Re: [squid-users] squid vport

2009-09-29 Thread wangwen
- Original Message - From: "Amos Jeffries" To: "wangwen" Cc: Sent: Tuesday, September 29, 2009 12:51 PM Subject: Re: [squid-users] squid vport Thanks for your help! I think it should have been: "Host: 192.168.0.164:88" maybe something went wrong and caused defaultsite to be used.

Re: [squid-users] squid vport

2009-09-29 Thread wangwen
Thanks for your help! I think it should have been: "Host: 192.168.0.164:88" maybe something went wrong and caused defaultsite to be used. Henrik might know. Sorry, I made a mistake. Host is the 192.168.24.198:88. So Squid check the URL. Finds /rdims/index.jsp. ... checks the Host: header. F

Re: [squid-users] squid vport

2009-09-29 Thread Amos Jeffries
wangwen wrote: - Original Message - From: "Amos Jeffries" To: "wangwen" Cc: Sent: Tuesday, September 29, 2009 12:51 PM Subject: Re: [squid-users] squid vport Thanks for your help! I think it should have been: "Host: 192.168.0.164:88" maybe something went wrong and caused defaultsi

[squid-users] Squid2.7 build patch not working in certain parts of the hunks

2009-09-29 Thread Ragheb Rustom
Hi All, I have been regenerating the build patch file for squid2.7.STABLE7 to reflect the new Makefile.in and am you have introduced after squid.2.7-STABLE5. Most of build patch is working out fine it is failing at 2 places in the patch. 1st place errors/Makefile.in only in the Hunk section where

Re: [squid-users] not caching enough

2009-09-29 Thread tookers
Hi there, Why not make use of some of your RAM for cache_mem? It will make requests for smaller, more frequently requested files a hell of a lot quicker, and it should give you a better hit ratio. # 3GB process size limit in 32bit, so don't set higher than 1 GB for a very busy cache cache_mem 51

[squid-users] Re[squid-users] verse Proxy, sporadic TCP_MISS

2009-09-29 Thread tookers
Hello all, I'm running several Squid boxes as reverse proxies, the problem i'm seeing is when there are a high number of connections in the region of 80,000 per Squid at peak I'm getting 1,000's of TCP_MISS for the same URL hitting the back end servers, things do eventually sort themselves out. I

Re: [squid-users] Squid stops responding-LTSP and WinXP clients

2009-09-29 Thread Avinash Rao
On Fri, Sep 18, 2009 at 7:52 PM, Amos Jeffries wrote: > Avinash Rao wrote: >> >> >> On Wed, Sep 16, 2009 at 7:04 PM, Henrik Nordstrom >> mailto:hen...@henriknordstrom.net>> wrote: >> >>    ons 2009-09-16 klockan 18:02 +0530 skrev Avinash Rao: >>     > 3) how do i use truss, not found on my machine

Re: [squid-users] Squid stops responding-LTSP and WinXP clients

2009-09-29 Thread Henrik Nordstrom
tis 2009-09-29 klockan 17:09 +0530 skrev Avinash Rao: > My sincere apologies for the late reply. > Squid stops responding everyday. I had enabled debug_options ALL,9 and > the cache.log file is huge.. which part of it do you want? The information around where it stops responding. > strace gives

Re: [squid-users] Truncated requests in cache.log

2009-09-29 Thread dtinazzi
Anybody can help? The squid proxy is configured as a transparent proxy. Other errors: in access.log 1254223081.196501 94.x.x.x TCP_MISS/302 1059 GET http://profile.live.com/connect/?wa=wsignin1.0&sa=319007920 - DIRECT/64.4.24.246 text/html and the same request, in cache.log 2009/09/29 13

[squid-users] Yahoo doesn't load properly through squid

2009-09-29 Thread Avinash Rao
Dear all, I am using squid 2.6 stable18 on Ubuntu 8.04 server - 64-bit edition. I noticed a strange problem with squid recently, yahoo.com page doesn't load completely through squid proxy. In the sense that, all graphics are missing and only text is displayed. squid.conf visible_hostname server h

Re: [squid-users] Truncated requests in cache.log

2009-09-29 Thread Amos Jeffries
They are caused by bad data received from a client browser. There is nothing Squid can do about it. Either in the current dying request or appended to an earlier request and not caught at that time (rare) What squid is logging to cache.log is the start of the request. ** from the very first le

RE: [squid-users] SSL Reverse Proxy testing With Invalid Certificate, can it be done.

