, and roll the software version to 3.0.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
nefits nothing from SMP
system.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
none of them reached the traffic of 200 MBits/Sec
(watched with iptraf).
We use squid for reverse-proxy for images/css/htmls etc.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
-Cache HIT from cache.163.com
The last line means this url get cached.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
and is that work correctly?
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
http://wiki.squid-cache.org/SquidFaq/ReverseProxy
If you're not in a reverse-proxy, squid most probably is in the network
as the clients themselves. Then the SSL transmission from clients to
Squid is unmeaning, just bypass them.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
(Status-Line) HTTP/1.0 200 OK
Connection keep-alive
Content-Length 6623
Content-Typeimage/gif
DateWed, 27 May 2009 03:13:09 GMT
ETag"9781c3-19df-45b36404d1e00"
Last-Modified Sat, 08 Nov 2008 23:54:32 GMT
Server Apache/2.2.3 (Red Hat)
Via 3.0 Squid
X-Cache MISS from localh
tup like transparent proxy,reverse proxy,authentication
etc.If you meet the problems at that time,welcome back to ask here.Yes,
there are some Squid experts and developers on this list,they can help
you much.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
t's UserAgent header (or most other headers).
But if going with httpd one could have the chance to do almost
everything based on Apache's API.This is the reason I once requested
squid team to privide API to 3rd developers.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
with that, unless you have met
special problems with them.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
re-install Squid from the sources.
When configure it, specify the "--enable-arp-acl" option:
# ./configure --prefix=/usr/local/squid --enable-arp-acl ...
# make && make install
There are Squid-2.7 and 3.0 available on squid-cache.org.
But there is not squid version 10.
--
may consider to increase the values for maximum_object_size and
maximum_object_size_in_memory in squid.conf.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
lowext
try:
acl allowext url_regex -i \.jpg$ \.png$ \.gif$ \.css$ \.js$
http_access allow allowext
http_access deny all
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
not provided by the website IMO.
It seems most likely you have met an error when accessed that site.
You could customize squid's error templates to hide the info.
The error template files are located in dir:
/path/to/squid/share/errors
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
ot;, either "cgi-bin" or "?" ?!
"?" means a dynamic request in url.
i.e, http://www.google.cn/search?hl=zh-CN&q=squid
which is a dynamic request, the string after "?" is the arguments for an
query. response for this request shouldn't be cached
ways to detect a proxy, it's not easy really to hide
a proxy.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
MonzT:
Hi,
I want to know if there is any way to limit maximum connection per FILE
or URL not just client ip.
You could run another separated Apache for those huge files.
And set "MaxClients" in httpd.conf to a reasonable value.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
stead of a redirector. They are much more tunable and
can receive more details about a request.
Amos
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
s in full bloom with flowers of evil.
- Jeff Pang (CN)
uid.
Amos may show the details.
--
In this magical land, everywhere
is in full bloom with flowers of evil.
- Jeff Pang (CN)
t;
>
--
In this magical land, everywhere
is in full bloom with flowers of evil.
- Jeff Pang (CN)
- Original Nachricht
Von: Sachin Malave
An: squid-users@squid-cache.org
Datum: 01.08.2009 14:37
Betreff: [squid-users] Running two squid3 process, Why?
> I am using squid3, After starting squid It creates two process
>
> $sudo squid3
> $ps -A
>
> It displays something li
- Original Nachricht
Von:
An: Squid Users
Datum: 01.08.2009 15:40
Betreff: [squid-users] [new] videocache question
> anyone know how to set squid.conf to cache video ?
An example configure for youtube:
http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube
- Original Nachricht
Von: Sachin Malave
An: squid-users@squid-cache.org
Datum: 02.08.2009 07:44
Betreff: [squid-users] Does squid support multithreading ?
> I have multicore processor here, I want to run squid3 on this
> platform, Does squid support multithreading ? will i
> Nick Parker wrote:
> > Jul 31 16:06:00 squid squid[4503]: Squid Parent: child process 4517
> > exited due to signal 6 with status 0
> > Jul 31 16:06:00 squid squid[4503]: Exiting due to repeated, frequent
> failures
> >
> > tailing cache.log gives me nothing - there's no errors logged there.
Where is the full list for the arguments after "squidclient mgr:"?
It seems there are many, but I know few about them,:)
Thanks.
