[squid-users] Reverse Proxy Fine tuning

Hello All, I have a reverse proxy in place here for some time now and everything is running smoothly. I havent had a single problem in almost three years over various versions. At present I am using 2.7Stable-3 that comes with Ubuntu 8.10. I use a few acls to fine tune access to the proxy. Spec

Re: [squid-users] CARP cache_peer hashing based on order found in config?

Nevermind! no-digest was the culprit, sending CD_PARENT_HIT requests and mussing up the Actual field. :) -j - Original Message > From: john allspaw > To: squid-users@squid-cache.org > Sent: Friday, December 19, 2008 11:24:04 AM > Subject: [squid-users] CARP cache_peer hashing based

[squid-users] Build Squid for another machine

I am building Squid on a CentOS machine, which has all the required stuff for Squid build. Now, I want to move Squid on another CentOS machine, which does not have GCC at all. Here is what I did: I basically copied all the stuff under /usr/local/squid/* to my target machine. It works so far. My qu

[squid-users] Auth via radius / active directory

Aloha, I recently downloaded Squid 3 stable 10 and installed it to my CentOS 5.2 VM. It's running great already, so now I'm looking to auth users either directly via A.D. or via RADIUS. My google-fu turns up a ton of examples for Squid 2.6, which don't seem to work for Squid 3. Does anyon

[squid-users] CARP cache_peer hashing based on order found in config?

We've got squid accelerator setups, and trying to get away from using layer7 balancers for URL hashing, so we thought we'd use CARP. The basics are: a pool of 18 servers, balanced round-robin. We have CARP squid instances on port 80, a caching squid on 81. Our carp cache_peer lines look like: c

[squid-users] Filter using request and response

Hi I need to write a script and integrate it into Squid. This script must have access to the IP address of the client, the requested URL, the method, some request headers and the content-type of the response. According to this, if the user has made a number of this tye of requests (a counter store

Re: [squid-users] WCCP load balancing and TPROXY fully transparent interception

Richard Wall wrote: WCCPv2 can support this feature by Packet Return Method. (See http://www.cisco.com/en/US/docs/ios/12_0t/12_0t3/feature/guide/wccp.html, search "Web Cache Packet Return". Also mentioned in your url: http://bazaar.launchpad.net/~squid3/squid/3.1/annotate/9363?file_id=draftwilson

[squid-users] WCCP v2 connection dropped intermittently: HERE_I_AM not received by router

Hello, Anyone ever had problems with Cisco and Squid intermittently dropping their WCCP link. We have a customer with a Cisco 7602 VXR router linked to a Squid box (2.6 STABLE17). They have been reporting a problem where the WCCP link goes down and has to be renegotiated every hour or two. When

Re: [squid-users] WCCP load balancing and TPROXY fully transparent interception

2008/12/19 Bin Liu : >> I'm interested to know if you have managed to get this working >> reliably for your ISP environment? > Not yet. We are still doing some test in our own environment. Bin, Thanks for your reply. We're working on a Squid configuration for ISP customers and it would be really

[squid-users] No TCP_HITS in Squid 3.1.0.3

Hi I compiled, configured and started squid version 3.1.0.3. Then I tried to get one static html page. I can only see repeated TCP_MISS in squid access.log for the same URL as below. 1229680604.890 21407 192.168.9.31 TCP_MISS/200 377 GET http://192.168.10.32/new.htm - DIRECT/192.168.10.32 text/

[squid-users] how to blocking P2P

anyone know how to block /limit P2P connection -- -=-=-=-= Personal Blog http://my.blog.or.id ( lagi belajar ) Hot News !!! : Pengin punya Layanan SMS PREMIUM ? Contact me ASAP. dapatkan Share revenue MAXIMAL tanpa syarat traffic...

[squid-users] multiple auth_params?

Hi Was trying to see if squid was capable of using different external authentication helpers based on acl's? i.e. if it comes from src ip 192.168.10.0/32 use an ldap lookup, if it comes from 192.168.11.0/32 use ncsa? I came across this message (2005) http://www.mail-archive.com/squid-users@squid-

[squid-users] Native WIN32 NTLM and Basic Helpers must be used without the -A & -D switches.

Having noticed that squid is now shipping with an mswin_check_ad_group file (I don't recall this in 2.6) I'm working on moving our 2.7 config over to it. In the readme it says: "- Native WIN32 NTLM and Basic Helpers must be used without the -A & -D switches." Our mswin_check_lm_group line used -D

[squid-users] Group and NTLM service times

Are there any guidelines for good and bad average service times for external_acl and ntlmauthenticator? Currently we average 120ms for the former and about 10ms for the latter and I don't know whether I should be interpreting that as good or bad. Paul Cocker TNT Post is the trading name for TNT