[squid-users] Cache_peer directive

2010-11-01 Thread Senthilkumar
Hi All, I am using squid 2.7 stable 7 with wccp.In the squid.conf i have used 9 cache_peer directive as parent and made all requests passed through it by never direct allow all.I am using round robin in cache_peer to load balance requests.Now the problem is the browsing seems to be very slow

[squid-users] Squid 3.1.9 is available

2010-11-01 Thread Amos Jeffries
The Squid HTTP Proxy team is very pleased to announce the availability of the Squid-3.1.9 release! This release brings a long list of bug fixes and some further HTTP/1.1 improvements into 3.1. Several small memory leaks have been found and fixed in the Netdb, DNS, ICAP, ICY, and HTTPS

Re: [squid-users] Problem with ACL (disabling download)

2010-11-01 Thread Konrado Z
Hello, Thanks for reply but I still have problem My all acls and http_access acl clients 192.168.56.0/24 acl funWebsites dstdom_regex /etc/squid/funWebsites acl workingHours time M T W H F 8:00-16:00 acl officeFiles urlpath_regex /etc/squid/officeFiles http_access deny clients workingHours

[squid-users] Squid network read()'s only 2k long?

2010-11-01 Thread declanw
Greetings! I am poking a potential squid upgrade from squid 2 to 3.1.8 with a new config, but it's added around 40% more CPU load, and I'm looking for tune-ups. One thing I notice it doing when I truss is read()ing HTTP responses with only a 2046 byte buffer, whereas squid2 used 24Kb. This is

[squid-users] forward and reverse proxy in 3.1.x https forward proxy failing

2010-11-01 Thread Dean Weimer
I had an older machine that was still running 3.0 STABLE 12, that was functioning as a forward and reverse proxy using port 80 for both.  And a reverse proxy for one site on Port 443, the machine sits in a DMZ the forward proxy only directs about to web sites for machines connected through WAN

Re: [squid-users] Squid network read()'s only 2k long?

2010-11-01 Thread Henrik K
On Mon, Nov 01, 2010 at 03:00:21PM +, decl...@is.bbc.co.uk wrote: Besides that, I have a laaarge url_regexp file to process, and I was wondering if there was any benefit to trying to break this regexp out to a perl helper process (and if anyone has a precooked setup doing this I can

Re: [squid-users] Squid network read()'s only 2k long?

2010-11-01 Thread Marcus Kool
I am author of ufdbGuard, a free URL filter for Squid. You may want to check it out: ufdbGuard is multithreaded and supports POSIX regular expressions. If you do not want to use ufdbGuard, here is a tip: ufdbGuard composes large REs from a set of simple REs: largeRE = (RE1)|(RE2)|...|(REn)

[squid-users] Re: Re: Re: squid_ldap_group against nested groups/Ous

2010-11-01 Thread Markus Moeller
Let me see if I can get a 8.0/7.x build. Does it compile AND work on 8.1 or do you still see the crash when reading the keytab ? Markus Eugene M. Zheganin eug...@zhegan.in wrote in message news:4ccd5f0e.9080...@zhegan.in... Hi. On 30.10.2010 00:14, Markus Moeller wrote: Hi, I have now a

Re: [squid-users] Problem with ACL (disabling download)

2010-11-01 Thread Amos Jeffries
On Mon, 1 Nov 2010 14:41:19 +0100, Konrado Z konra...@partyinfo.com.pl wrote: Hello, Thanks for reply but I still have problem My all acls and http_access acl clients 192.168.56.0/24 acl funWebsites dstdom_regex /etc/squid/funWebsites acl workingHours time M T W H F 8:00-16:00 There are

Re: [squid-users] Squid LOAD

2010-11-01 Thread Mr. Issa(*)
So mates no more analysis? On Sat, Oct 30, 2010 at 1:56 AM, Luis Daniel Lucio Quiroz luis.daniel.lu...@gmail.com wrote: Le vendredi 29 octobre 2010 15:34:46, Mr. Issa(*) a écrit : Where's IO 2.5% ? Well i dont the cache_log will cause that If you dont do log, you wont know who is

Re: [squid-users] forward and reverse proxy in 3.1.x https forward proxy failing

2010-11-01 Thread Amos Jeffries
On Mon, 1 Nov 2010 12:41:44 -0500, Dean Weimer dwei...@orscheln.com wrote: I had an older machine that was still running 3.0 STABLE 12, that was functioning as a forward and reverse proxy using port 80 for both. And a reverse proxy for one site on Port 443, the machine sits in a DMZ the

[squid-users] Kerb auth with LDAP groups

2010-11-01 Thread Kelly, Jack
Hi everyone, I've successfully set up authentication to my proxy with squid_kerb_auth to get us away from using basic LDAP authentication for everything. I used the config guide from the squid-cache wiki (below) which worked perfectly.