2009/8/20 J Webster :
> Is there a squid.conf setting to remove the version id from squid error
> pages (squid/x.x.STABLExx) or do all the error pages have to be modified
> separately?
No that configure directive in squid.conf.
But, if you really want, you could modify the "configure" file before
2009/8/20 jose luis sanchez :
> Hi all.
> I have an squid proxy installed and configured by default, on an Ubuntu 9.04
> installation.
>
> The proxy it at localhost:3128, by default, and a http server is listening
> on port 8080 ( tomcat ) , with some application of mine.
>
> Sending the SAME reque
use aufs instead if you are under Linux, otherwise use diskd for cache_dir.
also a fast disk is helpful much (like a SAS disk with 15000 rpm).
2009/8/21 J Webster :
> What are some troubleshooting things to look for with squid performance?
> I mainly use it to allow users to stream video content b
2009/8/25 Sagar Navalkar :
> Hi,
>
> I understand the fact that cache in fact helps improve speed!
>
> Please let me know if clearing the squid cache will help in eliminating the
> corrupted cache files & help to improve the proxy performance.
>
Squid does it automatically.
> How frequently can
2009/8/25 Muhammad Sharfuddin :
> which Linux filesystem is best for 'cache_dir' ?
> ext3, reiserfs or xfs ?
>
> currently I am using 'reiserfs' with 'notail,noatime,noacl' options.
>
That's good enough.
But if you're caching large files like videos then XFS is maybe better.
2009/8/25 J Webster :
> Does anyone have any ideas for this? I'm lost.
> The performance is pretty poor for video when using cache_dir.
>
We also had bad experience on caching Videos with Squid.
It was about 3 years ago, the company openned a project like Youtube.
We tried to use squid-2.6 for vi
2009/8/26 Wong :
> Hi All,
>
> Need advise about multicore CPU.
>
> If using dual (or quad) core processor and configure Linux kernel with SMP
> capability, will Squid use the machine as Multiprocessor box?
>
Squid main process won't.
But if you're using aufs for cache_dir, or are using external
r
2009/8/26 :
> Please unsubscribe me from squid-cache.org in urgent basis
>
please send a plain text message to squid-users-unsubscr...@squid-cache.org
You will receive a reply from it, then re-reply it, you will be unsubscribed.
2009/8/26 Sagar Navalkar :
>
> Also would you please explain the statements below:
> 1) Or maybe just setting the garage high/low watermarks closer together for
> a smaller chunk of work at disposal time.
see these two directives in squid.conf(.default):
# cache_swap_low 90
# cache_swap_high 95
2009/8/26 Wong :
>> 2009/8/26 Wong :
>>>
>>> Hi All,
>>>
>>> Need advise about multicore CPU.
>>>
>>> If using dual (or quad) core processor and configure Linux kernel with
>>> SMP
>>> capability, will Squid use the machine as Multiprocessor box?
>>>
>>
>> Squid main process won't.
>> But if you're
2009/8/26 Muhammad Sharfuddin :
> I am trying to configure squid for the optimum performance(fast).
>
I don't think you could get much performance improvement from the
compling options.
Those options are mostly for "enable" or "disable" a feature in squid.
Few of them are maybe good for performan
2009/8/27 Mark Lodge :
> Hi all
> - Firstly, I know that Squid is a http proxy -
>
> Could I set up Squid so that POP3 Email [Port 110] Gmail [Port 995 SSL] and
> Skype can go via Squid?
>
The simple answer: can't.
Since you know squid is a http proxy, why do you wish pop3 protocal to
go through i
2009/8/27 pokeman :
>
> Hello
> can anyone post list of available squidclient mgr: options available
>
squidclient mgr:menu
2009/8/28 MontyRee :
>
>
> one is using tproxy
> the other is redirect
>
> I don't know the difference between them.
>
> What's the difference between them?
> and Which function should I use?
>
Well, for this related question, Amos had replied it:
http://squidcn.spaces.live.com/blog/cns!B49104BB6
2009/8/27 Lutze Benjamin [STEMMER IMAGING GmbH] :
> i am using squid 2.7 as a reverse proxy
>
> is it possible to let squid simply return a cached
>
> page if it cannot reach the webserver?
>
Normally it's impossible.
But we once did the same stuff by hacking Apache's mod_cache.
Jeff.
