[squid-users] Query about login=pass

2016-04-01 Thread Sreenath BH
Hi All, We have a setup with two squid servers lets say, squid1 and squid2. Requests land at Squid1 and it sends the request to squid2. Squid2 uses X-User-ID and Authorization headers for authenticating the user, and on success, fetches data from another webserver and returns the data. If

[squid-users] conditionally running url rewriter helper

2016-02-08 Thread Sreenath BH
Hi All, Is there a way to make Squid invoke the external URL helper only for some requests(depending on some component of the PATH)? While it is possible to check the URL and take no action inside the rewriter, I want to know if this overhead can be avoided. thanks for any hints. Sreenath

[squid-users] Sending json error messages

2016-02-01 Thread Sreenath BH
Hi All, We want to send error message in json format when external acl deny's a request. Even if we send a json formatted message (using message= key value pair) in external helper, the final output is still html. We have a custom error file in share/error/templates directory, and we use %o to

Re: [squid-users] external acl helpers working with deny_info

2016-01-25 Thread Sreenath BH
t. Thanks, Sreenath On 1/25/16, Amos Jeffries <squ...@treenet.co.nz> wrote: > On 25/01/2016 5:18 a.m., Sreenath BH wrote: >> Hi All, >> >> I am trying to validate my understanding of external acl, deny_info >> and http_access deny all" interaction. >> &

[squid-users] external acl helpers working with deny_info

2016-01-24 Thread Sreenath BH
Hi All, I am trying to validate my understanding of external acl, deny_info and http_access deny all" interaction. My squid conf has just two rules. First is external ACL helper and then the "deny all" as follows: Case (1) --- external_acl_type my_helper ttl=0 negative_ttl=0

[squid-users] behavior of external acl helper in Squid 3.5.13

2016-01-22 Thread Sreenath BH
Hi I am using an external helper for authentication. I have just one http_access in squid.conf that refers to this external helper. I also have a url rewriter to which I pass some information using "tag" key. I observed that the acl is not invoked in several cases, just calling the url rewriter.

Re: [squid-users] key-value pairs output from external helper

2016-01-22 Thread Sreenath BH
1/20/16, Alex Rousskov <rouss...@measurement-factory.com> wrote: > On 01/20/2016 09:33 AM, Sreenath BH wrote: > >> Squid allows external acl helpers to write arbitrary key-value pairs >> in its output. > >> Are these available for use by other modules of Squid? >

Re: [squid-users] behavior of external acl helper in Squid 3.5.13

2016-01-22 Thread Sreenath BH
Hi All, before posting I should have read documentation completely. I set both ttl and negative_ttl to zero, and it is working fine. thanks, Sreenath On 1/22/16, Sreenath BH <bhsreen...@gmail.com> wrote: > Hi > > I am using an external helper for authentication. I have just on

[squid-users] key-value pairs output from external helper

2016-01-20 Thread Sreenath BH
Hi, Squid allows external acl helpers to write arbitrary key-value pairs in its output. As per documentation, these values can be set in both ERR and OK cases. Are these available for use by other modules of Squid? Specifically, can these be accessed by URL rewriter helper. We would like to

[squid-users] dynamic messages from acl helper program

2016-01-19 Thread Sreenath BH
Hi All, We are using acl helper to authenticate users. Squid allows a template file that will be used to send a custom error message when the ACL sends an "ERR" string back to squid. In our case the acl helper contacts another web service for authentication. Is there a way to send the message we

Re: [squid-users] Time for cache synchronization between siblings

2015-12-18 Thread Sreenath BH
squ...@treenet.co.nz> wrote: > On 18/12/2015 1:21 a.m., Sreenath BH wrote: >> Hi, >> >> Thanks for the detailed response. I really appreciate it. >> >> Unfortunately the load balancer we use is not a squid load balancer >> and for now I will have to use HT

Re: [squid-users] Time for cache synchronization between siblings

2015-12-17 Thread Sreenath BH
. Might that be a reason? thanks, Sreenath On 12/17/15, Amos Jeffries <squ...@treenet.co.nz> wrote: > On 17/12/2015 3:10 a.m., Sreenath BH wrote: >> Hi, >> >> Thanks for the tips. After disabling digest I believe performance >> improved. >> However, I found t

Re: [squid-users] Time for cache synchronization between siblings

2015-12-16 Thread Sreenath BH
? We will have a load balancer that sends requests to each squid server, and we want cache peering to work correctly in this case. thanks, Sreenath On 12/16/15, Amos Jeffries <squ...@treenet.co.nz> wrote: > On 16/12/2015 7:16 a.m., Sreenath BH wrote: >> Hi, >> >> I ha

[squid-users] Time for cache synchronization between siblings

2015-12-15 Thread Sreenath BH
Hi, I have a setup with three squid peers (siblings in squid.conf) and three upstream servers(peers with parent and originserver in squid.conf). I am using htcp for the three squid siblings. How much time does it take for one squid server to 'know' that another peer has a particular object

[squid-users] routing to parent using carp

2015-11-24 Thread Sreenath BH
Hi all, We are planning to use carp to route requests based on request URL. A part of the URL refers to a part of the file that is being requested in the GET request(say a part of a video file) However, to make the back-end more efficient, it would be great if all requests for a particular file

Re: [squid-users] routing to parent using carp

2015-11-24 Thread Sreenath BH
Thanks. I should have read the documentation completely before posting. carp-key=key-specification rgds, Sreenath On 11/24/15, Amos Jeffries <squ...@treenet.co.nz> wrote: > On 24/11/2015 11:11 p.m., Sreenath BH wrote: >> Hi all, >> >> We are planning to use c

Re: [squid-users] Subject: Re: authentication of every GET request from part of URL?

2015-11-11 Thread Sreenath BH
on downstream caches and overall performance. Thanks for driving home the important point. regards, Sreenath On 11/9/15, Amos Jeffries <squ...@treenet.co.nz> wrote: > On 10/11/2015 6:12 a.m., Sreenath BH wrote: >> Hi Alex, >> >> thanks for your detailed asnwers. >&g

[squid-users] authentication of every GET request from part of URL?

2015-11-06 Thread Sreenath BH
Hi I am very new to Squid, and think have a strange requirement. We want to serve cached content only if the client has been authenticated before. Since we don't expect the client software to send any information in headers, we embed a token in the URL that we present to the user. So when the