Re: [squid-users] multiple squid http ports

2011-04-25 Thread Amos Jeffries
On 25/04/11 03:41, jiluspo wrote: squid running 2 instances(iptables balanced). peer cache digest both sibling on each other running cache_mem only for overloaded server(61k req/min) should we create 2 http ports for peer and for tproxy? Yes. This is a MUST DO requirement. TPROXY mangles the

Re: [squid-users] How to tell if Squid is in Reverse or Transparent mode

2011-04-25 Thread Amos Jeffries
On 25/04/11 02:20, Nick wrote: Hi all, I'm using someone's Squid service but I want to find out if the squid is configured in Reverse mode or transparent mode. I don't have access to the configuration. Is there any way to find out? Make a telnet port-80 to another random website. If it goes

Re: [squid-users] How to redirect / preserve header between source and destination?

2011-04-25 Thread Amos Jeffries
On 23/04/11 17:23, Andreas Braathen wrote: Hi, I've noticed that squid manipulates the headers/traffic from a source towards a destination. The squid is acting like a mediator with my config - how is it possible to forward the exact header retrieved from a client without squid changing it?

Re: [squid-users] Default TCP/IP parameters of squid and linux and recommendations

2011-04-25 Thread Amos Jeffries
On 22/04/11 19:32, a bv wrote: Hi, For a linux which runs squid and will act as a proxy what are the parameters youll recommend to change and why and how (on both linux and squid)? (especially with TCP/IP stack, TIME_WAIT, maximum connect.ion limits vs) Regards It would be helpful if you

Re: [squid-users] Dependencies to build squid-3.1.12

2011-04-25 Thread Amos Jeffries
On 22/04/11 07:42, Pablo Hrbacek wrote: Hello! I want to compile a squid 3.1.12 in Debian Lenny but I don't know what packages I need. Please help me. The Debian source package for 3.1.12 in the Unstable or Testing source repositories requires these:

Re: [squid-users] forwarded_for ? in 3.2.x

2011-04-25 Thread Amos Jeffries
On 22/04/11 02:08, jeffrey j donovan wrote: Greetings, I have a a transparent squid in a private net with a 1-1 NAT, Im trying to get a good understanding of what my clients look like to the outside. What is the Default setting for forwarded_for if my system is running intercept?

Re: [squid-users] I would like to use Squid for caching but it is imperative that all files be cached.

2011-04-25 Thread Amos Jeffries
On 22/04/11 04:57, Sheridan Dan Small wrote: First I will explain what I am trying to do. I have a number of tests (executables and scripts) which run on resources downloaded via HTTP, FTP etc. Some of these tests are third party compiled executables which would be problematic to change. The

Re: [squid-users] Why doesn't REQUEST_HEADER_ACCESS work properly with aclnames?

2011-04-25 Thread Amos Jeffries
On 21/04/11 13:04, Jenny Lee wrote: I have 3.2.0.1 and unfortunately this does not work either. I will check on 3.2.0.7 (would that make a difference?). May do. I don't recall changing anything there directly but the passing around of request details has been fixed in a few places earlier

Re: [squid-users] ACL::checklistMatches WARNING: 'http_err_log' ACL is used but there is no HTTP reply -- not matching.

2011-04-25 Thread Amos Jeffries
On 23/04/11 19:11, Edward Ting wrote: Hi Amos, You mentioned in the post below that this is One of the design flaws we have not yet removed from Squid.. Is there a bug ID already? This could be from many places for many reasons. Care to track down where the problem is and see if its

[squid-users] Zero Sized Reply went trying FTP

2011-04-25 Thread Javier
Hello: went i navigate to: ftp://novapublishers.com/... squid3 sent me a: Zero Sized Reply my acl is: ftp proto ftp http_access allow ftp my squd3 version is: 3.1.6 please help me.. thanks, Javier -- View this message in context:

[squid-users] Reverse Proxy on Squid to port 8080

2011-04-25 Thread Ali Jawad
Hi I have got a reverse proxy that is working just fine, it accepts requests on port 443 and port 80 and ONLY sends traffic upstream to port 80 to the apache server listening on localhost. I use the following config: https_port 10.14.1.72:443 cert=/etc/squid/self_certs/site.crt

[squid-users] Squid and Splash page

2011-04-25 Thread Daniel Shelton
Hello again all, First of all, thanks to Amos and Andrew for replying to my previous question. I have setup squid_session with the following in squid.conf. The result is attached below also. For whatever reason the squid sessions are crashing and I am not sure why. The goal would be to

RE: [squid-users] Why doesn't REQUEST_HEADER_ACCESS work properly with aclnames?

