[squid-users] Performance of https connections (direct or via proxy)

2003-02-12 Thread Rainer Traut
Hi, I already asked this question some time ago, but I made some new observations. Why is https performance so poor, when going direct with internet explorer instead of using squid? I know ie may only do 2 or 4 tcp connections to the server, when changing registry to 10 or more connections it is e

Re: [squid-users] Performance of https connections (direct or viaproxy)

2003-02-12 Thread Rainer Traut
? Can I see this as a form of address translation? Maybe IE opens more connections with proxy (when using IE default settings)? Thank you Rainer Henrik Nordstrom wrote: ons 2003-02-12 klockan 11.22 skrev Rainer Traut: Hi, I already asked this question some time ago, but I made some new

Re: [squid-users] Squid and RH Enterprise Linux

2004-01-09 Thread Rainer Traut
Hi, Henrik Nordstrom wrote: iv ran squid on RedHat v3 AS server and was happy with it. BUT i need to run wccp and ive been haveing a HECK of a time trying to get that to work. just an fyi The WCCP module most likely needs some adjustments due to other kernel patches applied by RedHat unless

[squid-users] Massive problems with https connections to Domino Server (long)

2004-02-05 Thread Rainer Traut
Hi, I have asked this question some time ago but we have never found a solution. We are using squid 2.5 S4 and also tried v3, OS is Redhat EL ES3, clients are always IE6 and IE5.5. Squid is the gateway to a small transfer net to firewall and then to DMZ and internet. Firewall has changed from Chec

Re: [squid-users] Massive problems with https connections to Domino Server (long)

2004-02-06 Thread Rainer Traut
Hi, vda wrote: The default number of resumable sessions that will be cached on the server is 50. To modify the number of sessions cached, set the SSL_RESUMABLE_SESSIONS notes.ini variable to the desired number. Setting SSL_RESUMABLE_SESSIONS=1 will disable SSL session resumption on the server.

Re: [squid-users] Massive problems with https connections to Domino Server (long)

2004-02-09 Thread Rainer Traut
Ok, here is the output of outgoing squid if to server. Please notice the 5sec delay between ie standstill and complete blocked domino server until I close my IE. Btw: Going direct works perfect, but with squid it blocks severely. [EMAIL PROTECTED] wrote: Pick ip addr of only one client host, not

Re: [squid-users] Massive problems with https connections to Domino Server (long)

2004-02-09 Thread Rainer Traut
vda wrote: On Monday 09 February 2004 13:15, Rainer Traut wrote: I see ~50 connections open from squid to domino, all of them are being closed when you close IE. This might be by accident, but SSL_RESUMABLE_SESSIONS is 50. Since I do not see tcpdump between IE and squid, I can only guess that IE

Re: [squid-users] Massive problems with https connections to Domino Server (long)

2004-02-11 Thread Rainer Traut
Hi, Give me an example of some security measure which you can accomplish with squid but not with masquerading using iptables. If you can't, maybe you need to think first what exactly you are trying to accomplish. I hope you arent thinking "I do not exactly know why, but folks said it is more secur

Re: [squid-users] Massive problems with https connections to Domino Server (long) -partly solution

2004-02-12 Thread Rainer Traut
Hi, thanks to both of you, Henrik and vda(?), for being so patient with me. ;) [EMAIL PROTECTED] wrote: - you can block other programs like icq. Only way of really blocking things like icq I can think of is by changing dns resolution for these hosts. simply done on the proxy server and not for the