Re: [squid-users] cache_peer over openvpn

2009-04-06 Thread Amos Jeffries
jonnytabpni wrote: Hi folks, I have an openvpn server which also runs squid. I wish this squid server to use a squid server running on a openvpn client as it's parent cache. It's not working. The connection to to remote openvpn client times out. Access to the openvpn client is OK everwhere e

Re: [squid-users] defaultsite=domainname?

2009-04-06 Thread Amos Jeffries
louis gonzales wrote: Dist, Squid 2.7.Stable6 I'm setting up a reverse proxy, such that the Squid system will be viewed as the "originserver" to the clients contacting it. Does the "defaultsite=" attribute get the name of the "actual web server" or the proxy server? defaultsite= is the public

Re: [squid-users] Squid 3.1.6, zph, shorewall, and tc on debian 5.0 (lenny)

2009-04-06 Thread Amos Jeffries
Jason wrote: Everyone, I have compiled squid 3.1.6 from source on amd64 Debian 5.0 with NP: please use the correct version numbering: 3.1.0.6. there will probably be a 3.1.6 at some point in the future and hopefully this problem will not apply to those users, best not to add confusion.

Re: [squid-users] Squid-tproxy patch for squid 3.0

2009-04-06 Thread Amos Jeffries
Vivek wrote: Hi All, I need squid tproxy patch for squid 3.0. I know squid 3.1 has the built-in code for tproxy support. But i need the patch file. Where can i download the patch( Not kernel patch) squid-tproxy patch?. If anybody knows give the link. The patch I and others were initiall

Re: [squid-users] Re: Want to create SQUID mesh, but force certain URLs to be retrieved by only one Proxy

2009-04-06 Thread Amos Jeffries
Pandu E Poluan wrote: The URL is allowed to be accessed by everyone, ProxyA-users, and ProxyB/C-users alike. I just want the URL to be retrieved by ProxyA, because accessing that certain URL through ProxyB/C is too damn slow (pardon the language). Rgds. Okay. Thought it might be somethin

[squid-users] Thnaks Re: [squid-users] squid and proxy.pac file query

2009-04-06 Thread Benedict simon
> Benedict simon wrote: >> Dear All, >> >> >> I am sorry if i posting it to the wrong group >> I have Centos OS 5.2 server with squid-2.6.STABLE6-5.el5_1.3 running >> perfect for quite some time >> >> we have a couple of local intranet web sites which are working with or >> without the bypass prox

[squid-users] defaultsite=domainname?

2009-04-06 Thread louis gonzales
Dist, Squid 2.7.Stable6 I'm setting up a reverse proxy, such that the Squid system will be viewed as the "originserver" to the clients contacting it. Does the "defaultsite=" attribute get the name of the "actual web server" or the proxy server? Thanks, -- Louis Gonzales BSCS EMU 2003 HP Certifi

RE: [squid-users] ...Memory-only Squid questions

2009-04-06 Thread Gregori Parker
Glad to help David, please let us know how it progresses. Dont know if you saw this in the archives: http://www.mail-archive.com/squid-users@squid-cache.org/msg19824.html but it might help guide you on your SO_FAIL issue. It might be worth moving to LRU and establishing a baseline of performa

[squid-users] Squid 3.1.6, zph, shorewall, and tc on debian 5.0 (lenny)

2009-04-06 Thread Jason
Everyone, I have compiled squid 3.1.6 from source on amd64 Debian 5.0 with zph options enabled. I don't peer with any other caches, so all peering stuff is disabled in my build. I did not compile a kernel with the zph patches, because, as I understand, that is only necessary if I want to pre

[squid-users] Squid-tproxy patch for squid 3.0

2009-04-06 Thread Vivek
Hi All, I need squid tproxy patch for squid 3.0. I know squid 3.1 has the built-in code for tproxy support. But i need the patch file. Where can i download the patch( Not kernel patch) squid-tproxy patch?. If anybody knows give the link. Regards Vivek ___

[squid-users] disable error page in squid

2009-04-06 Thread Ryan Raymond
Hi all When accessing an unreachable server or dns no found, squid has been generated an error page. How to disable this page generated by Squid? and display the original error page from browser ? Thanks Best Regards, RR

Re: [squid-users] ...Memory-only Squid questions

2009-04-06 Thread David Tosoff
Thanks Chris. I had already read both of the wiki post and the thread you directed me to before I posted this to the group. I already had compiled heap into my squid before this issue happened. I am using heap GDSF. And, I wasn't able to find "--enable-heap-replacement" as a compile option in

Re: [squid-users] squid and proxy.pac file query

2009-04-06 Thread Chris Robertson
Benedict simon wrote: Dear All, I am sorry if i posting it to the wrong group I have Centos OS 5.2 server with squid-2.6.STABLE6-5.el5_1.3 running perfect for quite some time we have a couple of local intranet web sites which are working with or without the bypass proxy server for local addres

Re: [squid-users] Can a guru verify my config?