2011-04-25 Thread Jenny Lee
I'm a little confused by this scenario and your statement It would be nice if the crawler identified itself. Is it spoofing an agent name identical that on your OFFICE machines? Even the absence of a U-A header is identification in a way. That was just an example. In its simplest form: DO

Re: [squid-users] Re: Squid Cache flush

2011-04-25 Thread Jawahar Balakrishnan (JB)
The problem is not refreshing content from the CMS. Our deployment will be Squid reverse proxying an app server that in turn talks to the CMS for the content and adds the look and feel to the content. So squid will be caching the final url. the challenge is to figure out how to get squid to be

Re: [squid-users] Re: Squid Cache flush

2011-04-25 Thread Ron Wheeler
Have you tested to see if any of these concerns are in fact something that can happen. It is my understanding that Squid will ask the app server if the content is new or not and if the app server says that the text is new and the photo is old, then squid will ask for a new copy of the test

Res: Res: [squid-users] squid 3.2.0.5 smp scaling issues

2011-04-25 Thread Marcos
thanks for your answer David. i'm seeing too much feature been included at squid 3.x, but it's getting as slower as new features are added. i think squid 3.2 with 1 worker should be as fast as 2.7, but it's getting slower e hungry. Marcos - Mensagem original De: da...@lang.hm

[squid-users] Effort for port 3.1 to windows?

2011-04-25 Thread 叶雨飞
Hi there, Is there any effort now to port 3.1 to windows? I know there's one for 2.7, and be struggling to get it compile on vs2010 and win7 sdk. But it is so complicated and horribly broken by new CRT security features (which can be fixed by adding some code) and Winsocks changes. I managed to

RE: [squid-users] Re: SSLBump+DynamicSSL not working in Squid 3.2.0.7?

2011-04-25 Thread Ming Fu
I experience the same problem for 3.2.0.7 on FreeBSD 8.0. When https to a site, the CONNECT request is sent for reqmod, but after receiving the reqmod reply, the squid is not proceeding to make the connection to the web server. Here is the logs with debug option for 93 and 28 on. 2011/04/25

[squid-users] Re: Effort for port 3.1 to windows?

2011-04-25 Thread sichent
On 4/25/2011 9:26 PM, Yucong Sun (叶雨飞) wrote: Hi there, Is there any effort now to port 3.1 to windows? I know there's one for 2.7, and be struggling to get it compile on vs2010 and win7 sdk. But it is so complicated and horribly broken by new CRT security features (which can be fixed by

[squid-users] How to diagnose race condition?

2011-04-25 Thread Steve Snyder
I just upgraded from CentOS 5.5 to CentOS 5.6, while running Squid v3.1.12.1 in both environments, and somehow created a race condition in the process. Besides updating the 200+ software packages that are the difference between 5.5 and 5.6, I configured and enabled DNSSEC on my nameserver.

Re: [squid-users] How to diagnose race condition?

2011-04-25 Thread George Herbert
On Mon, Apr 25, 2011 at 2:41 PM, Steve Snyder swsny...@snydernet.net wrote: I just upgraded from CentOS 5.5 to CentOS 5.6, while running Squid v3.1.12.1 in both environments, and somehow created a race condition in the process.   Besides updating the 200+ software packages that are the

Re: Res: [squid-users] squid 3.2.0.5 smp scaling issues

2011-04-25 Thread Alex Rousskov
On 04/14/2011 09:06 PM, da...@lang.hm wrote: Ok, I finally got a chance to test 2.7STABLE9 it performs about the same as squid 3.0, possibly a little better. with my somewhat stripped down config (smaller regex patterns, replacing CIDR blocks and names that would need to be looked up in

Re: [squid-users] Re: Effort for port 3.1 to windows?

2011-04-25 Thread 叶雨飞
Well, thanks for the pointer, But as far as I can see there, it's a installer, how did you generate the binary? what I really hoping for, is to compile and run 3.1 normally on windows. Well, 2.7 may cut it as well since I need mostly existing features, but I can't get it compile correctly either.

Re: Res: Res: [squid-users] squid 3.2.0.5 smp scaling issues

2011-04-25 Thread david
On Mon, 25 Apr 2011, Marcos wrote: thanks for your answer David. i'm seeing too much feature been included at squid 3.x, but it's getting as slower as new features are added. that's unfortunantly fairly normal. i think squid 3.2 with 1 worker should be as fast as 2.7, but it's getting

Re: Res: [squid-users] squid 3.2.0.5 smp scaling issues

2011-04-25 Thread david
On Mon, 25 Apr 2011, Alex Rousskov wrote: On 04/14/2011 09:06 PM, da...@lang.hm wrote: Ok, I finally got a chance to test 2.7STABLE9 it performs about the same as squid 3.0, possibly a little better. with my somewhat stripped down config (smaller regex patterns, replacing CIDR blocks and

Re: Res: [squid-users] squid 3.2.0.5 smp scaling issues

2011-04-25 Thread david
On Mon, 25 Apr 2011, da...@lang.hm wrote: On Mon, 25 Apr 2011, Alex Rousskov wrote: On 04/14/2011 09:06 PM, da...@lang.hm wrote: In addition, there seems to be some sort of locking betwen the multiple worker processes in 3.2 when checking the ACLs There are pretty much no locks in the

Re: [squid-users] Zero Sized Reply went trying FTP

2011-04-25 Thread Amos Jeffries
On 25/04/11 23:45, Javier wrote: Hello: went i navigate to: ftp://novapublishers.com/... squid3 sent me a: Zero Sized Reply my acl is: ftp proto ftp http_access allow ftp my squd3 version is: 3.1.6 Please try the 3.1.12 version. There have been two causes of Zero Sized Reply fixed