2009/8/28 pokeman :
>
> How to retrive list of large object save in my cache drives so i can purge it
analyze it from access.log, :)
2009/8/28 Anderson dos Santos Donda :
> My squid works fine, all acls works too..
>
> but when I shutdown the squid ( sbin/squid -k shutdown )
>
> The navigation still working on clients,
how long time does it continue to work for?
If you shutdown squid and in the short time the connected session
2009/9/1 Jesus Angeles :
> Hi all, I have a problem. Three weeks ago I installed Squid 2.7.STABLE3 +
> Dansguardian 2.10.1.1 in GNU/Linux Ubuntu Server 9.04. First week was ok,
> but the service was started to fail, sometimes (once or twice for day ) the
> users can´t visit any webpage, the web bro
2009/9/1 Jones, Keven :
>
> Does anyone know if this is sufficient squid.conf:
>
>
> cache_peer 172.19.23.91 parent 80 0 no-query originserver name=server_1
> acl sites_server_1 dstdomain img01.cprpt.com
> cache_peer_access server_1 allow sites_server_1
> cache_peer 172.19.23.92 parent 80 0 no-quer
2009/9/4 Aleksey Samostrelov :
> Hello.
>
> On squid 2.6 STABLE17 can not change cache manager email on error page.
> It is always proxy_administrator though cache_mgr parameter set to custom
> email.
>
The better solution is to upgrade it to squid-2.7 or 3.0's latest version.
2009/9/7 :
> Hi all,
>
> Is it possible to setup the scenario below on squid?
>
> If everyone (all IP addresses) wants to access www.example.com it goes to
> 10.0.0.77 port 77, but only when people on 192.168.1.0/24 wants to access
> www.example.com it goes to 10.0.0.88 port 88.
>
sure.
use src A
2009/9/10 :
> Can anyone recommend me a good book for squid? I prefer more advance level.
>
> I was looking at "Squid: The Definitive Guide" by O'Reilly, but the date is
> January 2004. Is it still good?
>
perhaps not.
the most recent documents are in wiki.squid-cache.org
2009/9/17 Matias :
> Hi!
>
> How can I tell by reading the log files if a certain request is returned to
> the browser from cache or from the internet?
>
>
difference by some kinds of HIT or MISS.
2009/9/18 Calvin Park :
> Hello Squid users
>
> I use squid as reverse proxy and my setup is :
>
> * Clients <--> Squid ( 2.7 or 3.1 ) <--> Apache ( many image files ,
> use mod_expire rule )
>
> I must be expire cache object by 2 rules:
>
> 1. Last Modified ( It's good work and )
Having Last-Mo
2009/9/18 ashley08 :
>
> Hello, I have beenn trying this for about 3 days, I've struggled to read
> through the manuals and I still haven't been able to get it to work,..
> What I need is just to be able to connect from my windows laptop on a
> different network, to my windows home computer. I do
2009/9/18 Juan Cardoza :
> Does anyone know how to get Access to the windows update through the proxy.
> Is there a way to configure the proxy into the windows update or into the
> proxy to download the update files.
>
see:
http://wiki.squid-cache.org/SquidFaq/WindowsUpdate
2009/9/17 Mikio Kishi :
> Hi, all
>
> Now, which type of "cache store" do you recommend ?
> (ufs, aufs and diskd ...)
>
> squid version: 3.1.0.13
>
many people have said, aufs for linux and diskd for bsd will get
better performance.
also I have tried COSS under linux, very good too.
Jeff.
2009/9/18 Calvin Park :
> HTTP/1.0 200 OK
> Date: Tue, 01 Sep 2009 07:54:40 GMT
> Server: thumbd-64bits/0.2.51
> Content-Length: 2798
> Content-Type: image/gif
> Cache-Control: max-age=604800
> Last-Modified: Mon, 17 Aug 2009 04:40:33 GMT ===> It's ok
> Expires: Tue, 08 Sep 2009 07:54:40 GMT
2009/9/18 Amos Jeffries :
> Squid will then fetch a new copy and replace the expired object.
>
I must say squid will verify the object, if it is not changed, squid
won't fetch a new one and replace the current one.
Am I right?
Jeff.
Squid caches the content following the key of URL.
Squid won't cache the headers only under that URL, but cache a full page.
2009/9/19 andre wang :
> hi all:
>
> I have an issue.
