Re: [squid-users] Question about encryption of data

2013-04-11 Thread Squidblacklist
The most common response to your question would be to suggest that you use a vpn server to connect your clients to your server then to squid in a secured fashion, However, there are many other ways to achieve your goal as well, you could do it via a socks5 proxy, your clients to your server, and fo

Re: [squid-users] squid-internal-mgr not found - cannot login to cachemgr

2013-04-11 Thread brendan kearney
according to "man cachemgr.cgi", the default proxy port is assumed if no port is specified. if i am mistaken, where would be the appropriate place to configure the port for the cachemgr? CONFIGURATION Configuration examples for many common web servers can be found in the Squid FAQ wiki. h

[squid-users] Re: Question about encryption of data

2013-04-11 Thread babajaga
You might use (secure) SPDY. Although still under development, and a new, ongoing google project. For a beginning: https://groups.google.com/forum/?fromgroups=#!topic/spdy-dev/pON010b6oiM -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Question-about-encrypti

[squid-users] Question about encryption of data

2013-04-11 Thread Maziyar Keshavarzian
Hello everyone, I have a question about squid. Forgive me if it is a basic one. Is it possible to encrypt data between squid server and other users? I am planning to use squid as a tool to bypass internet filtering. And it is important for me to have the data encrypted, I know that they are using

RE: [squid-users] Issue related to using Squid 3.1 or 3.29 and accessing a site that uses a recursive DNS record. (30 seconds to bring up site)

2013-04-11 Thread Duncan, Brian M.
>One last thing to check is what happens when you query for records >on that domain. That is the major change between 3.1 and 3.2 DNS. >What I get is: >## time host -t A webapps.kattenlaw.com >webapps.kattenlaw.com has address 38.98.128.19 >0.000u 0.004s 0:00.06 0.0% 0+0k 0+0io 0pf+0w

Re: [squid-users] Need help on SSL bump and certificate chain

2013-04-11 Thread Prasanna Venkateswaran
Hi Guy, We want to be a man-in-the middle but we want to get the approval from clients/end-users out of band by accepting the terms and conditions. The self signed certificates is sort of ok with browsers. But many other applications like dropbox sync, AV dat update, vpn , etc fail because

[squid-users] high traffic with google

2013-04-11 Thread Alexandre Chappaz
Hi, we are handling a rather large network ( ~140Kusers ) and we use one unique public IP address for internet traffic. This lead google to get suspicious with us ( captcha with each search ) Do you know if google can whitelist us in some way? where to contact them? any way to smartly bypass this

Re: [squid-users] high memory usage (squid 3.2.0)

2013-04-11 Thread Alex Rousskov
On 04/10/2013 03:37 PM, Mr Dash Four wrote: > Alex Rousskov wrote: >> The total memory used by Squid is, roughly: >> >>1) initial memory used by Squid shortly after start + >>2) memory used to store memory-cached objects + >>3a) memory used to index memory-cached objects + >>3b) mem

[squid-users] Re: Order of authentication schemes in Proxy-Authenticate

2013-04-11 Thread babajaga
There is a bug in new FF regarding kerberos auth. May be, that matters: https://bugzilla.mozilla.org/show_bug.cgi?id=857291 Regarding: http://wiki.squid-cache.org/action/show/Features/Authentication#Can_I_use_different_authentication_mechanisms_together.3F It states: >Due to a bug in common Use

[squid-users] Re: peer-cache question

2013-04-11 Thread babajaga
Fine, at least some progress. Now you should upgrade your squid and verify, that http forwarding still works. http://wiki.squid-cache.org/Features/BumpSslServerFirst is based on squid 3.3 But you have 3.1 You should not use any other wiki/info as directly mentioned here in the forum. Because the

Re: [squid-users] Issue related to using Squid 3.1 or 3.29 and accessing a site that uses a recursive DNS record. (30 seconds to bring up site)

2013-04-11 Thread Amos Jeffries
On 11/04/2013 1:52 a.m., Duncan, Brian M. wrote: I opened a bug report on this today. Thanks One last thing to check is what happens when you query for records on that domain. That is the major change between 3.1 and 3.2 DNS. What I get is: ## time host -t A webapps.kattenlaw.com