Re: Res: [squid-users] squid 3.2.0.5 smp scaling issues

2011-04-25 Thread Alex Rousskov
On 04/25/2011 05:31 PM, da...@lang.hm wrote: On Mon, 25 Apr 2011, da...@lang.hm wrote: On Mon, 25 Apr 2011, Alex Rousskov wrote: On 04/14/2011 09:06 PM, da...@lang.hm wrote: In addition, there seems to be some sort of locking betwen the multiple worker processes in 3.2 when checking the

Re: [squid-users] Squid and Splash page

2011-04-25 Thread Amos Jeffries
On 26/04/11 02:54, Daniel Shelton wrote: Hello again all, First of all, thanks to Amos and Andrew for replying to my previous question. I have setup squid_session with the following in squid.conf. The result is attached below also. For whatever reason the squid sessions are crashing and I

Re: Res: [squid-users] squid 3.2.0.5 smp scaling issues

2011-04-25 Thread david
On Mon, 25 Apr 2011, Alex Rousskov wrote: On 04/25/2011 05:31 PM, da...@lang.hm wrote: On Mon, 25 Apr 2011, da...@lang.hm wrote: On Mon, 25 Apr 2011, Alex Rousskov wrote: On 04/14/2011 09:06 PM, da...@lang.hm wrote: In addition, there seems to be some sort of locking betwen the multiple

[squid-users] squid 3.1 android ebuddy

2011-04-25 Thread Gerson Barreiros
Hi, I'm using Squid 3.1.12.1 (Amos ppa-maverick) and i got some weird problem. Users with Android2 can't get 'ebuddy' to work, but for iPhone users, it works. (?) I've made an exception on firewall (for 38.99.73.0/24) to ebuddy connections skip squid, now it works for both. Anyone know

Re: [squid-users] Re: Effort for port 3.1 to windows?

2011-04-25 Thread Amos Jeffries
On 26/04/11 11:02, Yucong Sun (叶雨飞) wrote: Well, thanks for the pointer, But as far as I can see there, it's a installer, how did you generate the binary? what I really hoping for, is to compile and run 3.1 normally on windows. Well, 2.7 may cut it as well since I need mostly existing features,

Re: [squid-users] squid 3.1 android ebuddy

2011-04-25 Thread Amos Jeffries
On 26/04/11 12:19, Gerson Barreiros wrote: Hi, I'm using Squid 3.1.12.1 (Amos ppa-maverick) and i got some weird problem. Users with Android2 can't get 'ebuddy' to work, but for iPhone users, it works. (?) I've made an exception on firewall (for 38.99.73.0/24) to ebuddy connections skip

Re: [squid-users] Reverse Proxy on Squid to port 8080

2011-04-25 Thread Amos Jeffries
On 26/04/11 01:11, Ali Jawad wrote: Hi I have got a reverse proxy that is working just fine, it accepts requests on port 443 and port 80 and ONLY sends traffic upstream to port 80 to the apache server listening on localhost. I use the following config: https_port 10.14.1.72:443

Re: [squid-users] Why doesn't REQUEST_HEADER_ACCESS work properly with aclnames?

2011-04-25 Thread Amos Jeffries
On 26/04/11 05:27, Jenny Lee wrote: snip HALF-BAKED: acl OFFICE src 1.1.1.1 request_header_access User-Agent allow OFFICE request_header_access User-Agent deny all request-header_replace User-Agent BOGUS AGENT [DIRECT works as expected for OFFICE -- no modifications. However, UA for OFFICE

Re: [squid-users] Re: Effort for port 3.1 to windows?

2011-04-25 Thread 叶雨飞
Hi Amos, You can get VS2010 Express for free at here http://www.microsoft.com/express/Downloads/#2010-Visual-CPP Win SDK are free as well http://msdn.microsoft.com/en-us/windows/bb980924 but it's not required to build. You get get other VC Express version free as well. There's some change in

Re: Res: [squid-users] squid 3.2.0.5 smp scaling issues

2011-04-25 Thread Alex Rousskov
On 04/25/2011 06:14 PM, da...@lang.hm wrote: if that regains the speed and/or scalability it would point fingers fairly conclusively at the DNS components. this is the only think that I can think of that should be shared between multiple workers processing ACLs but it is _not_ currently

Re: Res: [squid-users] squid 3.2.0.5 smp scaling issues

2011-04-25 Thread david
On Mon, 25 Apr 2011, Alex Rousskov wrote: On 04/25/2011 06:14 PM, da...@lang.hm wrote: if that regains the speed and/or scalability it would point fingers fairly conclusively at the DNS components. this is the only think that I can think of that should be shared between multiple workers

Re: [squid-users] Re: Effort for port 3.1 to windows?

2011-04-25 Thread Amos Jeffries
On 26/04/11 14:57, Yucong Sun (叶雨飞) wrote: Hi Amos, You can get VS2010 Express for free at here http://www.microsoft.com/express/Downloads/#2010-Visual-CPP Win SDK are free as well http://msdn.microsoft.com/en-us/windows/bb980924 but it's not required to build. You get get other VC Express