Re: [squid-users] Question about "proxy_auth REQUIRED" and the case of flushing the authentication-cache

2013-02-25 Thread Amos Jeffries
On 26/02/2013 2:31 p.m., Amos Jeffries wrote: On 25/02/2013 8:27 p.m., Tom Tom wrote: I've attached both cache-traces (squid 3.2.7). "without_407.txt" has the following configuration: ... ... external_acl_type SQUID_KERB_LDAP ttl=7200 children-max=10 children-startup=1 children-idle=1 negative_

[squid-users] Re: store_avg_object_size -- default needs updating?

2013-02-25 Thread Linda W
Alex Rousskov wrote: > On 02/18/2013 04:01 PM, Linda W wrote: >> Has anyone looked at their average cached object size >> lately? >> >> At one point, I assume due to measurements, squid >> set a default to 13KB / item. >> >> About 6 or so years ago, I checked mine out: >> (cd /var/cache/squid; >> c

Re: [squid-users] Question about "proxy_auth REQUIRED" and the case of flushing the authentication-cache

2013-02-25 Thread Amos Jeffries
On 25/02/2013 8:27 p.m., Tom Tom wrote: I've attached both cache-traces (squid 3.2.7). "without_407.txt" has the following configuration: ... ... external_acl_type SQUID_KERB_LDAP ttl=7200 children-max=10 children-startup=1 children-idle=1 negative_ttl=7200 %LOGIN /usr/local/squid/libexec/ext_ke

Re: [squid-users] Squid 3.3.1 Compiler Error

2013-02-25 Thread Amos Jeffries
On 25/02/2013 9:27 a.m., Adam W. Dace wrote: Thanks a lot, that patch did the trick. I would've helped more but I'm not much of a C++ guy. Relevant output: 2013/02/24 14:23:22 kid1| Squid Cache (Version 3.2.7): Exiting normally. 2013/02/24 14:23:58 kid1| Starting Squid Cache version 3.3.1 for

Re: [squid-users] Using squid to get netflix access on iPhone (or boxee box)

2013-02-25 Thread Amos Jeffries
On 25/02/2013 12:24 p.m., Henning Reich wrote: Hi, I hope its the correct address for my problem. I'm living in germany and want to get access to the us-netflix. So, i set up a amazon EC2 instance in the united states and install openvpn/pptpd and squid3. Openvpn works fine (of corse only if i

Re: [squid-users] tproxy configuration

2013-02-25 Thread Amos Jeffries
On 25/02/2013 3:00 p.m., Roman Gelfand wrote: Amos, Do you have an idea as to what I am doing wrong here? Unfortunately no. All the things that were wrong have apparently been fixed without affecting the outcome. There is nothing more I can suggest besides a double-triple-check of the enti

Re: [squid-users] Re: DNS Queue Remains Filled Issue!

2013-02-25 Thread Amos Jeffries
On 25/02/2013 7:47 p.m., arshan wrote: Hi, Thanks for response & sorry for late reply coz i have just recovered from fever Are they the same ones constantly? even after the timeout is reported to clients? No, the ids remains changing but all the clients keep on receiving timeout message.

Re: [squid-users] Re: slow browsing in centos 6.3 with squid 3 !!

2013-02-25 Thread Amos Jeffries
On 26/02/2013 6:34 a.m., Marcus Kool wrote: On 02/25/2013 01:51 PM, Ahmad wrote: hi Marcus , u must be correct , i have 32 G total memory , ive confiured in cache_mem =2 M which is 20 G !! ive noticed that squid hanged and got down after some hours of operating !! i looked at all logs

Re: [squid-users] Re: About bottlenecks (Max number of connections, etc.)

2013-02-25 Thread Amos Jeffries
On 25/02/2013 1:24 p.m., Manuel wrote: I have noticed that it always start to fail when there are only available exactly 3276 file descriptors and 13108 file desc in use. That is almost exactly 20% free file descriptors. Still it look for me that there is a problem of not enough file descriptors

Re: [squid-users] Re: Re: Re: squid kerberos authenticators spamming AD and locking out users

2013-02-25 Thread Brett Lymn
On Mon, Feb 25, 2013 at 11:13:35PM +, Markus Moeller wrote: > Maybe it has to do with Samba and NTLM. DO you use the same AD account for > samba and Kerberos ? You should not do that, use different AD accounts as > Smaba might invalidate the keytab. > We use separate accounts for samba & th

[squid-users] Re: Re: Re: squid kerberos authenticators spamming AD and locking out users

2013-02-25 Thread Markus Moeller
Maybe it has to do with Samba and NTLM. DO you use the same AD account for samba and Kerberos ? You should not do that, use different AD accounts as Smaba might invalidate the keytab. Markus "Brett Lymn" wrote in message news:20130224232500.ga7...@baea.com.au... On Fri, Feb 22, 2013 at 02:4

Re: [squid-users] Cache_peer and follow_x_forwarded_for

2013-02-25 Thread Amos Jeffries
On 26/02/2013 2:57 a.m., Rafael Gomes wrote: I wanna get the real ip of client. I have a server1 (10.2.3.20) with this option: cache_peer 10.2.3.21 parent 8080 3130 round-robin name=squidpeer1 never_direct allow all miss_access allow all Server2 (10.2.3.21) has this option follow_x_forwarded_

Re: [squid-users] Re: slow browsing in centos 6.3 with squid 3 !!

2013-02-25 Thread Marcus Kool
On 02/25/2013 01:51 PM, Ahmad wrote: hi Marcus , u must be correct , i have 32 G total memory , ive confiured in cache_mem =2 M which is 20 G !! ive noticed that squid hanged and got down after some hours of operating !! i looked at all logs of squid and squidguard , i didnt find any err

[squid-users] Re: slow browsing in centos 6.3 with squid 3 !!