2009-09-29 Thread Dean Weimer
> -Original Message- > From: Chris Robertson [mailto:crobert...@gci.net] > Sent: Monday, September 28, 2009 4:16 PM > To: squid-users@squid-cache.org > Subject: Re: [squid-users] SSL Reverse Proxy testing With Invalid > Certificate, can it be done. > > Dean Weimer wrote: > > I am trying to

Re: [squid-users] squid vport

2009-09-29 Thread Michael Lenaghan
> "accel vhost defaultsite=192.168.24.198 vport=8080" means ... > > ... 'accelerate' the URL. > ... (vhost) use client-given Host: header when available. > ... (vport=) use the client-given Host: HTTP port (default 8088 if none > found). > ... (defaultsite=) use 192.168.24.198 if neither of the abo

Re: [squid-users] squid vport

2009-09-29 Thread wangwen
- Original Message - From: "Michael Lenaghan" To: "Amos Jeffries" Cc: "wangwen" ; Sent: Tuesday, September 29, 2009 9:30 PM Subject: Re: [squid-users] squid vport "accel vhost defaultsite=192.168.24.198 vport=8080" means ... ... 'accelerate' the URL. ... (vhost) use client-given

Re: [squid-users] squid.conf and Squid 2.6 vs. Squid 2.7

2009-09-29 Thread Michael Lenaghan
> Ref: > http://www.squid-cache.org/Versions/v2/2.7/changesets/12051.patch > http://bugs.squid-cache.org/show_bug.cgi?id=2192 > (comment 4 and 5 describes the options and how they work now). Thanks, passed that on. > Notes about a 3.x upgrade inline as well... > >> # Cache Peer Access >> acl all

Re: [squid-users] squid vport

2009-09-29 Thread Amos Jeffries
Michael Lenaghan wrote: "accel vhost defaultsite=192.168.24.198 vport=8080" means ... ... 'accelerate' the URL. ... (vhost) use client-given Host: header when available. ... (vport=) use the client-given Host: HTTP port (default 8088 if none found). ... (defaultsite=) use 192.168.24.198 if neith

Re: [squid-users] Squid stops responding-LTSP and WinXP clients

2009-09-29 Thread Avinash Rao
The file is too huge, the email bounced back, I am pasting few records which has different entries. 2009/09/29 16:43:02| statHistCopy: Dest=0x85baa8, Orig=0x86fd68 2009/09/29 16:43:02| statHistCopy: capacity 300 300 2009/09/29 16:43:02| statHistCopy: min 0.00 0.00 2009/09/29 16:43:02| sta

[squid-users] Squid 3.1: ICAP and Round Robin for ICAP Services

2009-09-29 Thread Silamael
Hello together, Is there any possiblity to realize a round robin scheduling for requests sent to ICAP services? Goal is to forward each HTTP request to the next available ICAP service due to load balancing issues. As far as i read the configuration manual, there is no option to to this. Can this b

[squid-users] Want accel-mode squid to pass real IP to httpd

2009-09-29 Thread Roger Cornelius
Apologies for what is probably a newbie question. I've searched the squid directives, archives of this list, the net, etc., and haven't discovered, or didn't recognize, the answer. I'm using squid 2.7.STABLE6 in accelerator mode. I used the basic accelerator config example at: http://wiki.squid

Re: [squid-users] Truncated requests in cache.log

2009-09-29 Thread dtinazzi
Hi Amos, thanks for your reply. I've found the right entries in access.log, corresponding to the error in cache.log: Tue Sep 29 13:18:01 2009501 94.84.179.2 TCP_MISS/302 1059 GET http://profile.live.com/connect/?wa=wsignin1.0&sa=319007920 - DIRECT/64.4.24.246 text/html Tue Sep 29 13:18:04 2

Re: [squid-users] Managing clusters of siblings (squid2.7)

2009-09-29 Thread Chris Hostetter
: For a bit of leverage; every time the config changes squid needs to be : reconfigured, which causes a short outage. : : I've been thinking about it, and the multiple-IPs for a cache_peer might : work when a DNS name is entered as first parameter of cache_peer. But only : the IPs detected at sta

Re: [squid-users] Managing clusters of siblings (squid2.7)

2009-09-29 Thread Chris Hostetter
: Another solution could be to use a multi-level CARP config, which incidentally : scales far better horizontally than ICP/HTCP, as it eliminates the iterative : "sideways" queries altogether by hashing URLs to parent cache_peers. In this ... : different IP or TCP port that actually does t

Re: [squid-users] not caching enough

2009-09-29 Thread ant2ne
Thanks for all of the great replies. There is lots of information to digest. I appreciate all of the suggestions. But, Before I got any of these replies, I went ahead and made modifications to my squid.conf to match an example I found on the internet here is my current running squid.conf http_po

