Re: [squid-users] squid performance - requests per second

2010-03-29 Thread Amos Jeffries
guest01 wrote: Hi guys, I am sorry if this is a question which has been asked for many times, but I did not find any actual question concerning the performance of recent versions of squid. We are trying to replace a commercial product with squid servers on 64bit linux servers (most likely red

Re: [squid-users] TCP MISS 502

2010-03-29 Thread Ivan .
Some even more strange access.log entries? This is odd? Does that mean no DNS record? strange as both squid's use the same DNS setup, with a primary, secondary and tertiary setup. 1269833940.167 0 127.0.0.1 NONE/400 1868 GET www.environment.gov.au - NONE/- text/html 1269833960.464 60997

Re: [squid-users] TCP MISS 502

2010-03-29 Thread Amos Jeffries
Ivan . wrote: Hi Amos You can see the tcp_miss in the access.log here:- 1269834108.182 120002 127.0.0.1 TCP_MISS/000 0 GET http://www.environment.gov.au - DIRECT/155.187.3.81 - Here is a tcpdump output from the connection. You can see the TCP handshake setup and then the http session just

Re: [squid-users] cache_peer

2010-03-29 Thread Amos Jeffries
GIGO . wrote: I want that if my first listed cache peer goes down then only should my second peer be used. - cache_peer 127.0.0.1 3128 0 default no-digest no-query no-delay (only if this is unavailable then the second one listed is used) cache_peer 10.1.82.205 8080 0

Re: [squid-users] TCP MISS 502

2010-03-29 Thread Amos Jeffries
Ivan . wrote: Some even more strange access.log entries? This is odd? Does that mean no DNS record? strange as both squid's use the same DNS setup, with a primary, secondary and tertiary setup. 1269833940.167 0 127.0.0.1 NONE/400 1868 GET www.environment.gov.au - NONE/- text/html

Re: [squid-users] TCP MISS 502

2010-03-29 Thread Ivan .
That is so odd, as I have two identical boxes, now running the same Squid version, going through the same infrastructure, one works, the other one doesn't? The only difference are the public addresses configured on each of the squid proxy systems. The TCP stats on the interface on the squid

[squid-users] Reverse Proxy and OWA

2010-03-29 Thread Andrea Gallazzi
Hi All, I am a newbie about squid. I am interested about squid as reverse proxy for Outlook Web App and Activesync for Exchange 2010 Did Someone have experience about this? Is it possible to use at the same time squid as proxy and reverse proxy ? Thank You Andrea

Re: [squid-users] Reverse Proxy and OWA

2010-03-29 Thread Amos Jeffries
Andrea Gallazzi wrote: Hi All, I am a newbie about squid. I am interested about squid as reverse proxy for Outlook Web App and Activesync for Exchange 2010 Did Someone have experience about this? Yes. Is it possible to use at the same time squid as proxy and reverse proxy ? Yes. See

Re: [squid-users] Reverse Proxy and OWA

2010-03-29 Thread Jakob Curdes
Amos Jeffries schrieb: Andrea Gallazzi wrote: Hi All, I am a newbie about squid. I am interested about squid as reverse proxy for Outlook Web App and Activesync for Exchange 2010 Did Someone have experience about this? We are running such a reverse proxy setup for several clients, but with

Re: [squid-users] Negotiate/NTLM authentication caching

2010-03-29 Thread Khaled Blah
Thx a lot for your answer, Amos! You are of course right with your concerns towards IP/TCP caching. Not a very good idea! Does the same hold true for Kerberos as well, though? I mean could it be possible to cache Kerberos authentication in a secure fashion? Thinking about what you said, I am

[squid-users] Squid 3.1.1 is available

2010-03-29 Thread Amos Jeffries
The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-3.1.1 release! This is the first release of the Squid-3.1 series which has passed our criteria for use in production environments. 3.1.1 brings many new features and upgrades to the basic networking

[squid-users] HTTP_Miss/200,304 Very Slow responsetime. Experts please help.

