Re: [squid-users] How to use tcp_outgoing_address with cache_peer

2013-04-30 Thread Amos Jeffries
On 30/04/2013 2:49 a.m., Alex Domoradov wrote: On Mon, Apr 29, 2013 at 4:57 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 26/04/2013 10:57 p.m., Alex Domoradov wrote: On Fri, Apr 26, 2013 at 12:31 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 26/04/2013 8:37 p.m., Alex Domoradov wrote:

Re: [squid-users] How to use tcp_outgoing_address with cache_peer

2013-04-30 Thread Alex Domoradov
On Tue, Apr 30, 2013 at 9:16 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 30/04/2013 2:49 a.m., Alex Domoradov wrote: On Mon, Apr 29, 2013 at 4:57 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 26/04/2013 10:57 p.m., Alex Domoradov wrote: On Fri, Apr 26, 2013 at 12:31 PM, Amos

[squid-users] Re: How to use tcp_outgoing_address with cache_peer

2013-04-30 Thread babajaga
Hi, just my few cents: Up to my understanding. what is going in here, the original simple tcp_outgoing_address yyy.yyy.yyy.239 forces squid to use this outgoing interface for all connections, overriding or taking precedence over the cache_peer condition. It will just depend upon the sequence

Re: [squid-users] Re: How to use tcp_outgoing_address with cache_peer

2013-04-30 Thread Amos Jeffries
On 30/04/2013 8:16 p.m., babajaga wrote: Hi, just my few cents: Up to my understanding. what is going in here, the original simple tcp_outgoing_address yyy.yyy.yyy.239 forces squid to use this outgoing interface for all connections, yes. overriding or taking precedence over the cache_peer

[squid-users] Caching dynamic content, trading between HTTP versions

2013-04-30 Thread Andrea Aime
Hi, I'm trying to stand up a multi-level cache of dynamically generated content and having some design issues with inconsistent version of HTTP protocol used before and after the cache. Basically, I have a webapp that generates dynamic content for which it's possible to create an ETag, and handle

Re: [squid-users] Caching dynamic content, trading between HTTP versions

2013-04-30 Thread Amos Jeffries
On 30/04/2013 9:14 p.m., Andrea Aime wrote: Hi, I'm trying to stand up a multi-level cache of dynamically generated content and having some design issues with inconsistent version of HTTP protocol used before and after the cache. Basically, I have a webapp that generates dynamic content for

Re: [squid-users] Caching dynamic content, trading between HTTP versions

2013-04-30 Thread Andrea Aime
Thanks for the prompt reply. Comments inline. On Tue, Apr 30, 2013 at 12:21 PM, Amos Jeffries squ...@treenet.co.nz wrote: So basically, we need the cache to talk HTTP 1.1 with the webapp. Both If-Modified-Since and If-None-Modified are optional features. There is no requirement in HTTP for

Re: [squid-users] Caching dynamic content, trading between HTTP versions

2013-04-30 Thread Amos Jeffries
On 30/04/2013 10:45 p.m., Andrea Aime wrote: Thanks for the prompt reply. Comments inline. On Tue, Apr 30, 2013 at 12:21 PM, Amos Jeffries squ...@treenet.co.nz wrote: So basically, we need the cache to talk HTTP 1.1 with the webapp. Both If-Modified-Since and If-None-Modified are optional

[squid-users] Squid 3.2.10 not compilable under OpenBSD 5.2 (updated to3.3.4)

2013-04-30 Thread Loïc Blot
Hi, i've upgraded from 3.2.10 to 3.3.4. Same problem appears on includes which are in /usr/local/includes Also i have another problem, sometimes squid uses 100%CPU and keep at this state indefinitely, i must kill squid process and restart it. This problem appears since 3.2.10 (this problem wasn't

[squid-users] Squid and Java applets

2013-04-30 Thread Fuhrmann, Marcel
Hi list, is there any special config I need to allow java content? CentOS 6.3 x64 Squid 3.1.10 I can't get this Java applet: (Software-Zertifikat - Login) https://www.elsteronline.de/eportal/Oeffentlich.tax But only with Windows 2003 and IE8! Win7/Win2008 with IE9 works fine. With Win2003 IE

[squid-users] Connection pooling backend servers

2013-04-30 Thread Roy Reznik
Is there some way to maintain a connection pool to backend servers? I tried using this: http_port 3128 accel vhost protocol=https tcpkeepalive=60 When I try looking at it using tshark, I can see that for every request an SSL handshake is made between squid and the back-end server. Thanks, Roy.

