Re: [squid-users] Using LDAP authentication only on one cache_peer in Squid 3 STABLE 16

2009-11-24 Thread Amos Jeffries
Eric Van Steenbergen wrote: Hello all, I'm trying to configure Squid to ask for authentication using LDAP but ONLY on one cache_peer. Before I had it activated on all servers and it worked perfectly. All the other webservers however have their own authentication except this wiki. This is what

Re: [squid-users] Squid3 reverse proxy Failed to select source strange errors

2009-11-24 Thread David B.
Amos Jeffries a écrit : This is quite strange, I think I'm misunderstanding something. I'm using squid as a reverse proxy. I understand. Clients (internet people surfing on my website) should connect to squid boxes to retrieve static content. Squid send the right file or connect

Re: [squid-users] How to block ultrasurf/thor using transparent proxy?

2009-11-24 Thread Marcus Kool
Ultrasurf can be blocked by ufdbGuard, a free URL rewriter for Squid. ufdbGuard uses various techniques to block Ultrasurf: - verifying the HTTPS connections by opening a new HTTPS connection and check if the other side speaks SSL+HTTP - blocking HTTPS to sites without a FQDN in the URL -

Re: [squid-users] Quadruple memory usage with squid

2009-11-24 Thread Henrik Nordstrom
tis 2009-11-24 klockan 15:06 +1100 skrev Robert Collins: http://www.netbsd.org/docs/kernel/vfork.html has some interesting notes from the BSD world about this. vfork is fundamentally broken. there is other alternatives coming, getting around the virtual memory issue when starting new

[squid-users] about the cert with password protected

2009-11-24 Thread Yonghua Peng
Hello, When running Squid with SSL port with a password protected cert, squid can only start with -N option, not going to backend. This is b/c the parent can't pass the password provided by user to child. But if we use this cert with Apache, which is also running with multi-processes (more

Re: [squid-users] Quadruple memory usage with squid

2009-11-24 Thread Marcus Kool
Robert Collins wrote: On Mon, 2009-11-23 at 21:40 -0500, Linda Messerschmidt wrote: Maybe. We would like to diagnose this problem and fix it properly, but if its too much hassle you can go that way. It would definitely be my preference to diagnose and fix the problem and I can live with a

Re: [squid-users] Time-based oddity that I can't quite nail down...

2009-11-24 Thread Kurt Buff
On Fri, Nov 13, 2009 at 20:21, Amos Jeffries squ...@treenet.co.nz wrote: Ah, yes. You don't allow localhost access to the proxy. In which case for you it is:  squidclient -h $PROXYIP http://example.com/ snip refresh_pattern ^ftp:           1440    20%     10080 refresh_pattern ^gopher:    

[squid-users] Kerberos / AD Authentication: Unknown code krb5 236

2009-11-24 Thread Andrew M Stemen
I'm working on a new squid installation, where squid users need to be authenticated to Active Directory via Kerberos. I've read several configuration examples and I can't remember how many how-to guides, but I must be overlooking something simple. I'm running squid 3.0STABLE18 on CentOS 5.4 in a

[squid-users] Different ACLs for different interfaces on the same squid instance

2009-11-24 Thread Gary Bennett
We have two virtual interfaces on our squid server: acl authproxy myip 1.1.1.100 acl ipproxy myip 1.1.1.101 We would like to make all users coming in via the authproxy network connection authenticate via our LDAP. We would like all users coming in via ipproxy to have no auth, but be restricted

re: [squid-users] parent cache configuration

2009-11-24 Thread Ulisse Informatica
Nobody can help me? :-((

[squid-users] Browser behind squid gives much information

2009-11-24 Thread a bv
Hi,today i visited whatismy.com with a PC which is configured using a squid proxy . On the site i saw that while giving my reel ip adress also the web site gives me much more information hostname of my squid proxy server, the proxy software and version which is squid x.y. So what is giving so

Re: [squid-users] Quadruple memory usage with squid

2009-11-24 Thread Robert Collins
On Tue, 2009-11-24 at 13:45 +0100, Henrik Nordstrom wrote: tis 2009-11-24 klockan 15:06 +1100 skrev Robert Collins: http://www.netbsd.org/docs/kernel/vfork.html has some interesting notes from the BSD world about this. vfork is fundamentally broken. Beyond the obvious (that it doesn't

Re: [squid-users] Time-based oddity that I can't quite nail down...