2010-03-29 Thread GIGO .
I am using ISA server as cache_peer parent and runing multiple instances on my squid Sever. However i am failing to understand that why the behaviour of Squid is extremely slow. At home where i have direct access to internet the same setup works fine.Please somebody help me out regards,

[squid-users] url_rewrite_program with acl

2010-03-29 Thread Leonardo Carneiro - Veltrac
Hi everyone, I'm testing some redirectors to learn something about it. Is there a way to use acl with redirectors, so they will only redirect some URL or hosts, intead of redirecting all? Tks in advance. -- Leonardo Carneiro

Re: [squid-users] url_rewrite_program with acl

2010-03-29 Thread John Doe
From: Leonardo Carneiro - Veltrac lscarne...@veltrac.com.br I'm testing some redirectors to learn something about it. Is there a way to use acl with redirectors, so they will only redirect some URL or hosts, intead of redirecting all? I guess 'url_rewrite_access' should do that. JD

Re: [squid-users] Squid 3.1.1 is available

2010-03-29 Thread Jeff Peng
On Mon, Mar 29, 2010 at 7:45 PM, Amos Jeffries squ...@treenet.co.nz wrote: The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-3.1.1 release! This is the first release of the Squid-3.1 series which has passed our criteria for use in production environments.

[squid-users] Error building 2.7.STABLE9 on OSX 10.5.8

2010-03-29 Thread Ricardo Newbery
I get the following error when trying to build 2.7.STABLE9 on OSX 10.5.8. Any suggestions? checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... cfgaux/install-sh -c -d checking for gawk... no

[squid-users] error in redirector

2010-03-29 Thread senthilkumaar2021
Hi All, I tried to configure squirm with squid to redirect address I am getting the following error in the cache.log and not able to browse any sites 2010/03/29 18:29:06| helperHandleRead: unexpected reply on channel -1 from url_rewriter #1 '' My squid.conf look like this

[squid-users] squid deployment

2010-03-29 Thread guest01
Hi guys, We want to replace our current proxy solution (crappy commercial product which is way too expensive) and thought about Squid, which is a great product.I already found a couple of example configurations, basically for reverse proxying. What we are looking for is a caching and

[squid-users] Re: squid deployment

2010-03-29 Thread guest01
Damn, I shouldn't have pressed the send button yet Anyway, I found a similar scenario, at least for small environments, at http://wiki.squid-cache.org/ConfigExamples/Webwasher But I don't see any chance to support multiple icap servers. Is there a solution for this problem (I don't want to

Re: [squid-users] url_rewrite_program with acl

2010-03-29 Thread Leonardo Carneiro - Veltrac
tks worked like a charm John Doe wrote: From: Leonardo Carneiro - Veltrac lscarne...@veltrac.com.br I'm testing some redirectors to learn something about it. Is there a way to use acl with redirectors, so they will only redirect some URL or hosts, intead of redirecting all? I

[squid-users] Web html documents taking long period to load using IE7

2010-03-29 Thread Don
Hello all, we are having some issues with web documents opening up extremely slow up to 5-6 minutes per link and I would like to query the squid community for help. Our users are opening web documents up for viewing and complaining extremely slow speeds. I have investigated and confirmed the

Re: [squid-users] Does squid redirector work for https requests

2010-03-29 Thread Priyadarsan Roy
Dear Amos, Squid may send the URL it gets in the HTTPS tunneling request. Which consists only of a server name and port. The URL re-writer can then do what it pleases. However it should be noted that if Squid alters the destination server the browser is expecting to connect to very bad

[squid-users] reverse proxy for OWA 2010 - firts issue

2010-03-29 Thread Andrea Gallazzi
Hi, I installed ubuntu server (latest) with squid 2.7. I am following this example config: http://wiki.squid-cache.org/ConfigExamples/Reverse/OutlookWebAccess but on first command https_port squid returns the error unrecognired Where is the problem? thanks