> My squid is running on my localhost at port 3128, when i make
> http request with squidclient:
> squidclien
standard ftp traffic, try using iptables.
--
Jeff Pang
http://home.arcor.de/pangj/
ents please see www.squid-cache.org
Good luck.
--
Jeff Pang
http://home.arcor.de/pangj/
Ismail OZATAY:
Jeff you can check it here ;
http://www.ledge.co.za/software/squint/squish/FAQ
Sorry I did google it but lost this.
It seems squish is a web application that is based on Squid.
So I think squid itself will most probably implement the jobs asked by
the OP well.
--
Jeff Pang
Amos Jeffries:
Jeff Pang wrote:
hosseinyounesi:
Hi everyone,
I want to control the bandwidth of my network by limiting the
download size
of a group of users at different times of a day. I googled and I found
"SQUISH" that can do this. Anyone have tested this tools before? I
sent
2009/12/14 Weibin Yao :
> http://squid.treenet.co.nz/Versions/v3/HEAD/cfgman/
> http://squid.treenet.co.nz/Versions/v2/HEAD/cfgman/
>
They are avaiable on squid's official site:
http://www.squid-cache.org/Doc/config/
--
Jeff Pang
http://home.arcor.de/pangj/
t; the log file.
Could you start it with -d (debug) option and see what happens?
--
Jeff Pang
http://home.arcor.de/pangj/
On Tue, Dec 15, 2009 at 10:22 AM, Dererk wrote:
>
> I'm afraid it's not the beloved X-Forwarded-For header. This CDN sets a
> few headers by their own, and their are completely custom.
>
I have been using HttpWatch for doing this, a cool tool.
--
Jeff Pang
http://home.arcor.de/pangj/
Can squid be installed and run on a mac os box? Thanks.
--
Jeff Pang
http://home.arcor.de/pangj/
Hello,
when making squid-3.0.stable8 on slackware I got the errors:
neighbors.cc: In function 'void dump_peer_options(StoreEntry*, peer*)':
neighbors.cc:1612: error: 'struct _peer::' has no member named 'carp'
make[3]: *** [neighbors.o] Error 1
make[3]: Leaving directory `/root/squid-3.0.STABLE8/
hello,
does squid-3.0 have src hash option for keeping persistent session
when there're more than one backend server?
thanks!
great, thanks.
the sorry fact is I can't make squid-3.0STABLE8 successfully in my
slackware Linux.
I have posted a message to the list days ago.
On Wed, Aug 20, 2008 at 5:55 AM, Henrik Nordstrom
<[EMAIL PROTECTED]> wrote:
> tis 2008-08-19 klockan 22:41 +0800 skrev Jeff Pang:
>
Hello,
from squid3.0's config file (squid.conf.default):
#use 'background-ping' to only send ICP queries to this
#neighbor infrequently. This is used to keep the neighbor
#round trip time updated and is usually used in
#
--- On Fri, 10/17/08, netmail <[EMAIL PROTECTED]> wrote:
> From: netmail <[EMAIL PROTECTED]>
> Subject: [squid-users] Time on squid
> To: squid-users@squid-cache.org
> Date: Friday, October 17, 2008, 10:37 AM
> Hi
> When squid generate the message when block an website , the
> time show is
> di
panagiotis polychronopoulos 写道:
Hi to everyone
I have a problem. The squid do not permit access to www.symantec.com portal
becouse can not resolve the DNS. How i could solve the mystery?
use a correct DNS for squid or create a host entry for that domain name.
Regards.
Luis Daniel Lucio Quiroz:
Hi Squids,
Suppose I have an squid configured with https for caching. I wonder if it is
possible to record html traffic, how?
You may analyse it from the access.log or capture it with an external
tool like iptraf.
Regards.
lly to find out what's the real
problem.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
get much higher traffic than Squid.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
Roy M.:
So did you tried Apache/Lighty + mod_proxy ?
No. We used a customized solution based on the webserver developed by
the company itself.
For that high traffic application, you can consider to use a commercial
product like F5's BIG-IP or Citrix's NetScaler.
--
Jeff Pan
squid.conf and logs for details.
Maybe somebody could point me to a good starting point to fix the squid. As
far as I know, squid should not do any content filtering ba itself - or does
it?
YES Squid won't modify HTTP response body unless you specify it to do that.
