[squid-users] reverse proxy - accelerate sites caching static content

Hi all, first of all i'm italian so: sorry for my bad english I've installed squid on a Centos VPS, i've configured it and it's working in reverse proxy mode ( i can load the site entering the VPS ip in my browser) The problem: the sites still load all content from the originserver, without boost

[squid-users] Re: Dual auth based on IP source

Hi, I have my own auth_param basic program script to authenticate my squid users. My perl script is working fine. I do an autentication based on login/password and a query to an oracle database. I have a squid server for all mi organization. All the users are browsing the web through this server.

[squid-users] max_user_ip directive on balanced proxy with ntlm authentication in AD2003

Hi, I’d like to know if there is any solution to implement a max_user_ip directive for avoiding user account sharing within a squid farm balanced by an hw appliance. The squid servers are configured with ntlm authentication in Active Directory 2003. Thanks in advance. Luca Forti System Ne

Re: [squid-users] Tuning in compilation

Ralf, Ok, but I wanna know compilation options that can improve perfomance of general application (Normal Proxy cache for more than 200 users). Thanks Rafael Gomes Consultor em TI Embaixador Fedora LPIC-1 (71) 8709-1289 On Thu, Jan 8, 2009 at 1:52 AM, Ralf Peng wrote: > > 2009/1/8 Rafael Gome

[squid-users] Antwort: Re: [squid-users] Problems to access specific site

Thank you for trying!! Very curios for me I have no idea what could produce this problem? Regards, David No issues accessing the site through Squid 3.0 3.0.STABLE10 on CentOS 5.2 or via IWSVA 3.1 On Thu, Jan 8, 2009 at 2:42 AM, David Walcher wrote: > > Hello and Happy new Year to all! > > Fo

Re: [squid-users] Tuning in compilation

Rafael Gomes wrote: Guys, I am making a document with better options for a good one Squid compilation, with better option to improve perfomance. So I searched in many websites and found following options. Can you please tell me if there is more good options? The enviroment is a server for more

Re: [squid-users] max_user_ip directive on balanced proxy with ntlm authentication in AD2003

Luca Forti wrote: Hi, I’d like to know if there is any solution to implement a max_user_ip directive for avoiding user account sharing within a squid farm balanced by an hw appliance. The squid servers are configured with ntlm authentication in Active Directory 2003. Thanks in advance. htt

Re: [squid-users] Tuning in compilation

2009/1/8 Rafael Gomes : > Ralf, > > Ok, but I wanna know compilation options that can improve perfomance > of general application (Normal Proxy cache for more than 200 users). > > Thanks Nothing about compling options AFAIK. for better performance see these: http://wiki.squid-cache.org/KnowledgeB

Re: [squid-users] reverse proxy - accelerate sites caching static content

Wj wrote: Hi all, first of all i'm italian so: sorry for my bad english I've installed squid on a Centos VPS, i've configured it and it's working in reverse proxy mode ( i can load the site entering the VPS ip in my browser) The problem: the sites still load all content from the originserver, w

Re: [squid-users] OWA accelerator authentication weirdness

Alan Lehman wrote: Running 3.0 my accelerator for OWA works fine. The browser user authentication prompt is "A user name and password are being requested by ..." The same configuration on 2.6STABLE6 or 3.1.0.3 - The browser authentication prompt is now different: "Enter user name and password

[squid-users] R: [squid-users] max_user_ip directive on balanced proxy with ntlm authentication in AD2003

Hi, thanks for your answer,but I have already implemented max_user_ip directive in every squid server and It works fine when using a single ip server address, but the problem here is making it functioning on balanced ip addresses (the virtual ones). Thanks in advance Luca Forti System Netwo

Re: [squid-users] Trying to improve the Byte Hit Ratio, any tips ?

> cache_mem 250 MB maximum_object_size_in_memory 50 KB memory, memory, memory. The more you can throw at the problem the more objects can be kept and served while hot. Squid with 64-bit can easily handle many GBs of memory cache. (at cost of slow shutdown when it saves the hottest to di

Re: [squid-users] Tuning in compilation

Amos, Thanks for your answer, but I have some questions. Can you help me? Let´s go > A waste of resources doing any of these in performance-critical situations. > >> --enable-useragent-log \ >> --enable-referer-log \ >> --enable-arp-acl \ Normally we don't need handle these headers? > This on

[squid-users] Antwort: [squid-users] Antwort: Re: [squid-users] Problems to access specific site

OK I found it!! I set the option forwarded_for off Now it works fine! Thx to all! Regards, David David Walcher

[squid-users] max_user_ip directive on balanced proxy with ntlm authentication in AD2003

Hi to all,I’d like to know if there is any solution to implement a max_user_ip directive for avoiding user account sharing within a squid farm balanced by an hw appliance. The squid servers are configured with ntlm authentication in Active Directory 2003. I have already implemented max_user_ip dir

RE: [squid-users] How do I see who's connected to my SQUID server?