RE: [squid-users] forward and reverse proxy in 3.1.x https forward proxy failing

2010-11-01 Thread Dean Weimer
-Original Message- From: Amos Jeffries [mailto:squ...@treenet.co.nz] Sent: Monday, November 01, 2010 3:57 PM To: Dean Weimer Cc: squid-users@squid-cache.org Subject: Re: [squid-users] forward and reverse proxy in 3.1.x https forward proxy failing On Mon, 1 Nov 2010 12:41:44

Re: [squid-users] Squid network read()'s only 2k long?

2010-11-01 Thread Amos Jeffries
On Mon, 1 Nov 2010 15:00:21 +, decl...@is.bbc.co.uk wrote: Greetings! I am poking a potential squid upgrade from squid 2 to 3.1.8 with a new config, but it's added around 40% more CPU load, and I'm looking for tune-ups. One thing I notice it doing when I truss is read()ing HTTP

Re: [squid-users] Problem with ACL (disabling download)

2010-11-01 Thread Konrado Z
Thanks for your response. acl officeFiles urlpath_regex /etc/squid/officeFiles http_access deny clients workingHours funWebsites http_access deny clients !officeFiles http_access allow all NP: allow all means traffic from the entire Internet. That should be allow clients. Thanks that is

Re: [squid-users] Kerb auth with LDAP groups

2010-11-01 Thread Amos Jeffries
On Mon, 1 Nov 2010 17:03:11 -0400, Kelly, Jack jack.ke...@wsdevelopment.com wrote: Hi everyone, I've successfully set up authentication to my proxy with squid_kerb_auth to get us away from using basic LDAP authentication for everything. I used the config guide from the squid-cache wiki (below)

Re: [squid-users] Squid network read()'s only 2k long?

2010-11-01 Thread Declan White
On Mon, Nov 01, 2010 at 09:36:53PM +, Amos Jeffries wrote: On Mon, 1 Nov 2010 15:00:21 +, decl...@is.bbc.co.uk wrote: I went for a rummage in the code for the buffer size decisions, but got very very lost in the OO abstractions very quickly. Can anyone point me at anything I can

[squid-users] TPROXY - possible in such network setup (hanging connections)?

2010-11-01 Thread Tomasz Chmielewski
I'm trying to configure Squid to work in tproxy mode (IPv4, when it works, IPv6), but my connections are hanging and I'm not sure how to debug this. Perhaps my network setup won't just work with tproxy? My network setup looks like below: internet gateway - squid - client Internet

Re: [squid-users] Problem with ACL (disabling download)

2010-11-01 Thread Amos Jeffries
On Mon, 1 Nov 2010 23:01:42 +0100, Konrado Z konra...@partyinfo.com.pl wrote: Thanks for your response. acl officeFiles urlpath_regex /etc/squid/officeFiles http_access deny clients workingHours funWebsites http_access deny clients !officeFiles http_access allow all NP: allow all means

Re: [squid-users] Squid network read()'s only 2k long?

2010-11-01 Thread Declan White
On Mon, Nov 01, 2010 at 10:55:12PM +, Declan White wrote: On Mon, Nov 01, 2010 at 09:36:53PM +, Amos Jeffries wrote: On Mon, 1 Nov 2010 15:00:21 +, decl...@is.bbc.co.uk wrote: I went for a rummage in the code for the buffer size decisions, but got very very lost in the OO

Re: [squid-users] TPROXY - possible in such network setup (hanging connections)?

2010-11-01 Thread Tomasz Chmielewski
On 01.11.2010 23:55, Tomasz Chmielewski wrote: I'm trying to configure Squid to work in tproxy mode (IPv4, when it works, IPv6), but my connections are hanging and I'm not sure how to debug this. Perhaps my network setup won't just work with tproxy? My network setup looks like below:

Re: [squid-users] Squid network read()'s only 2k long?

2010-11-01 Thread Amos Jeffries
On Mon, 1 Nov 2010 22:55:12 +, Declan White decl...@is.bbc.co.uk wrote: On Mon, Nov 01, 2010 at 09:36:53PM +, Amos Jeffries wrote: On Mon, 1 Nov 2010 15:00:21 +, decl...@is.bbc.co.uk wrote: I went for a rummage in the code for the buffer size decisions, but got very very lost in

Re: [squid-users] TPROXY - possible in such network setup (hanging connections)?

2010-11-01 Thread Amos Jeffries
On Mon, 01 Nov 2010 23:55:27 +0100, Tomasz Chmielewski man...@wpkg.org wrote: I'm trying to configure Squid to work in tproxy mode (IPv4, when it works, IPv6), but my connections are hanging and I'm not sure how to debug this. Perhaps my network setup won't just work with tproxy? My

Re: [squid-users] Squid network read()'s only 2k long?