Re: [squid-users] WebFilter by ip

2010-03-29 Thread Mike Rambo
Landy Landy wrote: I have a small network at an elementery school where I have two labs: one would have access to the internet and one won't. I'm currently doing this. Now, I also have teachers and others that would be accessing the web as well. I would like to allow teachers and other full

Re: [squid-users] Reverse Proxy and OWA

2010-03-29 Thread Ludovit Koren
Amos Jeffries squ...@treenet.co.nz writes: Andrea Gallazzi wrote: Hi All, I am a newbie about squid. I am interested about squid as reverse proxy for Outlook Web App and Activesync for Exchange 2010 Did Someone have experience about this? Yes. Is

[squid-users] WCCP and ICP

2010-03-29 Thread Bradley, Stephen W. Mr.
Okay, I have been fighting to get WCCP and ICP working in a two server test= cluster for weeks now with no luck. The WCCP was not big deal but I think that with just WCCP you just get a ro= uter to send the HTTP requests to each server. I do not think that if the = server doesn't have the

[squid-users] Apt-get Issue through squid

2010-03-29 Thread a...@gmail
Hello Everybody! I have a question if you don't mind or if anyone has a solution to this I am trying to download some packages with apt-get on one of my Ubuntu clients All of the links fail, which means they are blocked by Squid, When I try the same thing on the Squid machine itself which is

Re: [squid-users] Sending on Group names after Kerb LDAP look-up

2010-03-29 Thread Nick Cairncross
Hi, I just wanted to give this a bump; Is it possible to manipulate the (Kerberos-authenticated) username that gets sent to my ICAP server and strip off the @domain? E.g. jsm...@myaddomain becomes jsmith Relevant squid lines just FYI: icap_send_client_username on

[squid-users] Squid loops on epoll/read/gettimeofday

2010-03-29 Thread Marcus Kool
I use squid Squid Cache: Version 3.0.STABLE20 configure options: '--prefix=/local/squid' '--with-default-user=squid' '--with-filedescriptors=2400' '--enable-icap-client' '--enable-storeio=aufs,ufs,null' '--with-pthreads' '--enable-async-io=8' '--enable-removal-policies=lru'

Re: [squid-users] Apt-get Issue through squid

2010-03-29 Thread Jakob Curdes
a...@gmail schrieb: Hello Everybody! I have a question if you don't mind or if anyone has a solution to this I am trying to download some packages with apt-get on one of my Ubuntu clients All of the links fail, which means they are blocked by Squid, When I try the same thing on the Squid

Re: [squid-users] Apt-get Issue through squid

2010-03-29 Thread a...@gmail
Hi there, Thanks for your reply, I was merely asking if anyone has or had the same problem before, or anyone who might have a solution, of course If I stop squid now and disable it reconfigure my system to what it was before of course I will get the updates and the access to the internet

Re: [squid-users] Apt-get Issue through squid

2010-03-29 Thread Leonardo Carneiro - Veltrac
Welcome to the internet. If you don't want to configure every single app, you can use WPAD [1] or Proxy Interception [2]. [1] http://wiki.squid-cache.org/Technology/WPAD [2] http://wiki.squid-cache.org/SquidFaq/InterceptionProxy a...@gmail wrote: Hi there, Thanks for your reply, I was merely

Re: [squid-users] Apt-get Issue through squid

2010-03-29 Thread Leonardo Carneiro - Veltrac
Also, you can educate your users so they know that your network has a proxy and to setup the proxy on the apps is a necessary step to get to work. Proxy is not a 'out-of-the-earth' thing now days and most of the users (on a enterprise network, at least) will be able to understand this.

