Re: [squid-users] brige+ squid + tproxy on a kernel-2.6.32.11

2010-08-12 Thread Amos Jeffries
Mamadou Touré wrote: Hi, all i've implemented squid with tproxy on a bridge with linux kernel-2.6.32.11. for my test every think is ok but this implementation is for a production use. is there any issue with tproxy and kernel-2.6.32.11. I need your advices. regards. The only issue with TPROXY i

Re: [squid-users] File not cached in memory?

2010-08-12 Thread Amos Jeffries
Heinz Diehl wrote: Hi, given the following settings in squid.conf (2.7-STABLE9): cache_mem 512 MB maximum_object_size_in_memory 10 MB memory_replacement_policy heap GDSF cache_replacement_policy heap LFUDA cache_dir coss /var/cache/squid/cs 10240 max-size=131072 block-size=4096 maxfullbu

Re: [squid-users] PINNED on my access.log

2010-08-12 Thread Amos Jeffries
Jose Ildefonso Camargo Tolosa wrote: Hi! On Thu, Aug 12, 2010 at 8:00 PM, Network Administrator wrote: Hi, Just wanted to ask what is PINNED on my access.log while using calamaris. searched for it, haven't found it 1278137619.277125 192.168.40.106 TCP_MISS/200 2727 GET http://ivle.dl

Re: [squid-users] Setting up proxy on wi-fi access point to serve local ads

2010-08-12 Thread Amos Jeffries
rhinoward wrote: Hello All I have been working with a supposed proxy expert and paying a lot of money to have the ability to serve local ads on our wifi network. We want the radio itself to act as the proxy and call for the ads from our server. Basically we would like to place IAB standard Banner

Re: [squid-users] possible SOAP problem with 3.1.4

2010-08-12 Thread Amos Jeffries
Alan Lehman wrote: From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Tuesday, August 10, 2010 6:48 PM To: Alan Lehman Cc: squid-users@squid-cache.org Subject: RE: [squid-users] possible SOAP problem with 3.1.4 On Tue, 10 Aug 2010 09:14:05 -0500, "Alan Lehman" wrote: From: Amos Jeffries [

Re: [squid-users] PINNED on my access.log

2010-08-12 Thread Jose Ildefonso Camargo Tolosa
Hi! On Thu, Aug 12, 2010 at 8:00 PM, Network Administrator wrote: > Hi, > > > > Just wanted to ask what is PINNED on my access.log while using calamaris. > searched for it, haven't found it > > > > 1278137619.277    125 192.168.40.106 TCP_MISS/200 2727 GET > http://ivle.dlsu.edu.ph/classman/timet

[squid-users] PINNED on my access.log

2010-08-12 Thread Network Administrator
Hi, Just wanted to ask what is PINNED on my access.log while using calamaris. searched for it, haven't found it 1278137619.277125 192.168.40.106 TCP_MISS/200 2727 GET http://ivle.dlsu.edu.ph/classman/timetable.asp? - PINNED/202.57.58.28 text/html Thanks ---

[squid-users] squid_kerb_ldap with specific SPN

2010-08-12 Thread Mark deJong
Hello, I'm having some issue with squid_kerb_ldap in its handling of SPN's in the specified keytab file. I'm hoping I'm just missing something. I have a Windows Forest with multiple child domains, all trusting each other. I'd like to have one SPN authorize users for all of the child domains and no

[squid-users] brige+ squid + tproxy on a kernel-2.6.32.11

2010-08-12 Thread Mamadou Touré
Hi, all i've implemented squid with tproxy on a bridge with linux kernel-2.6.32.11. for my test every think is ok but this implementation is for a production use. is there any issue with tproxy and kernel-2.6.32.11. I need your advices. regards.

RE: [squid-users] Squid and squidguard

2010-08-12 Thread Joseph L. Casale
>what mean redirect_children. First hit on goggle explains it well:) Its in the config manual: Tag Nameredirect_children Usage redirect_children number Description This tag is used to set the number of redirect processes to spawn Default redirect_children 5 Example redirect_ch

[squid-users] File not cached in memory?

2010-08-12 Thread Heinz Diehl
Hi, given the following settings in squid.conf (2.7-STABLE9): cache_mem 512 MB maximum_object_size_in_memory 10 MB memory_replacement_policy heap GDSF cache_replacement_policy heap LFUDA cache_dir coss /var/cache/squid/cs 10240 max-size=131072 block-size=4096 maxfullbufs=10 cache_dir aufs

[squid-users] Setting up proxy on wi-fi access point to serve local ads

2010-08-12 Thread rhinoward
Hello All I have been working with a supposed proxy expert and paying a lot of money to have the ability to serve local ads on our wifi network. We want the radio itself to act as the proxy and call for the ads from our server. Basically we would like to place IAB standard Banner ads on the second

[squid-users] Squid and squidguard

2010-08-12 Thread Mamadou Touré
Hi, all when configuring squid for squidguard. we have : redirect_program /usr/bin/squidGuard redirect_children 10 what mean redirect_children. and value should have for squid wich manage about 100 clients. regards.