[squid-users] Kerberos Authentication

2009-09-29 Thread Ron Richardson
Has anyone put Kerberos authentication into the MacPort of Squid? If so, would you care to share how you did it? If not, has anyone recompiled Squid with authentication, and how did you do that? Thanks, Ron

Re: [squid-users] not caching enough

2009-09-29 Thread tookers
ant2ne wrote: > > Thanks for all of the great replies. There is lots of information to > digest. I appreciate all of the suggestions. > > But, Before I got any of these replies, I went ahead and made > modifications to my squid.conf to match an example I found on the internet > here is my curre

Re: [squid-users] Want accel-mode squid to pass real IP to httpd

2009-09-29 Thread tookers
Roger Cornelius wrote: > > Apologies for what is probably a newbie question. I've searched the > squid directives, archives of this list, the net, etc., and haven't > discovered, or didn't recognize, the answer. > > I'm using squid 2.7.STABLE6 in accelerator mode. I used the basic > accelera

RE: [squid-users] Squid2.7 build patch not working in certain parts of the hunks

2009-09-29 Thread Ragheb Rustom
Hi All, Ok so I have located and solved the problem with the 2nd part of the rpm Build patch which was producing the 2nd errors on the src/Makefile.in in the email down. I still only have the 1st error which is produced when patching /errors/Makefile.in whereby I change only errordir and DEFAULT_E

Re: [squid-users] Managing clusters of siblings (squid2.7)

2009-09-29 Thread Chris Hostetter
: > What would be really nice is a command line option and a bit of code : > in the cache peer setup that recognizes own IP and ignores the entry, : > to make this problem just all go away... That would be awesome, but if i'm understanding you correctly it would only address the "talking to myse

Re: [squid-users] not caching enough

2009-09-29 Thread ant2ne
THANKS!!! With those changes I'm looking at... http_port 3128 no_cache deny QUERY cache_mem 512 MB maximum_object_size_in_memory 2048 KB maximum_object_size 1 GB cache_dir ufs /cache 50 256 256 redirect_rewrites_host_header off cache_replacement_policy lru acl QUERY urlpath_regex cgi-bin \

Re: [squid-users] not caching enough

2009-09-29 Thread ant2ne
Ooops, I need "acl QUERY urlpath_regex cgi-bin \?" before "no_cache deny QUERY" -- View this message in context: http://www.nabble.com/not-caching-enough-tp25530445p25670155.html Sent from the Squid - Users mailing list archive at Nabble.com.

Re: [squid-users] Are these acl / http_access correct ?

2009-09-29 Thread danifty
Amos, Months later (sorry...) - many thanks for your explanations. I used it when needed to correct incoherent parameters, and Squid is now fully functionnal on my network. Thanks again. DaNifty Amos Jeffries-2 wrote: > > On Tue, 21 Jul 2009 07:16:36 -0700 (PDT), danifty > wrote: >> Hi all

Re: [squid-users] Managing clusters of siblings (squid2.7)

2009-09-29 Thread tookers
Chris Hostetter wrote: > > > : > What would be really nice is a command line option and a bit of code > : > in the cache peer setup that recognizes own IP and ignores the entry, > : > to make this problem just all go away... > > That would be awesome, but if i'm understanding you correctly it

Re: [squid-users] Want accel-mode squid to pass real IP to httpd

2009-09-29 Thread Amos Jeffries
On Tue, 29 Sep 2009 10:54:05 -0400, Roger Cornelius wrote: > Apologies for what is probably a newbie question. I've searched the > squid directives, archives of this list, the net, etc., and haven't > discovered, or didn't recognize, the answer. > > I'm using squid 2.7.STABLE6 in accelerator mod

Re: [squid-users] Managing clusters of siblings (squid2.7)

2009-09-29 Thread Amos Jeffries
On Tue, 29 Sep 2009 12:59:52 -0700 (PDT), Chris Hostetter wrote: > : > What would be really nice is a command line option and a bit of code > : > in the cache peer setup that recognizes own IP and ignores the entry, > : > to make this problem just all go away... > > That would be awesome, but if

Re: [squid-users] not caching enough

2009-09-29 Thread Amos Jeffries
On Tue, 29 Sep 2009 11:41:16 -0700 (PDT), ant2ne wrote: > Thanks for all of the great replies. There is lots of information to > digest. > I appreciate all of the suggestions. > > But, Before I got any of these replies, I went ahead and made modifications > to my squid.conf to match an example I