Hmm, when I do this command all I get is a brief statistics of the filter; no IP addresses show... Scott -Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Tuesday, January 06, 2009 11:47 PM To: Rick Chisholm Cc: Johnson, S; squid-users@squid-cache.org Subject: Re

Re: [squid-users] Trying to improve the Byte Hit Ratio, any tips ?

On Thu, Jan 8, 2009 at 1:26 PM, Vianney Lejeune wrote: >>> >> > cache_mem 250 MB >>> >>> maximum_object_size_in_memory 50 KB >> >> memory, memory, memory. The more you can throw at the problem the more >> objects can be kept and served while hot. Squid with 64-bit can easily >> handle many GBs of

Re: [squid-users] transparent proxy not working!! any advice?

Nicholas ports are open now, however I'm still not seeing traffic on the tunnel (tcpdump -i gre0). Also I'm not certain if the ip_gre module is enough. I'm seeing many configurations using ip_wccp, but I do not have that one on my centos What is the proper way to verify that tunnel is working

Re: [squid-users] reverse proxy - accelerate sites caching static content

> Each page is supposed to be sent with an expiry or cache-control and > Last-modified headers from the web server. To set expiry times for proxy > different to web browsers use the s-* options meaning 'server' for the proxy > times. I'm sorry but i don't understand what i have to do in squid.conf

Re: [squid-users] Antwort: [squid-users] Antwort: Re: [squid-users] Problems to access specific site

On 08.01.09 15:04, David Walcher wrote: > forwarded_for off It means that the server/application is broken. You should complain to them. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adr

Re: [squid-users] disable-ident-lookups

On 07.01.09 22:05, Rafael Gomes wrote: > This option disable what type of ident? the RFC1413 ident service. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolve

[squid-users] Fwd: Webapp problems with squid 2.7.STABLE3

Hi all, I'm running Squid 2.7.STABLE3. I just moved off of 2.6.STABLE12. We run a USPS webapp called Shipping Assistant. With 2.6, this app worked fine. During my upgrade, I introduced no config changes. With 2.7, this app is broken. Comparing a tcpdump of the app talking direct and then the app

RE: [squid-users] transparent proxy not working!! any advice?

ip_gre is enough...the IP_WCCP module was used prior to gre support in the kernel. CentOS 5 is new enough that that it uses a kernel that is gre capable. I have found that there are routing problems with some IOS versions because the squid cache may be sitting on a IP subnet that is not directl

Re: [squid-users] SquidGuard Replacement

Thomas Raef schrieb: How do you figure that ufdb Guard is "sub-optimal"? Yes you can use shalla lists with this. I suggest you contact the owner and discuss your needs with him. He reads this list so I think he'll be available. Thomas J. Raef www.ebasedsecurity.com

Re: [squid-users] Possible regressions in dstdom_regex based matching

Sameer Naik wrote: Hi, I have created a filter file named block.lst with the following contents /youtube. /orkut. /songs.pk /senduit. I have created an acl based on the domain regex for the above filter by specifying the following rule in the squid.conf acl list_blocked dstdom_regex "/squi

Re: [squid-users] cache hit 100%

UK SquidUser (AXA-TECH-UK) wrote: Hi... we are running squid 2.6 stable 17 that have been built within the last 6 months. The problem we are experiencing is that one of our servers has hit 100% on the proxycache partition. It is configured in its own filesystem, it shares with nothing... it has

Re: [squid-users] Squid failover between DIRECT connect and PARENT PROXY

Sébastien WENSKE wrote: Hi all, I've set a squid server to use direct connections by default and to use a parent proxy if direct is unavailable: - http_port 8080 acl manager proto cac

RE: [squid-users] OWA accelerator authentication weirdness

> The order in which our auth_param lines are configured can alter the > first authentication method tried. You will need to look at the > debugging trace in cache.log to see which is generating which question > > Amos Only basic is enabled: auth_param basic children 5 auth_param basic realm Sq