Re: [squid-users] Apt-get Issue through squid

2010-03-29 Thread Jakob Curdes
a...@gmail schrieb: Hi there, Thanks for your reply, I was merely asking if anyone has or had the same problem before, or anyone who might have a solution, of course and you got a quick answer... answering time might beat most expensive support services for commercial software . :-)) If I

Re: [squid-users] Apt-get Issue through squid

2010-03-29 Thread a...@gmail
Hi Again, I do appreciate that, but some people are very restricted time wise The way it looks I could easily spend a whole year tweaking it before I could get everything working or maybe more :-) Anyway, Thank you all for your suggestions and help Regards Adam - Original Message -

Re: [squid-users] Apt-get Issue through squid

2010-03-29 Thread Jakob Curdes
a...@gmail schrieb: Hi Again, I do appreciate that, but some people are very restricted time wise The way it looks I could easily spend a whole year tweaking it before I could get everything working or maybe more :-) Most people on the mailing list here are very restriced time-wise. This is

Re: [squid-users] Apt-get Issue through squid

2010-03-29 Thread a...@gmail
Hi again, Sorry I forgot to mention I already have tried export http_proxy=http://ip_address:port but no luck so far Regards Adam - Original Message - From: Leonardo Carneiro - Veltrac lscarne...@veltrac.com.br To: squid-users@squid-cache.org Sent: Monday, March 29, 2010 7:48 PM

Re: [squid-users] Apt-get Issue through squid

2010-03-29 Thread Jakob Curdes
a...@gmail schrieb: Hi again, Sorry I forgot to mention I already have tried export http_proxy=http://ip_address:port but no luck so far This has nothing to do with luck. It has to do with a problem solving strategy. Try using wget after setting a http_proxy variable. If it works, proceed to

Re: [squid-users] Squid 3.1.1 is available

2010-03-29 Thread Amos Jeffries
On Mon, 29 Mar 2010 20:45:57 +0800, Jeff Peng jeffp...@netzero.net wrote: On Mon, Mar 29, 2010 at 7:45 PM, Amos Jeffries squ...@treenet.co.nz wrote: The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-3.1.1 release! This is the first release of the Squid-3.1

[squid-users] Re: Negotiate/NTLM authentication caching

2010-03-29 Thread Markus Moeller
I may misunderstood what you said, but there is no caching of authentication for Kerberos nor Basic/Digest. I think the TTL you talk about is for authorisation. Markus Khaled Blah khaled.b...@googlemail.com wrote in message news:4a3250ab1003290408q72ec495an7d04934d527c3...@mail.gmail.com...

Re: [squid-users] Squid loops on epoll/read/gettimeofday

2010-03-29 Thread Amos Jeffries
On Mon, 29 Mar 2010 13:58:58 -0300, Marcus Kool marcus.k...@urlfilterdb.com wrote: I use squid Squid Cache: Version 3.0.STABLE20 configure options: '--prefix=/local/squid' '--with-default-user=squid' '--with-filedescriptors=2400' '--enable-icap-client' '--enable-storeio=aufs,ufs,null'

[squid-users] Re: Sending on Group names after Kerb LDAP look-up

2010-03-29 Thread Markus Moeller
Did you try -r with squid_kerb_auth ? Markus Nick Cairncross nick.cairncr...@condenast.co.uk wrote in message news:c7d69a71.1dc21%nick.cairncr...@condenast.co.uk... Hi, I just wanted to give this a bump; Is it possible to manipulate the (Kerberos-authenticated) username that gets sent to my

Re: [squid-users] error in redirector

2010-03-29 Thread Amos Jeffries
On Mon, 29 Mar 2010 18:37:29 +0530, senthilkumaar2021 senthilkumaar2...@gmail.com wrote: Hi All, I tried to configure squirm with squid to redirect address I am getting the following error in the cache.log and not able to browse any sites 2010/03/29 18:29:06| helperHandleRead: unexpected

RE: [squid-users] Squid 3.1.1 is available

2010-03-29 Thread David Parks
Just to make sure I read this correctly - the feature for logging to a UDP port is not available until 3.2 (which doesn't have a release date in the near future), correct? As of now the only option is logging to a file correct? Thanks, David