2009-11-24 Thread Amos Jeffries
On Tue, 24 Nov 2009 08:19:25 -0800, Kurt Buff kurt.b...@gmail.com wrote: On Fri, Nov 13, 2009 at 20:21, Amos Jeffries squ...@treenet.co.nz wrote: Ah, yes. You don't allow localhost access to the proxy. In which case for you it is: squidclient -h $PROXYIP http://example.com/ snip

Re: [squid-users] Different ACLs for different interfaces on the same squid instance

2009-11-24 Thread Amos Jeffries
On Tue, 24 Nov 2009 12:36:28 -0500, Gary Bennett ben...@shands.ufl.edu wrote: We have two virtual interfaces on our squid server: acl authproxy myip 1.1.1.100 acl ipproxy myip 1.1.1.101 We would like to make all users coming in via the authproxy network connection authenticate via our

re: [squid-users] parent cache configuration

2009-11-24 Thread Amos Jeffries
On Tue, 24 Nov 2009 19:57:23 +0100, Ulisse Informatica i...@ulissesrl.it wrote: Nobody can help me? :-(( Not unless you say what the problem is. So far you only stated the abstract topology and a few config lines that you tried entering into squid.conf. The last two attempts were obviously

Re: [squid-users] Quadruple memory usage with squid

2009-11-24 Thread Henrik Nordstrom
ons 2009-11-25 klockan 09:07 +1100 skrev Robert Collins: On Tue, 2009-11-24 at 13:45 +0100, Henrik Nordstrom wrote: tis 2009-11-24 klockan 15:06 +1100 skrev Robert Collins: http://www.netbsd.org/docs/kernel/vfork.html has some interesting notes from the BSD world about this. vfork

Re: [squid-users] Quadruple memory usage with squid

2009-11-24 Thread Henrik Nordstrom
tis 2009-11-24 klockan 11:09 -0200 skrev Marcus Kool: vfork will probably help but has side effects and I don't know if the Squid code is suitable for vfork. It's not. Not even suitable for posix_spawn in it's current form but easier to adopt for that than vfork. Regards Henrik

Re: [squid-users] Quadruple memory usage with squid

2009-11-24 Thread Robert Collins
On Wed, 2009-11-25 at 02:11 +0100, Henrik Nordstrom wrote: ons 2009-11-25 klockan 09:07 +1100 skrev Robert Collins: On Tue, 2009-11-24 at 13:45 +0100, Henrik Nordstrom wrote: tis 2009-11-24 klockan 15:06 +1100 skrev Robert Collins: http://www.netbsd.org/docs/kernel/vfork.html has

Re: [squid-users] Quadruple memory usage with squid

2009-11-24 Thread Marcus Kool
Linda started this thread with huge performance problems when Squid with a size of 12 GB forks 15 times. Linda emailed me that she is doing a test with vm.pmap.pg_ps_enabled set to 1 (the kernel will transparently transform 4K pages into superpages) which gives a big relief for TLB management

Re: [squid-users] Quadruple memory usage with squid

2009-11-24 Thread Linda Messerschmidt
On Tue, Nov 24, 2009 at 9:52 PM, Marcus Kool marcus.k...@urlfilterdb.com wrote: Linda started this thread with huge performance problems when Squid with a size of 12 GB forks 15 times. I'm still not convinced that our memory usage is correct. Here's where the cache_mem 10GB process is at right

Re: [squid-users] Quadruple memory usage with squid

2009-11-24 Thread Henrik Nordstrom
ons 2009-11-25 klockan 00:52 -0200 skrev Marcus Kool: Therefore I have just a silly question: can we modify Squid to fork at a slower pace? It would be interesting to see if a 0.2 second gap between each fork gives the system a enough http://www.squid-cache.org/Doc/config/sleep_after_fork/