2010-11-01 Thread Declan White
On Tue, Nov 02, 2010 at 12:10:25AM +, Amos Jeffries wrote: On Mon, 1 Nov 2010 22:55:12 +, Declan White decl...@is.bbc.co.uk wrote: On Mon, Nov 01, 2010 at 09:36:53PM +, Amos Jeffries wrote: On Mon, 1 Nov 2010 15:00:21 +, decl...@is.bbc.co.uk wrote: Looks like one of the

Re: [squid-users] High cpu load with squid

2010-11-01 Thread Michał Prokopiuk
Witam, Dnia pon, lis 01, 2010 at 01:17:46 +, Amos Jeffries napisał: Thank you for reply. redirect_program /usr/local/bin/redirector.pl redirect_children 80 Replace those with: url_write_program /usr/local/bin/redirector.pl url_rewrite_children 80 store_avg_object_size 8

[squid-users] RE:FW: $--.

2010-11-01 Thread eliud Kataraihya
I have a good information to share with you. A while ago,a trading company attractive to me, the price is very competitive advantage, so I bought some products. It is very exciting,very pleased when I got and saw my goods. I think you can go to see: nowfid.com you'll save more money in there.

Re: [squid-users] Squid network read()'s only 2k long?

2010-11-01 Thread Amos Jeffries
On Mon, 1 Nov 2010 23:20:52 +, Declan White decl...@is.bbc.co.uk wrote: On Mon, Nov 01, 2010 at 10:55:12PM +, Declan White wrote: On Mon, Nov 01, 2010 at 09:36:53PM +, Amos Jeffries wrote: On Mon, 1 Nov 2010 15:00:21 +, decl...@is.bbc.co.uk wrote: I went for a rummage in the

Re: [squid-users] Squid network read()'s only 2k long?

2010-11-01 Thread Amos Jeffries
On Tue, 2 Nov 2010 00:55:38 +, Declan White decl...@is.bbc.co.uk wrote: On Tue, Nov 02, 2010 at 12:10:25AM +, Amos Jeffries wrote: On Mon, 1 Nov 2010 22:55:12 +, Declan White decl...@is.bbc.co.uk wrote: On Mon, Nov 01, 2010 at 09:36:53PM +, Amos Jeffries wrote: On Mon, 1 Nov

[squid-users] Kerberos auth with Active Directory.

2010-11-01 Thread Rolf Loudon
hello I am trying to setup kerberos auth against Active Directory - Windows 2000 - in squid, 2.7. This is primarily so that the username is captured in the access log. But also user based access control will occasionally be used. I've installed the squid_kerb_auth software from

Re: [squid-users] squid not storing objects to disk andgettingRELEASED on the fly

2010-11-01 Thread Rajkumar Seenivasan
Hi, Can someone pls help fix my 2 issues? I wish there was an equivalent of reference_age in 3.1 thanks. On Thu, Oct 28, 2010 at 12:28 PM, Rajkumar Seenivasan rkcp...@gmail.com wrote: switching from LFUDA to GDSF didn't make much of a difference. I assume the following is happening... I

[squid-users] url_rewrite

2010-11-01 Thread viswanathan
Hi All, I am using squid 2.6 stable 19 .we are using url redirector.Every request passes through redirector. In cache.log we can see following error, WARNING: All url_rewriter processes are busy. WARNING:Up to 300 pending requests queued We increased url_rewrite_children upto 100 .Still the

Re: [squid-users] url_rewrite

2010-11-01 Thread Amos Jeffries
On 02/11/10 17:28, viswanathan wrote: Hi All, I am using squid 2.6 stable 19 .we are using url redirector.Every request passes through redirector. Why? Is there not some large portion which can go without having the URL fiddled with? In cache.log we can see following error, WARNING: All

Re: [squid-users] url_rewrite

2010-11-01 Thread viswanathan
Thanks much for the reply Actally we are redirecting all request to the websense filter. If we increase url_rewrite children and url_rewrite concurrency the problem will be solved? We are not sure whether websense plugin supports concurrency any views on it. Thanks -Viswa On 11/02/2010

Re: [squid-users] squid not storing objects to disk andgettingRELEASED on the fly

2010-11-01 Thread Amos Jeffries
On 29/10/10 05:28, Rajkumar Seenivasan wrote: switching from LFUDA to GDSF didn't make much of a difference. I assume the following is happening... I pre-cache around 2 to 3GB of data everyday and get 40 to 50% HITS everyday. Check that those 40-50% hits are from actual visitors, not from

Re: [squid-users] url_rewrite

2010-11-01 Thread Amos Jeffries
On 02/11/10 17:59, viswanathan wrote: Thanks much for the reply Actally we are redirecting all request to the websense filter. If we increase url_rewrite children and url_rewrite concurrency the problem will be solved? It's a workaround to fix a shortcoming in the url-rewriter hack. We

Re: [squid-users] url_rewrite

2010-11-01 Thread viswanathan
Thanks much for the reply. So is it necessary to increase url rewrite concurrency too? Thanks -Viswa So there is no need to increase On 11/02/2010 10:53 AM, Brett Lymn wrote: On Tue, Nov 02, 2010 at 10:29:06AM +0530, viswanathan wrote: We are not sure whether websense plugin supports