2009-04-06 Thread Chris Robertson
Amos Jeffries wrote: Hello, I'm placing a few details you may need to be aware of inline to reply to your latest post, followed by the help you asked for in your first post. What the heck kind of reply is this and why did you send it to my email address and not post it in the forums! Sendin

Re: [squid-users] "concurrency" attribute external_acl_type

2009-04-06 Thread Chris Robertson
louis gonzales wrote: List, 1) for the "concurrency" attribute does this simply indicate how many items in a batch will be sent to the external helper? No. There is no such thing as a "batch" in HTTP. 1.1) assuming concurrency is set to "6" for example, and let's assume a user's browser

Re: [squid-users] ...Memory-only Squid questions

2009-04-06 Thread Chris Robertson
David Tosoff wrote: Hey all, haven't heard anything on this and could really use some help. :) You can disregard the HIT related questions, as once I placed this into a full scale test, it started hitting from memory wonderfully (~40% offload from the origin) Good news... The config wor

[squid-users] cache_peer over openvpn

2009-04-06 Thread jonnytabpni
Hi folks, I have an openvpn server which also runs squid. I wish this squid server to use a squid server running on a openvpn client as it's parent cache. It's not working. The connection to to remote openvpn client times out. Access to the openvpn client is OK everwhere else (e.g. ping from s

[squid-users] using squid reverse proxy to filter shot TCP requests

2009-04-06 Thread Woodward, Andrew
Hi group, I'm wondering if anyone has seen any use cases where they have set up squid to reverse-proxy for TCP connections that may not contain enough data. A simple test of the entire request size would be sufficient. The request would then be sent on if it passes the test. No caching of the re

Re: [squid-users] zero sized replay

2009-04-06 Thread Kinkie
On Mon, Apr 6, 2009 at 5:31 PM, Riccardo Castellani wrote: > I have squid 2.5 stable and I often obtain "zero sized replay" to visit > specific sistes both by I.E. and Firefox. > My squid traffic is deteted from another machine where a transparent proxy B > forwards again requests to Internet. > >

Re: [squid-users] Active - Active

2009-04-06 Thread Pieter De Wit
Hi Graham, That is correct - but since I would like to run a transparent proxy (yes - I *could* redirect "off the box") I would prefer to keep it on the boxes. They are going to be beefy boxes to say the least, so might as well use them while we can :) I spoke to the guys and they are happy

Re: [squid-users] Active - Active

2009-04-06 Thread graham
Hello Pieter, The failover requirement that you describe looks remarkably like one of the configurations commonly used by Astaro firewall devices. If you were to conceptually remove the squid function from the failover, ie in the simplest case onto another device on the private LAN, then an active-

Re: [squid-users] Fail-over config

2009-04-06 Thread rightfoot
So with your help, I now have squid running and it seems to be doing ok. I'm not yet sure what to expect in terms of speed but in quick tests so far; site 1- From 8.8 to 4.2 site 2 - From 4.6 to 4.9 site 3 - From 13.8 to 6.6 site 4 - From 2.3 to 2 site 5 - From 13.3 to 9 site 6 - From 24.

[squid-users] Squid Reverse proxy cache Storage for Vhosts

2009-04-06 Thread Prabhakar, Ramprasad (GE, Corporate, consultant)
For a squid reverse proxy cache, is there a way to set squid to use a single cache storage for all the virtual hosts it hosts ? For example, abc.domain.com, cde.domain.com, fgh.domain.com all point to the same site. Will Squid storage abc.domain.com/image.png, cde.domain.com/image.png separate

[squid-users] ...Memory-only Squid questions

2009-04-06 Thread David Tosoff
Hey all, haven't heard anything on this and could really use some help. :) You can disregard the HIT related questions, as once I placed this into a full scale test, it started hitting from memory wonderfully (~40% offload from the origin) The config works great, to a point. It fills up my mem

[squid-users] squid and proxy.pac file query

2009-04-06 Thread Benedict simon
Dear All, I am sorry if i posting it to the wrong group I have Centos OS 5.2 server with squid-2.6.STABLE6-5.el5_1.3 running perfect for quite some time we have a couple of local intranet web sites which are working with or without the bypass proxy server for local address in their browsers. no