--
Jeff Pang
Ding
server,
subB.domain.com it suppose to request the IIS server on machine with
IP 10.1.1.100,
whats wrong with my config?
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
tent-length: 365
Content-Type: text/xml
Expires: ue, 04 May 99 09:17:22 GMT}
Shall Amos be helpful here? thanks.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
deny PURGE
http_access allow all
http_reply_access allow all
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
through Squid then the
object will be cached if it is cachable.
wget has some good arguments like "-p" or "-m" which even can be used
to cache the whole site.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
/%25ag
perl -MURI::Escape -le 'print uri_unescape("%25")'
%
As you see, %25 after uri_unescape is "%".
So something like %20,%3D doesn't include the real "%" character, but an
escape symbol used by HTTP. When they are unescaped, Squid doesn't see
t it should be
after the string is unesaped.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
uid squid 4096 May 6 09:08 ..
drwxr-xr-x 2 squid squid 4096 May 6 12:32 logs
Hi,
Squid run as nobody user by default, not the "squid".
see:
cache_effective_user
cache_effective_group
in squid.conf.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
e apache's mod_proxy). They won't block a site.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
for Squid?
But squid's redirector can't redirect something by response message.
You may collect all those bad sites into a list, and customize the
http_access rules in squid.conf to deny them.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
ntry there are some commercial software which can be
used to monitor and intercept user's all internet transfer like
email/MSN/webpage etc.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
rn in
squid.conf. Are all those needed really?
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
shutdown" in it?
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
8.1.105 to use G/w 192.168.1.3
192.168.1.106 to use G/w 192.168.1.3
Hi,
See tcp_outgoing_address in squid.conf, that might be helpful to you.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
cecache url_regex -i some_url_path
cache allow forcecache
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
ut no help.
It might be:
tcp_outgoing_address ISP1_IP_ADDRESS ip1
tcp_outgoing_address ISP2_IP_ADDRESS ip2
tcp_outgoing_address ISP3_IP_ADDRESS ip3
replace ISP{x}_IP_ADDRESS with real IPs.
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
RSCL Mumbai:
On Sat, May 16, 2009 at 9:50 AM, Jeff Pang wrote:
RSCL Mumbai:
I tried " tcp_outgoing_address " by adding the following to squid.conf
acl ip1 myip 10.0.0.120
acl ip2 myip 10.0.0.121
acl ip3 myip 10.0.0.122
tcp_outgoing_address 10.0.0.120 ip1
tcp_outgoing_address 10.0
RSCL Mumbai:
Hmm... Any other option to route packets via specific internet g/w
based on the client IP ?
tcp_outgoing_address is already designed well for this purpose.
Why don't you use it and try to fix up the problems?
--
Jeff Pang
DingTong Technology
www.dtonenetworks.com
r's IP
>
Be not sure, what's a RB750?
You should be able to let people know what's the special device under your case.
--
Jeff Pang
http://home.arcor.de/pangj/
get a 3.1.1 rpm for EL5?
>
But why not compile it from the source?
--
Jeff Pang
http://home.arcor.de/pangj/
s is 4-6 and size of
> each of them is near 1-1.2G. The question is simple: is there a way to
> automatic removing this files periodically by squid itself? Maybe an option
> in squid.conf ? Or it's required a cron job? Or how to absolutely disable
> core writing ?
>
&
pgrade it
to the latest 2.7 or 3.x release.
--
Jeff Pang
http://home.arcor.de/pangj/
> And what about 'accel' ? It is said that 'vhost' and 'vport' implies
> 'accel' in the default squid.conf. Is it necessary in the reverse
> proxy mode ?
>
accel means reverse proxy mode, it's a needed option if you are
running squid under that mode.
--
Jeff Pang
http://home.arcor.de/pangj/
hat they means.
>
>
You will see apache's httpd.conf for the config of a virtual host.
And check apache's online document:
http://httpd.apache.org/docs/1.3/vhosts/
--
Jeff Pang
http://home.arcor.de/pangj/
Cache: HIT from mcache.163.com
Connection: close
So you may both check your httpd.conf to see if mod_expire handle the
http 1.0 request correctly since squid forward the request with
http/1.0 protocal.
--
Jeff Pang
http://home.arcor.de/pangj/
1 - 100 of 145 matches
Mail list logo
