Re: [squid-users] HDD Configuration Recommendations

2008-09-26 Thread Matus UHLAR - fantomas
> >Hmm, is squid still unable to work if one of cache dirs has problems? > >sounds like calling for bug report ;) On 26.09.08 17:52, Amos Jeffries wrote: > It's already reported long ago. Made it onto the worklist for Squid-3 > recently. Should be done Someday Soon Now (tm) :-). If you mean bug

Re: [squid-users] Re: cannot browse website

2008-09-26 Thread Amos Jeffries
Upgrade your Squid. 2.5 is rather broken with interception and acceleration modes. After upgrading to a later squid. Remove the NAT interception hack. These two How-To's tell you everything you need to get started. For reverse-proxy (accelarating) of websites using Squid: http://wiki.squid

Re: [squid-users] Re: cannot browse website

2008-09-26 Thread ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░
this is my squid using apt-get install squid from latest ubuntu [EMAIL PROTECTED]:/home/mirza# squid -v Squid Cache: Version 2.6.STABLE18 configure options: '--prefix=/usr' '--exec_prefix=/usr' '--bindir=/usr/sbin' '--sbindir=/usr/sbin' '--libexecdir=/usr/lib/squid' '--sysconfdir=/etc/squid' '--

Re: [squid-users] HDD Configuration Recommendations

2008-09-26 Thread F-D. Cami
On Fri, 26 Sep 2008 17:52:13 +1200 Amos Jeffries <[EMAIL PROTECTED]> wrote: > Matus UHLAR - fantomas wrote: > >> John Doe ha scritto: > >>> two disks = RAID 0 or 1 > >>> > >>> RAID 1 is mirroring: > >>> - Pros: safe (goes on even with a dead HD), fast reads (from both disks) > >>> - Cons: you only

[squid-users] Bad Method

2008-09-26 Thread Dean, Barry
I am using Squid 3 as a transparent proxy on a NAT server to limit access to the Intermahweb. It's part of a Network Access Control solution, pre-registered users are stuck in a private VLAN. Squid is seeing a lot of "Bad Request Methods", that look like: squid[]: [ID 702911 daemon.notice] cli

[squid-users] How can i remove an entry from the current cache using squid client?

2008-09-26 Thread Paulo Lopes
I've installed squid and cached 2 requests, and I can see then using: [EMAIL PROTECTED] squid]# /usr/sbin/squidclient -p 80 cache_object://localhost/objects HTTP/1.0 200 OK Server: squid/2.7.STABLE4 Date: Fri, 26 Sep 2008 08:35:34 GMT Content-Type: text/plain Expires: Fri, 26 Sep 2008 08:35:34 GMT

Re: [squid-users] Re: cannot browse website

2008-09-26 Thread Henrik Nordstrom
On fre, 2008-09-26 at 10:33 +0700, ░▒▓ ɹɐzǝupɐɥʞ ɐzɹıɯ ▓▒░ wrote: > While trying to retrieve the URL: http://riset.gpi-g.com/ > > The following error was encountered: > > * Connection to 202.169.51.119 Failed > > The system returned: > > (111) Connection refused Which means networking

[squid-users] Share authenticated sessions between two Squid severs

2008-09-26 Thread Pau Villarragut
Hi, I want to build a cluster with two nodes of Squid Server. I have enable authentication to an Active Directory database via ntlm_auth. It's possible to share the user authenticated sessions between nodes?? Thanks, .-Pau

Re: [squid-users] How to disable cache and verify, also performance issues

2008-09-26 Thread Leonardo Rodrigues Magalhães
Nick Duda escreveu: Ok, I've done this but how can I verify that the cache is not active. store.log is showing lots of activity, all GET requests. disable store.log !!! In almost cases, it's useless the machine that is running squid is running something else ??? maybe other s

[squid-users] Hardware placement

2008-09-26 Thread Johnson, S
I've been digging around for an answer on this and am trying to figure out the best layout for attempting a WCCP2/Squid transparent proxy. I've done several installs of Cisco WCCP2 using Bluecoat's proxy, but this would be a much cheaper method. The hardware layout of Bluecoat was like the fol

Re: [squid-users] Bad Method

2008-09-26 Thread Amos Jeffries
Dean, Barry wrote: I am using Squid 3 as a transparent proxy on a NAT server to limit access to the Intermahweb. It's part of a Network Access Control solution, pre-registered users are stuck in a private VLAN. Squid is seeing a lot of "Bad Request Methods", that look like: squid[]: [ID 7029

Re: [squid-users] Re: cannot browse website

2008-09-26 Thread Amos Jeffries
??? ??z?up??? ?z??? ??? wrote: this is my squid using apt-get install squid from latest ubuntu [EMAIL PROTECTED]:/home/mirza# squid -v Squid Cache: Version 2.6.STABLE18 Okay, your config file was full of configuration things that only work in 2.5. The wiki pages I sent are correct for your

Re: [squid-users] How to disable cache and verify, also performance issues

2008-09-26 Thread Amos Jeffries
Leonardo Rodrigues Magalhães wrote: Nick Duda escreveu: Ok, I've done this but how can I verify that the cache is not active. If the only cache_dir entry in squid.conf says "cache_dir null /tmp" squid can't save stuff to disk. Then you have a choice, of whether to allow in-memory caching

Re: [squid-users] HDD Configuration Recommendations

2008-09-26 Thread Amos Jeffries
Matus UHLAR - fantomas wrote: Hmm, is squid still unable to work if one of cache dirs has problems? sounds like calling for bug report ;) On 26.09.08 17:52, Amos Jeffries wrote: It's already reported long ago. Made it onto the worklist for Squid-3 recently. Should be done Someday Soon Now (tm)

Re: [squid-users] How can i remove an entry from the current cache using squid client?