RE: [squid-users] possible SOAP problem with 3.1.4

2010-08-12 Thread Alan Lehman
> From: Amos Jeffries [mailto:squ...@treenet.co.nz] > Sent: Tuesday, August 10, 2010 6:48 PM > To: Alan Lehman > Cc: squid-users@squid-cache.org > Subject: RE: [squid-users] possible SOAP problem with 3.1.4 > > On Tue, 10 Aug 2010 09:14:05 -0500, "Alan Lehman" > wrote: > >> >> From: Amos Jeffries

Re: [squid-users] NEWBIE: force squid to store/cache xml responses?

2010-08-12 Thread AJ Weber
Could it be because the traffic is coming back thru a CSS? I doubt it, but I thought I'd mention that's what's actually load-balancing the source servers. (Remember, this solution is just to cache content across a slow link, but the actual app servers (again, Tomcat) are load-balanced to one

[squid-users] Re: squid 3.1.6 icap problem (fixed)

2010-08-12 Thread Holger Hoffstätte
Amos Jeffries treenet.co.nz> writes: > > Holger Hoffstaette wrote: > > On Wed, 04 Aug 2010 11:51:39 +0200, Holger Hoffstaette wrote: > > > >> On Wed, 04 Aug 2010 03:34:58 +, Amos Jeffries wrote: > >>> Um, I just found this part of ICAP opening a v6 socket without checking > >>> the requirem

Re: [squid-users] NEWBIE: force squid to store/cache xml responses?

2010-08-12 Thread Amos Jeffries
AJ Weber wrote: Right, as I said, this is a specialized case, accelerating exactly ONE application server (actually a few, but just load-balanced of the same "site"). There is no way, if my config is correct, that either another Squid proxy will be able to leverage mine as a peer, nor any way

[squid-users] My faith in squid has been restored

2010-08-12 Thread Ralf Hildebrandt
I took the leap of faith to squid 3.2.0.1 and FINALLY all my squid proxies are chugging along smoothly. Kudo to the developers! Alles wird gut! -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D

Re: [squid-users] RE: EXTERNAL: [squid-users] NEWBIE Q: httpd_accel_single_host?

2010-08-12 Thread AJ Weber
Maybe it's because I used a FQDN instead of IP Address in my cache_peer entry? I'll double-check my cache_peer_access rules ASAP. Thanks, AJ - Original Message - From: "Amos Jeffries" To: Sent: Wednesday, August 11, 2010 11:17 PM Subject: Re: [squid-users] RE: EXTERNAL: [squid-use

Re: [squid-users] NEWBIE: force squid to store/cache xml responses?

2010-08-12 Thread AJ Weber
Right, as I said, this is a specialized case, accelerating exactly ONE application server (actually a few, but just load-balanced of the same "site"). There is no way, if my config is correct, that either another Squid proxy will be able to leverage mine as a peer, nor any way a user can use m

[squid-users] bridge + Squid + Tproxy

2010-08-12 Thread Mamadou Touré
Hi all, i've implemented squid with tproxy on a linux bridge for transparent proxy of my clients . Internet-router--squid(bridge)-Router---client i've made these config: +++ ip rule add fwmark 1 lookup 100 ip route add local 0.0.0.0/0 dev

Re: [squid-users] how much traffic can squid handle?

2010-08-12 Thread Drunkard Zhang
2010/8/12 Matus UHLAR - fantomas : >> On Wed, Aug 11, 2010 at 1:09 AM, Drunkard Zhang wrote: >> > With same multi-squid-instance configuration, same Linux distro, and >> > different hardware, AMD Opteron gets more balanced CPU usage, while on >> > Intel Xeon just one CPU core running out, others s

Re: [squid-users] Transparent squid and apt-cacher on the same box

2010-08-12 Thread Amos Jeffries
Dayo Adewunmi wrote: Hi all I've got squid 2.6.18-1ubuntu3 on an ubuntu hardy box. This box is the firewall and squid's on there too, running as transparent proxy. I have apt-cacher-ng on a separate box behind the firewall serving package management on the LAN. by streaming from the internet

Re: [squid-users] squid transparent feature

2010-08-12 Thread Amos Jeffries
Mamadou Touré wrote: Hi, all is there other trasparent feature than tproxy for squid ? i'd like to implement a transparent proxy that doesn't modifie the src ip address so the destination serveur could see the user ip adress. regards. No. Linux TPROXY is the only such IP address spoofing/forger

Re: [squid-users] how much traffic can squid handle?