Re: [squid-users] Re: cache-peer problem - query string requests

2009-04-06 Thread Vivek
Amos, Thanks for your reply. It is working. Regards Vivek -Original Message- From: Amos Jeffries To: Vivek Cc: squid-users@squid-cache.org; hen...@henriknordstrom.net Sent: Mon, 6 Apr 2009 5:51 pm Subject: [squid-users] Re: cache-peer problem - query string requests V

[squid-users] zero sized replay

2009-04-06 Thread Riccardo Castellani
I have squid 2.5 stable and I often obtain "zero sized replay" to visit specific sistes both by I.E. and Firefox. My squid traffic is deteted from another machine where a transparent proxy B forwards again requests to Internet. I tried to use only Squid or only proxy B and in both cases the sit

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Leslie Jensen
2009/4/6 Leslie Jensen Leslie Jensen wrote: Hello My Proxy, Squid-3.0.13 on FreeBSD 7.1-RELEASE-p4, is running fine but I can't get the folowing to work. # acl blocked_sites dstdomain .aftonbladet.se. acl blocked_sites dstdomain "/usr/local/etc/squid/dstdomain" deny_info ERR_ACCESS

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Pandu E Poluan
Or, alternatively, place "http_access allow localhost" *AFTER* "http_access deny blockedlist" That should do the trick, methinks. Rgds. [p] Bharath Raghavendran wrote: Were you testing it with a non-localhost client? The only line i can see that can affect it is "http_access allow localhost"

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Pandu E Poluan
I see that the very first http_access is this: http_access allow localnet That means all requests coming from the localnet will be allowed. Assuming you've set localnet correctly (i.e. the IP address range covers your LAN), then that rule practically allows every URL; the http_access directiv

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Bharath Raghavendran
Were you testing it with a non-localhost client? The only line i can see that can affect it is "http_access allow localhost" .. which means localhost gets access irrespective of the http_access directives that come after this one. btw, although this is not related to the problem, you have "http_ac

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Leslie Jensen
> Leslie Jensen wrote: >> Hello >> >> My Proxy, Squid-3.0.13 on FreeBSD 7.1-RELEASE-p4, is running fine but I can't get the folowing to work. >> >> # acl blocked_sites dstdomain .aftonbladet.se. >>acl blocked_sites dstdomain "/usr/local/etc/squid/dstdomain" deny_info ERR_ACCESS_DENIED blocked

Re: [squid-users] Squid Scalability

2009-04-06 Thread Amos Jeffries
Gavin McCullagh wrote: Hi, On Tue, 07 Apr 2009, Amos Jeffries wrote: Gavin McCullagh wrote: Mine too. The operating system is on linux software RAID1 partitions so I Ah, there we probably have the answer as to why there is so much iowait. I'm not convinced of that. The iowait seems to

Re: [squid-users] Re: Want to create SQUID mesh, but force certain URLs to be retrieved by only one Proxy

2009-04-06 Thread Amos Jeffries
Pandu E Poluan wrote: Anyone care to comment on my email? And another question: Is it possible to use miss_access with a dstdomain acl? Rgds. Pandu E Poluan wrote: Hi, I want to know is there a way to force a URL to be retrieved by only a certain proxy, while ensuring that meshing works

Re: [squid-users] Squid Scalability

2009-04-06 Thread Quin Guin
Hi, Here are the results for 2 of our squid servers with the highiest use. One is 2.6 and the other is 2.7 they all use AUFS with JBOD ext2, rw,notatime. I will upgrade the 2.6 to 2.7 this week so we can see the change. Version 2.7.STABLE6 Quad-Core CPU Intel(R) Xeon(R) CPU L5420 @

[squid-users] Re: Squid Scalability

2009-04-06 Thread Jan-Frode Myklebust
Version: 2.6.STABLE21 (RHEL5.3) OS: 64-bit RHEL5.3 CPU: Quad core Intel(R) Xeon(R) CPU E5430 @ 2.66GHz RAM: 12 GB HDD: 136GB on 3-disk RAID5, plus 30GB on 2-disk RAID1 Cache: 109663MB + 24190MB Users: ~4000 (settop-boxes) RPS: max 62 (we

Re: [squid-users] Squid Scalability

2009-04-06 Thread Gavin McCullagh
Hi, On Tue, 07 Apr 2009, Amos Jeffries wrote: > Gavin McCullagh wrote: >> Mine too. The operating system is on linux software RAID1 partitions so I > > Ah, there we probably have the answer as to why there is so much iowait. I'm not convinced of that. The iowait seems to grow directly as a fu