[squid-users] Re: need help in cache_peer

2013-04-30 Thread babajaga
What does squid -v say ? Are you using LUSCA as squidA ? -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/need-help-in-cache-peer-tp4659677p4659733.html Sent from the Squid - Users mailing list archive at Nabble.com.

[squid-users] [BUG] Squid 3.2.x drops connections on -k rotate

2013-04-30 Thread Luciano Ruete
Hi, We are using squid 3.2.9 (but I checked change log up to 3.2.11 before writing this mail). If a user behind proxy starts a long file download and in the meantime we do a -k rotate, that download gets broken. I think this is a bug.

[squid-users] Re: need help in cache_peer

2013-04-30 Thread babajaga
This should explain the unexpected behaviour. i put debug_options ALL,5 33,2 28,9 in squid.conf(A) but no thing new in cache.log l and no thing forwarded to cache(B) Because this can NOT be in case of valid 2.7, for example. LUSCA srces might have other debugs. Sorry, I can not help any

Re: [squid-users] Re: How to use tcp_outgoing_address with cache_peer

2013-04-30 Thread Alex Domoradov
On Tue, Apr 30, 2013 at 11:46 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 30/04/2013 8:16 p.m., babajaga wrote: Hi, just my few cents: Up to my understanding. what is going in here, the original simple tcp_outgoing_address yyy.yyy.yyy.239 forces squid to use this outgoing interface

[squid-users] TCP_DENIED/407 in client_http.errors?

2013-04-30 Thread Carlos Defoe
Hello guys, I'm facing the same issue Tom Tux have in this thread: http://www.squid-cache.org/mail-archive/squid-users/201008/0631.html As far as i understood, the TCP_DENIED/407 is normal in authenticated environments. My question is: Do these TCP_DENIED/407 count in the client_http.errors,

[squid-users] SSL Reverse Proxy Domain Mismatch

2013-04-30 Thread Paul Carew
Hi I have Squid 3.3.4 setup as an SSL reverse proxy for web based mail. The domain name on the outside is something like mail.example.org and the domain name on the inside is something like webmail.example.local. I am getting a TLS code: SQUID_X509_V_ERR_DOMAIN_MISMATCH error when trying to

[squid-users] Re: How to use tcp_outgoing_address with cache_peer

2013-04-30 Thread babajaga
Amos, although a bit off topic: It does not work the way you seem to think. 2x 200GB cache_dir entries have just as much space as 1x 400GB. Using two cache_dir allows Squid to balance teh I/O loading on teh disks while simultaenously removing all processing overheads from RAID. Am I correct

Re: [squid-users] [BUG] Squid 3.2.x drops connections on -k rotate

2013-04-30 Thread Amos Jeffries
On 1/05/2013 4:04 a.m., Luciano Ruete wrote: Hi, We are using squid 3.2.9 (but I checked change log up to 3.2.11 before writing this mail). If a user behind proxy starts a long file download and in the meantime we do a -k rotate, that download gets broken. I think this is a bug. If it

Re: [squid-users] Connection pooling backend servers

2013-04-30 Thread Amos Jeffries
On 1/05/2013 1:40 a.m., Roy Reznik wrote: Is there some way to maintain a connection pool to backend servers? I tried using this: http_port 3128 accel vhost protocol=https tcpkeepalive=60 This is the control for client-to-Squid connections. The tcpkeepalive only affects the interval between

Re: [squid-users] Re: How to use tcp_outgoing_address with cache_peer

2013-04-30 Thread Amos Jeffries
On 1/05/2013 6:34 a.m., Alex Domoradov wrote: On Tue, Apr 30, 2013 at 11:46 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 30/04/2013 8:16 p.m., babajaga wrote: Hi, just my few cents: Up to my understanding. what is going in here, the original simple tcp_outgoing_address yyy.yyy.yyy.239