2010-08-12 Thread Stand H
--- On Wed, 8/11/10, Jose Ildefonso Camargo Tolosa wrote: > From: Jose Ildefonso Camargo Tolosa > Subject: Re: [squid-users] how much traffic can squid handle? > To: "Drunkard Zhang" > Cc: "Stand H" , squid-users@squid-cache.org > Date: Wednesday, August 11, 2010, 4:54 PM > On Wed, Aug 11, 2

Re: [squid-users] Squid-3.2.0.x observations

2010-08-12 Thread Amos Jeffries
Ralf Hildebrandt wrote: * Amos Jeffries : On Wed, 11 Aug 2010 20:03:46 +0200, Ralf Hildebrandt wrote: Somehow, the loop detection has changed! In 3.0 and 3.1 I could use: cache_peer proxy-cvk-1.charite.de sibling 8080 3130 default cache_peer proxy-cvk-2.charite.de sibling 8080

Re: [squid-users] Slow performance through Squid

2010-08-12 Thread Amos Jeffries
fRANz wrote: On Thu, Aug 12, 2010 at 5:40 AM, Amos Jeffries wrote: http_port 127.0.0.1:3128 transparent visible_hostname proxy.local.domain cache_mgr r...@local.domain Sigh. So the remote admin who want to contact you about problems they encounter coming out of your proxy are supposed to emai

[squid-users] Re: bridge +tproxy

2010-08-12 Thread Henrik Nordström
tor 2010-08-12 klockan 14:57 +0530 skrev senthilkumaar2021: > Hi > > I have setup squid +tproxy in bridge mode.The bridge works fine for the > clients in the same subnet. > If we connect clients in different subnet the requests gets to the squid > and the squid cannot reply.Each subnet has diffe

[squid-users] squid transparent feature

2010-08-12 Thread Mamadou Touré
Hi, all is there other trasparent feature than tproxy for squid ? i'd like to implement a transparent proxy that doesn't modifie the src ip address so the destination serveur could see the user ip adress. regards.

[squid-users] bridge +tproxy

2010-08-12 Thread senthilkumaar2021
Hi I have setup squid +tproxy in bridge mode.The bridge works fine for the clients in the same subnet. If we connect clients in different subnet the requests gets to the squid and the squid cannot reply.Each subnet has different gateway Internet-router--squid(bridge)-Router---

Re: [squid-users] 2.7 STABLE 9 responds very slowly or stops responding

2010-08-12 Thread Amos Jeffries
TJM wrote: Hello again :D I have spent some time debugging my squid. Yep, it runs as a transparent proxy. The transparent port is different than 'user' port, but it was not blocked in any way. I changed that and also tweaked a few more things. So far everything works. Could the problem be ca

Re: [squid-users] 2.7 STABLE 9 responds very slowly or stops responding

2010-08-12 Thread TJM
Hello again :D I have spent some time debugging my squid. Yep, it runs as a transparent proxy. The transparent port is different than 'user' port, but it was not blocked in any way. I changed that and also tweaked a few more things. So far everything works. Could the problem be caused by ha

Re: [squid-users] how much traffic can squid handle?

2010-08-12 Thread Matus UHLAR - fantomas
> On Wed, Aug 11, 2010 at 1:09 AM, Drunkard Zhang wrote: > > With same multi-squid-instance configuration, same Linux distro, and > > different hardware, AMD Opteron gets more balanced CPU usage, while on > > Intel Xeon just one CPU core running out, others still too idle, about > > 5%-15%. When t

[squid-users] Transparent squid and apt-cacher on the same box

2010-08-12 Thread Dayo Adewunmi
Hi all I've got squid 2.6.18-1ubuntu3 on an ubuntu hardy box. This box is the firewall and squid's on there too, running as transparent proxy. I have apt-cacher-ng on a separate box behind the firewall serving package management on the LAN. by streaming from the internet. This works fine. P

Re: [squid-users] Squid-3.2.0.x observations

2010-08-12 Thread Ralf Hildebrandt
* Amos Jeffries : > On Wed, 11 Aug 2010 20:03:46 +0200, Ralf Hildebrandt > wrote: > > Somehow, the loop detection has changed! In 3.0 and 3.1 I could use: > > > > cache_peer proxy-cvk-1.charite.de sibling 8080 3130 default > > cache_peer proxy-cvk-2.charite.de sibling 8080 3130

Re: [squid-users] squid3.0.25 hoggeing the CPU, serving little

2010-08-12 Thread Ralf Hildebrandt
* Amos Jeffries : > > 'http://js.ui-portal.de/logout/gmx/css/100721/logout.css' > > 'accept-encoding="gzip,deflate", > > user-agent="Mozilla%2F5.0%20(X11%3B%20U%3B%20Linux%20i686%3B%20de%3B%20rv%3A1.9.0.6)%20Gecko%2F2009020409%20Firefox%2F3.0.6%20(Debian-3.0.6-1)"' > > 2010/08/11 17:42:41| client

Re: [squid-users] Facebook issue despite server_http11 on

2010-08-12 Thread Amos Jeffries
GIGO . wrote: Dear All, I am using squid 2.7 stable 9 version the facebook was working fine since yesterday and suddenly the issue appears that a blank page comes whenever tried to access facebook. I have tried the recommended directive server_http11 on But the problem is unresolved please h