2013-02-25 Thread Ahmad
hi Marcus Kool wrote > Ahmad, > > Also look at http://wiki.squid-cache.org/SquidFaq/SquidMemory > Hint: a 1500 GB disk cache requires a very large in-memory index. > > Also reserve memory for squidguard and the OS. > > Marcus > > > On 02/25/2013 05:18 AM, Ahmad wrote: >> Amos Jeffries-2 wrot

Re: [squid-users] About bottlenecks (Max number of connections, etc.)

2013-02-25 Thread Alex Rousskov
On 02/23/2013 09:10 PM, Amos Jeffries wrote: > But once you are reaching the above types of limit there is no magic > setting that can gain big %-points more speed. Actually, there is: "workers N" :-). I have seen SMP Squid handling about Gbit of traffic while doing authentication, URL rewriting,

Re: [squid-users] Re: slow browsing in centos 6.3 with squid 3 !!

2013-02-25 Thread Marcus Kool
Ahmad, Also look at http://wiki.squid-cache.org/SquidFaq/SquidMemory Hint: a 1500 GB disk cache requires a very large in-memory index. Also reserve memory for squidguard and the OS. Marcus On 02/25/2013 05:18 AM, Ahmad wrote: Amos Jeffries-2 wrote On 25/02/2013 12:30 a.m., Ahmad wrote: he

[squid-users] Cache_peer and follow_x_forwarded_for

2013-02-25 Thread Rafael Gomes
I wanna get the real ip of client. I have a server1 (10.2.3.20) with this option: cache_peer 10.2.3.21 parent 8080 3130 round-robin name=squidpeer1 never_direct allow all miss_access allow all Server2 (10.2.3.21) has this option follow_x_forwarded_for allow all All the clients request only ser

[squid-users] Re: can we use squidguard without caching ??

2013-02-25 Thread Ahmad
sorry for that , this is a FAQ question , wish to remove the post with my best regards -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/can-we-use-squidguard-without-caching-tp4658703p4658706.html Sent from the Squid - Users mailing list archive at Nabble.c

Re: [squid-users] can we use squidguard without caching ??

2013-02-25 Thread Coenraad Loubser
Have you tried anything? Ie. one of the many solutions here: https://www.google.co.za/search?q=squid+disable+caching If so, what were the results? I believe most people on here will gladly help you if you encounter problems, but will take offence if you simply try to outsource your thinking facu

Re: [squid-users] Store object length

2013-02-25 Thread Amos Jeffries
This is a code question. Please followup on squid-dev mailing list. The developers can help you more with this than the Squid users can. On 25/02/2013 8:00 p.m., anita wrote: Hi All, I am trying to write an API that will fetch objects from the squid cache given the url and http method. When

[squid-users] can we use squidguard without caching ??

2013-02-25 Thread Ahmad
hi , i want to ask a question , assume i want to test browsing in the absene of caching files ""only squidguard " i mean i just want to filter the porn sites and dont do any cache "read or write " in my hardsiks . can squid allow me ? -- View this message in context: http://squid-web-proxy-

[squid-users] Re: slow browsing in centos 6.3 with squid 3 !!

2013-02-25 Thread Ahmad
hi , i have server delr720 . i have centos 6.3 x68_64 bit , with kernel 3.7.5 compiled with "tproxy" support i have ram 32 Giga . i have 4 hardsiks as follow: hardisk#1==>opertaing system 170 giga ssd hardsik with name sda hardsik#2 , hardsik#3 , hardsik#4 , ===>had been as raid 0 with name sdb

Re: [squid-users] Re: slow browsing in centos 6.3 with squid 3 !!

2013-02-25 Thread Amos Jeffries
On 25/02/2013 9:18 p.m., Ahmad wrote: Amos Jeffries-2 wrote On 25/02/2013 12:30 a.m., Ahmad wrote: hello , thanks Amos , ive modified the config file as u suggested . after removing the raid 0 , ive noted a better performance . = in

Re: [squid-users] Hit-ratio graph: can anyone explain what we see here?

2013-02-25 Thread Amos Jeffries
On 25/02/2013 9:08 p.m., Coenraad Loubser wrote: Hi All I'm very curious so as to everyone's casual explanations for what could cause the up-and-down pattern visible in this hit-ratio graph: http://imm.io/XkQ4 I have my own ideas but will reserve them for the time being so as to allow you to sh

[squid-users] Re: problem in squid 2.7stable9 with debian 6.0.1 with some sites!!!

2013-02-25 Thread Ahmad
babajaga wrote > IF no problem to ping www.alhurani.com THEN > IF Problem also with a default squid.conf THEN rebuild squid > with a stripped-down "configure" > Still a problem ? > > > I just tried with my squid to access www.alhurani.com, no problem at all. > My squid:

[squid-users] Re: slow browsing in centos 6.3 with squid 3 !!

2013-02-25 Thread Ahmad
Amos Jeffries-2 wrote > On 25/02/2013 12:30 a.m., Ahmad wrote: >> hello , >> thanks Amos , ive modified the config file as u suggested . >> after removing the raid 0 , ive noted a better performance . >> = >> in general , browsing speed

[squid-users] Hit-ratio graph: can anyone explain what we see here?

2013-02-25 Thread Coenraad Loubser
Hi All I'm very curious so as to everyone's casual explanations for what could cause the up-and-down pattern visible in this hit-ratio graph: http://imm.io/XkQ4 I have my own ideas but will reserve them for the time being so as to allow you to share an unbiased opinion first. :-) Coenraad Loubse