2008-09-26 Thread Amos Jeffries
Paulo Lopes wrote: I've installed squid and cached 2 requests, and I can see then using: [EMAIL PROTECTED] squid]# /usr/sbin/squidclient -p 80 cache_object://localhost/objects HTTP/1.0 200 OK Server: squid/2.7.STABLE4 Date: Fri, 26 Sep 2008 08:35:34 GMT Content-Type: text/plain Expires: Fri, 26

Re: [squid-users] Share authenticated sessions between two Squid severs

2008-09-26 Thread Amos Jeffries
Pau Villarragut wrote: Hi, I want to build a cluster with two nodes of Squid Server. I have enable authentication to an Active Directory database via ntlm_auth. It's possible to share the user authenticated sessions between nodes?? Not that I ever heard of. HTTP contains nothing such as a

Re: [squid-users] Hardware placement

2008-09-26 Thread Amos Jeffries
Johnson, S wrote: I've been digging around for an answer on this and am trying to figure out the best layout for attempting a WCCP2/Squid transparent proxy. I've done several installs of Cisco WCCP2 using Bluecoat's proxy, but this would be a much cheaper method. The hardware layout of Blueco

[squid-users] Recommendations for URL filtering

2008-09-26 Thread Johnson, S
Anyone have recommendations for a URL filtering list through squid? Regards, Scott

Re: [squid-users] latency issues squid2.7 WCCP

2008-09-26 Thread Adrian Chadd
uhm, "running without cache" would mean "don't use any disk storage" I'd suggest trying to run squid with no aufs cache_dir lines, just the NULL line (cache_dir null /). This rules out the disk storage as a potential candidate for failure. Adrian 2008/9/25 Ryan Goddard <[EMAIL PROTECTED]>: > >

Re: [squid-users] Object becomes STALE: refresh_pattern min and max

2008-09-26 Thread Adrian Chadd
Well, what are the complete request/reply headers for each of the requests you're testing with? Adrian 2008/9/25 BUI18 <[EMAIL PROTECTED]>: > My Squid Version is 2.6/STABLE14 > > Here's my refresh_pattern from squid.conf > > #Suggested default: > refresh_pattern ^ftp: 144020% 1

Re: [squid-users] HDD Configuration Recommendations

2008-09-26 Thread Alex Rousskov
On Fri, 2008-09-26 at 17:52 +1200, Amos Jeffries wrote: > no-RAID + multi cache_dir - Twice the cache space. At cost of Squid goes > down with either HDD. but see below > > Hmm, is squid still unable to work if one of cache dirs has problems? > > sounds like calling for bug report ;) > > > >

RE: [squid-users] Reverse proxy with LDAP authentication

2008-09-26 Thread Andrew Struiksma
> > Here is the main part of my config: > > > > http_port 80 defaultsite=site.company.org https_port 443 > > cert=/etc/ssl/certs/company.org.cert \ > > key=/etc/ssl/certs/company.org.key \ > > defaultsite=site.company.org > > > > cache_peer site.company.org parent 443 0 no-query \ >

[squid-users] Re: latency issues squid2.7 WCCP

2008-09-26 Thread Ryan Thoryk
The latency should be your disk caches, and I'm also assuming that the sheer size of them could be contributing to it. Also remember that RAID-0 (or similar) won't help improve performance (since it's access times that you need, not throughput). We have a much smaller load here (one machine peaks

[squid-users] Cannot Access Site w/ Squid 2.6 Stable 3 Transparent Mode

2008-09-26 Thread Brodsky, Jared S.
Hi all, I am running Squid 2.6 Stable 3 in Transparent mode and none of my users can access msnbc.com from behind the our cache. The cache box itself has no problem reaching the site via wget, lynx, or telnet. The strange part is that if you have a direct url to one of their CSS files it loads f

[squid-users] multiple web ports squid not working?

2008-09-26 Thread jason bronson
I've got an issue where I have multiple ports one webserver is on port 80 and one is on 21080 anyhow 21080 works fine port 80 from the outside world doesnt work at all i get a blank index.php file returned from the browser to download? So i run tcpdump on port 80 and i see connections coming in bu

[squid-users] Expires: vs. Cache-Control: max-age

2008-09-26 Thread Chris Woodfield
Hi, Can someone confirm whether Expires: or Cache-control: max-age parameters take precedence when both are present in an object's headers? My assumption would be Cache-control: max-age would be preferred, but we're seeing some behavior that suggests otherwise. Specifically, we're seeing

Re: [squid-users] Reverse proxy with LDAP authentication

2008-09-26 Thread Amos Jeffries
Andrew Struiksma wrote: Here is the main part of my config: http_port 80 defaultsite=site.company.org https_port 443 cert=/etc/ssl/certs/company.org.cert \ key=/etc/ssl/certs/company.org.key \ defaultsite=site.company.org cache_peer site.company.org parent 443 0 no-query \

RE: [squid-users] Expires: vs. Cache-Control: max-age

2008-09-26 Thread Markus Karg
According to HTTP/1.1 specification, the precedence is not determined by the keyword, but by the value: The shorter age is to be taken. Regards Markus > -Original Message- > From: Chris Woodfield [mailto:[EMAIL PROTECTED] > Sent: Freitag, 26. September 2008 23:46 > To: Squid Users > Subje