Re: [squid-users] HTTP Header

Mehmet ÇELiK wrote: Hi all, I am using Squid as Reverse Proxy for my Web Servers. Client IP Address is directing to Web Servers with X_FORWARDED_FOR. But, I want to write Client IP Address to Remote_Address.. I want to this, because.. I am using vBulletin Forum and vBulletin are taking Reve

Re: [squid-users] reverse proxy - accelerate sites caching static content

Wj wrote: Each page is supposed to be sent with an expiry or cache-control and Last-modified headers from the web server. To set expiry times for proxy different to web browsers use the s-* options meaning 'server' for the proxy times. I'm sorry but i don't understand what i have to do in

Re: [squid-users] Re: Dual auth based on IP source

David Rodríguez Fernández wrote: Hi, I have my own auth_param basic program script to authenticate my squid users. My perl script is working fine. I do an autentication based on login/password and a query to an oracle database. I have a squid server for all mi organization. All the users are br

Re: [squid-users] max_user_ip directive on balanced proxy with ntlm authentication in AD2003

lukefo wrote: Hi to all,I’d like to know if there is any solution to implement a max_user_ip directive for avoiding user account sharing within a squid farm balanced by an hw appliance. The squid servers are configured with ntlm authentication in Active Directory 2003. I have already implemented

Re: [squid-users] Fwd: Webapp problems with squid 2.7.STABLE3

Chris Nighswonger wrote: Hi all, I'm running Squid 2.7.STABLE3. I just moved off of 2.6.STABLE12. We run a USPS webapp called Shipping Assistant. With 2.6, this app worked fine. During my upgrade, I introduced no config changes. With 2.7, this app is broken. Comparing a tcpdump of the app talk

Re: [squid-users] Tuning in compilation

Rafael Gomes wrote: Amos, Thanks for your answer, but I have some questions. Can you help me? Let´s go A waste of resources doing any of these in performance-critical situations. --enable-useragent-log \ --enable-referer-log \ --enable-arp-acl \ Normally we don't need handle these headers

Re: [squid-users] OWA accelerator authentication weirdness

Alan Lehman wrote: The order in which our auth_param lines are configured can alter the first authentication method tried. You will need to look at the debugging trace in cache.log to see which is generating which question Amos Only basic is enabled: auth_param basic children 5 auth_param ba

Re: [squid-users] OWA accelerator authentication weirdness

Alan Lehman wrote: The order in which our auth_param lines are configured can alter the first authentication method tried. You will need to look at the debugging trace in cache.log to see which is generating which question Amos Only basic is enabled: auth_param basic children 5 auth_param ba

[squid-users] Any one can help me to start squid automatically as service ?

I have installed Squid 3.0 STABLE11 on RHEL-4 on the /usr/local/squid folder from source and enabling delay pools. It's work fine. But my problem is that I have to start it manually. So any one show me that how can squid start automatically as a service. -- Balram

Re: [squid-users] Fwd: Webapp problems with squid 2.7.STABLE3

Chris Robertson wrote: Chris Nighswonger wrote: Hi all, I'm running Squid 2.7.STABLE3. I just moved off of 2.6.STABLE12. We run a USPS webapp called Shipping Assistant. With 2.6, this app worked fine. During my upgrade, I introduced no config changes. With 2.7, this app is broken. Comparing a

Re: [squid-users] Any one can help me to start squid automatically as service ?

2009/1/9 Balram : > I have installed Squid 3.0 STABLE11 on RHEL-4 on the /usr/local/squid > folder from source and enabling delay pools. It's work fine. But my > problem is that I have to start it manually. So any one show me that > how can squid start automatically as a service. > The simple way:

[squid-users] Re: missing hostname in DynamicSslCert branch code ?

On Wed, 2009-01-07 at 10:30 -0800, David Molnar wrote: > I am trying to run > the DynamicSslCert branch squid and running into a problem. It looks > like squid is somehow losing track of the hostname in the code that > attempts to generate the SSL certificate on the fly. Thank you for trying the n

Re: [squid-users] Re: missing hostname in DynamicSslCert branch code ?

Alex Rousskov wrote: On Wed, 2009-01-07 at 10:30 -0800, David Molnar wrote: I am trying to run the DynamicSslCert branch squid and running into a problem. It looks like squid is somehow losing track of the hostname in the code that attempts to generate the SSL certificate on the fly. Thank you