Re: [squid-users] squid 3.x expected max throughput

2013-04-11 Thread Amos Jeffries
On 11/04/2013 10:48 p.m., Youssef Ghorbal wrote: On Apr 11, 2013, at 12:13 PM, Amos Jeffries wrote: On 11/04/2013 12:23 a.m., Youssef Ghorbal wrote: I was aware of that page. As you said, it's often RPS so it's not relevant for me. It is more relevant than you seem to think. Squid processing

Re: [squid-users] Local Squid to Reverse Squid to keyserver.ubuntu.com

2013-04-11 Thread Amos Jeffries
On 8/04/2013 4:24 a.m., Christopher H. Laco wrote: Ok, I've solved this as much as I need too without digging into the squid source itself. I fired up tcpdump and took a capture of the failed attempt from the proxy to the keyserver using 3.1.19, then a capture of the successful attempt from the

Re: [squid-users] squid 3.x expected max throughput

2013-04-11 Thread Youssef Ghorbal
On Apr 11, 2013, at 12:13 PM, Amos Jeffries wrote: > On 11/04/2013 12:23 a.m., Youssef Ghorbal wrote: >> I was aware of that page. >> As you said, it's often RPS so it's not relevant for me. > > It is more relevant than you seem to think. Squid processing overheads are > tied tightly to the req

Re: [squid-users] not working tproxy in squid 3.2

2013-04-11 Thread Oleg
On Tue, Apr 02, 2013 at 12:52:58AM +1300, Amos Jeffries wrote: > On 1/04/2013 7:40 p.m., Oleg wrote: > In your case with kernel limits of 800MB per-process this config > will guarantee it gets killed quickly. No memory leak required: > > cache_mem 900 MB > > From your config I see Squid is usin

Re: [squid-users] squid 3.x expected max throughput

2013-04-11 Thread Amos Jeffries
On 11/04/2013 12:23 a.m., Youssef Ghorbal wrote: I was aware of that page. As you said, it's often RPS so it's not relevant for me. It is more relevant than you seem to think. Squid processing overheads are tied tightly to the request parsing and ACL testing processes. These are relatively fi

Re: [squid-users] Order of authentication schemes in Proxy-Authenticate

2013-04-11 Thread Amos Jeffries
On 10/04/2013 4:23 p.m., Alan wrote: Is there any way to influence the order in which Squid sends the Proxy-Authenticate headers to the client? I already tried changing the order in the config file to no avail. That was the way to do it. Please test carefully and IF you have solid evidence of

Re: [squid-users] redirecting

2013-04-11 Thread Amos Jeffries
On 10/04/2013 11:59 p.m., folkert wrote: Hi, I'm trying to get the following to work: - all requests must go to the redirect_program.z after the request went through the redirect program: - all requests must be forwarder to proxy A - UNLESS they are to 172.19.0.0/16 or listed in /

Re: [squid-users] high memory usage (squid 3.2.0)

2013-04-11 Thread Amos Jeffries
On 11/04/2013 7:11 p.m., Marcello Romani wrote: Il 10/04/2013 17:22, Mr Dash Four ha scritto: Marcello Romani wrote: Il 10/04/2013 13:59, Mr Dash Four ha scritto: Marcello Romani wrote: Il 09/04/2013 19:33, Mr Dash Four ha scritto: > [snip] if the maximum_object_size_in_memory is reduced

Re: [squid-users] squid-internal-mgr not found - cannot login to cachemgr

2013-04-11 Thread Kinkie
On Thu, Apr 11, 2013 at 2:28 AM, brendan kearney wrote: > resending because i got a mailer-daemon failure for HTML formatting... > > all, > > i am running squid 3.2.5 on fedora 16 64 bit on two separate boxes, > load balanced with HA Proxy. i am trying to access cachemgr on either > one of the sq

Re: [squid-users] HTML Realtime Report SqStat in SQUID

2013-04-11 Thread Kinkie
> When I do I access http://192.168.0.1/ Apache page appears, then I think that > is missing in some additional configuration may be due SQUID or modify any > part of the SqStat PHP code. > > First described above ask for your kind help to correct my problem. Hi Daniel, On the SqStat page, I see

Re: [squid-users] high memory usage (squid 3.2.0)

2013-04-11 Thread Marcello Romani
Il 10/04/2013 17:22, Mr Dash Four ha scritto: Marcello Romani wrote: Il 10/04/2013 13:59, Mr Dash Four ha scritto: Marcello Romani wrote: Il 09/04/2013 19:33, Mr Dash Four ha scritto: > [snip] if the maximum_object_size_in_memory is reduced, then I suppose squid's memory footprint will ha