RE: [squid-users] Squid2.7 build patch not working in certain parts of the hunks

2009-09-29 Thread Amos Jeffries
I'm wondering if you are following basic 'how to update a patch' method? * locate original upstream file. * make a backup copy * apply pre-existing patch * for each rejected hunk manually edit the patched file (not the patch itself!) * diff -u the altered file and backup of original. * save resul

[squid-users] Squid "acl port"

2009-09-29 Thread wangwen
Hi All. I have my question about the use of “acl port ” in squid.conf. Generally the proxy has the following three cases: 1. Standard proxy cache server: In order to realize this approach, We must indicate the Ip and port of proxy server in the browser of everyone internal host. 2. Transparent

Re: [squid-users] squid vport

2009-09-29 Thread wangwen
Now I use Stable Squid 2.7.STABLE7 in windows xp. alter HTTP_Port as follow: http_port 192.168.0.164:88 accel defaultsite=192.168.24.198 or http_port 192.168.0.164:88 accel defaultsite=192.168.24.198 vport acl all src 0.0.0.0/0.0.0.0 http_access allow all cache_peer 192.168.24.198 parent 8088 0

[squid-users] secured authentication

2009-09-29 Thread David Boyer
I've been using squid_ldap_auth (Squid 2.7, SLES 11) for basic authentication, and it wasn't terribly difficult to set up. What concerns me is the passing of credentials from the browser to Squid in plain text. When we use basic authentication anywhere else, the web site usually requires HTTPS.

Re: [squid-users] Squid "acl port"

2009-09-29 Thread Amos Jeffries
On Wed, 30 Sep 2009 09:46:04 +0800, "wangwen" wrote: > Hi All. > > I have my question about the use of “acl port ” in squid.conf. > > Generally the proxy has the following three cases: > > 1. Standard proxy cache server: In order to realize this approach, We must > indicate the Ip and port of p

[squid-users] Re: Appending multiple domains for non-FQDN DNS resolution

2009-09-29 Thread dmorton
I have now built another Squid server based on 3.0 STABLE19 but am experiencing the same results. I can resolve all non-FQDN addresses perfectly (across our three internal domains) from the server command line yet Squid refuses to query DNS based on the multiple search domains specified in res

Re: [squid-users] Squid "acl port"

2009-09-29 Thread wangwen
I got it,Thanks for your replies. - Original Message - From: "Amos Jeffries" To: "wangwen" Cc: Sent: Wednesday, September 30, 2009 10:29 AM Subject: Re: [squid-users] Squid "acl port" On Wed, 30 Sep 2009 09:46:04 +0800, "wangwen" wrote: Hi All. I have my question about the us

Re: [squid-users] squid vport

2009-09-29 Thread Amos Jeffries
wangwen wrote: Now I use Stable Squid 2.7.STABLE7 in windows xp. alter HTTP_Port as follow: http_port 192.168.0.164:88 accel defaultsite=192.168.24.198 or http_port 192.168.0.164:88 accel defaultsite=192.168.24.198 vport acl all src 0.0.0.0/0.0.0.0 http_access allow all cache_peer 192.168.24.1

Re: [squid-users] secured authentication

2009-09-29 Thread Tejpal Amin
David, You could use NTLM or kerberos auth to achieve the same. This will also allow you to have single sign on to teh proxy. Warm Regards Tej On Wed, Sep 30, 2009 at 7:58 AM, David Boyer wrote: > I've been using squid_ldap_auth (Squid 2.7, SLES 11) for basic > authentication, and it wasn't t

Re: [squid-users] secured authentication

2009-09-29 Thread Amos Jeffries
David Boyer wrote: I've been using squid_ldap_auth (Squid 2.7, SLES 11) for basic authentication, and it wasn't terribly difficult to set up. What concerns me is the passing of credentials from the browser to Squid in plain text. When we use basic authentication anywhere else, the web site usuall

Re: [squid-users] squid vport

2009-09-29 Thread wangwen
- Original Message - From: "Amos Jeffries" To: "wangwen" Cc: "Michael Lenaghan" ; Sent: Wednesday, September 30, 2009 12:59 PM Subject: Re: [squid-users] squid vport wangwen wrote: Now I use Stable Squid 2.7.STABLE7 in windows xp. alter HTTP_Port as follow: http_port 192.168.0

Re: [squid-users] Re: Appending multiple domains for non-FQDN DNS resolution

2009-09-29 Thread Amos Jeffries
dmor...@tycoflow.co.nz wrote: I have now built another Squid server based on 3.0 STABLE19 but am experiencing the same results. I can resolve all non-FQDN addresses perfectly (across our three internal domains) from the server command line yet Squid refuses to query DNS based on the multiple