + 20MB recommanded ~= 2*RAM Exemple for 100GB of disk cache and 128MB of cache_mem: RAM ~= 10*100+128+20 ~= 1.148GB recommanded ~= 2*RAM ~= 2.296GB Exemple for 2GB of RAM and 128MB

Re: [squid-users] Squid connections

2008-07-22 Thread Amos Jeffries
Marcos Dutra wrote: Hi people I have a server with redhat enterprise 5 Xeon 3.06 4 processors, 8Gb RAM and 160GB SAS disk, well I ran the command in linux netstat -an |grep 3128| wc and when arrives in 2500 connections, it is very slow. How can I improve performance, I changed from diskd to