[squid-users] Re: cache-peer problem - query string requests

2009-04-06 Thread Amos Jeffries
Vivek wrote: Hi All, I am using squid 2.7 and configured Polipo server as a parent of squid.. cache_peer 172.16.1.40 parent8123 3130 no-query default I think maybe heirarchy_stoplist is set in your Squid. Be aware there are bugs when Squid sends dynamic requests to peers which h

[squid-users] Re: Want to create SQUID mesh, but force certain URLs to be retrieved by only one Proxy

2009-04-06 Thread Pandu E Poluan
Anyone care to comment on my email? And another question: Is it possible to use miss_access with a dstdomain acl? Rgds. Pandu E Poluan wrote: Hi, I want to know is there a way to force a URL to be retrieved by only a certain proxy, while ensuring that meshing works. Here's the scenario

Re: [squid-users] Squid Scalability

2009-04-06 Thread Amos Jeffries
Gavin McCullagh wrote: On Mon, 06 Apr 2009, Amos Jeffries wrote: Ah, sorry I meant CPU load as reported by Squid in %: "It can be extracted from the "general runtime information" or "info" cachemgr page. It's the value marked "CPU Usage" " I'll hold off until a peak time and check. If it'

[squid-users] cache-peer problem - query string requests

2009-04-06 Thread Vivek
Hi All, I am using squid 2.7 and configured Polipo server as a parent of squid.. cache_peer 172.16.1.40 parent8123 3130 no-query default But all the requests go via Polipo except the URLs with query ? string. How do we force the squid to send all the request to parent? __

Re: [squid-users] Squid Scalability

2009-04-06 Thread Gavin McCullagh
On Mon, 06 Apr 2009, Amos Jeffries wrote: > Ah, sorry I meant CPU load as reported by Squid in %: > > "It can be extracted from the "general runtime information" or "info" > cachemgr page. It's the value marked "CPU Usage" " I'll hold off until a peak time and check. If it's similar, "top" gen

Re: [squid-users] Squid Scalability

2009-04-06 Thread Amos Jeffries
Gavin McCullagh wrote: Hi, On Mon, 06 Apr 2009, Amos Jeffries wrote: Thank you. Added. What sort of CPU load does it run under? Very high, but the web still feels reasonably responsive in general. The load average peaked yesterday at 9 but this is since I reduced the cache size. It hit 30

Re: [squid-users] Squid Scalability

2009-04-06 Thread Gavin McCullagh
Hi, On Mon, 06 Apr 2009, Amos Jeffries wrote: > Thank you. Added. > What sort of CPU load does it run under? Very high, but the web still feels reasonably responsive in general. The load average peaked yesterday at 9 but this is since I reduced the cache size. It hit 30 last week which is when

Re: [squid-users] Re: Re: Fail-over config

2009-04-06 Thread Amos Jeffries
Heinz Diehl wrote: On 06.04.2009, Amos Jeffries wrote: Only the algorithm to access that storage changes so only a reconfigure is needed to change between these three (if squid is built with them all). ^^^ That was my conc

[squid-users] Re: Re: Fail-over config

2009-04-06 Thread Heinz Diehl
On 06.04.2009, Amos Jeffries wrote: > Only the algorithm to access that storage changes so only a reconfigure > is needed to change between these three (if squid is built with them all). ^^^ That was my concern.

Re: [squid-users] Re: Fail-over config

2009-04-06 Thread Amos Jeffries
Heinz Diehl wrote: On 06.04.2009, rightfoot wrote: cache_dir ufs /var/spool/squid 40100 16 256 ^^^ If speed matters, I personally would change this to "aufs". Please read the FAQ and manual what this change results in, you simply can't change it in your squid.conf

Re: [squid-users] Squid Scalability

2009-04-06 Thread Amos Jeffries
Gavin McCullagh wrote: Hi, On Sat, 04 Apr 2009, Amos Jeffries wrote: For now what we need are the hit/miss ratios and user numbers from Squid under peak load, and a few other details to guide comparisons. http://wiki.squid-cache.org/KnowledgeBase/Benchmarks details what we are looking for

[squid-users] Re: Fail-over config

2009-04-06 Thread Heinz Diehl
On 06.04.2009, rightfoot wrote: > cache_dir ufs /var/spool/squid 40100 16 256 ^^^ If speed matters, I personally would change this to "aufs". Please read the FAQ and manual what this change results in, you simply can't change it in your squid.conf, reboot, and