RE: [squid-users] WCCP and ICP

2010-03-29 Thread Michael Bowe
-Original Message- From: Bradley, Stephen W. Mr. [mailto:bradl...@muohio.edu] How do I get the two servers to talk to each other to improve cache hits on= the stream? (I plan on putting this into a bigger group of servers.) Couple of things to be aware of : In my understanding

Re: [squid-users] Apt-get Issue through squid

2010-03-29 Thread Amos Jeffries
On Mon, 29 Mar 2010 21:39:04 +0200, Jakob Curdes j...@info-systems.de wrote: a...@gmail schrieb: Hi again, Sorry I forgot to mention I already have tried export http_proxy=http://ip_address:port but no luck so far This has nothing to do with luck. It has to do with a problem solving

RE: [squid-users] Squid 3.1.1 is available

2010-03-29 Thread Amos Jeffries
On Mon, 29 Mar 2010 15:57:52 -0600, David Parks davidpark...@yahoo.com wrote: Just to make sure I read this correctly - the feature for logging to a UDP port is not available until 3.2 (which doesn't have a release date in the near future), correct? As of now the only option is logging to a

Re: [squid-users] squid deployment

2010-03-29 Thread Amos Jeffries
On Mon, 29 Mar 2010 15:18:24 +0200, guest01 gues...@gmail.com wrote: Hi guys, We want to replace our current proxy solution (crappy commercial product which is way too expensive) and thought about Squid, which is a great product.I already found a couple of example configurations, basically

Re: [squid-users] reverse proxy for OWA 2010 - firts issue

2010-03-29 Thread Amos Jeffries
On Mon, 29 Mar 2010 16:45:45 +0200, Andrea Gallazzi andrea.galla...@live.com wrote: Hi, I installed ubuntu server (latest) with squid 2.7. I am following this example config: http://wiki.squid-cache.org/ConfigExamples/Reverse/OutlookWebAccess but on first command https_port squid

Re: [squid-users] TCP MISS 502

2010-03-29 Thread Ivan .
More odd tcp_miss Only had a small portion of the site which would work. Works fine from the primary, but fails on the secondary squid. 1269906612.412 5464 10.xxx..xxx TCP_MISS/000 0 GET http://www.internode.on.net/products/ - DIRECT/203.16.214.27 - 1269906612.930 17 10.xxx..xxx

Re: [squid-users] TCP MISS 502

2010-03-29 Thread Ivan .
really? One site not working on each of the Squid boxes? That would be very, very strange? Ivan On Tue, Mar 30, 2010 at 11:20 AM, Amos Jeffries squ...@treenet.co.nz wrote: On Tue, 30 Mar 2010 10:50:53 +1100, Ivan . ivan...@gmail.com wrote: More odd tcp_miss Only had a small portion of the

Re: [squid-users] Re: Negotiate/NTLM authentication caching

2010-03-29 Thread Amos Jeffries
Markus Moeller wrote: I may misunderstood what you said, but there is no caching of authentication for Kerberos nor Basic/Digest. I think the TTL you talk about is for authorisation. Markus Quite right. Amos Khaled Blah khaled.b...@googlemail.com wrote in message

Re: [squid-users] HTTP_Miss/200,304 Very Slow responsetime. Experts please help.

2010-03-29 Thread Amos Jeffries
GIGO . wrote: I am using ISA server as cache_peer parent and runing multiple instances on my squid Sever. However i am failing to understand that why the behaviour of Squid is extremely slow. At home where i have direct access to internet the same setup works fine.Please somebody help me out

RE: [squid-users] HTTP_Miss/200,304 Very Slow responsetime. Experts please help.

2010-03-29 Thread GIGO .
Dear Amos, Thank you so much i will try troubleshooting on the lines you suggested. regards, Bilal Aslam Date: Tue, 30 Mar 2010 17:05:50 +1300 From: squ...@treenet.co.nz To: squid-users@squid-cache.org Subject: Re: [squid-users] HTTP_Miss/200,304