Re: [squid-users] me.com TCP_MISS/503

2011-02-24 Thread Nick Cairncross
On 23/02/2011 00:50, Amos Jeffries squ...@treenet.co.nz wrote: On Tue, 22 Feb 2011 07:37:27 -0800 (PST), nickcx wrote: Hi List, I'm trying to get access to me.com working on my test proxy, but I keep getting a timeout in my browsers: (110) Connection timed out. Access log shows

[squid-users] make error with squid-3.1.11

2011-02-24 Thread Martin (Jake) Jacobson
Hi, I am trying to build the newest squid 3.1.11 with ssl support and I received the following error when running the make command: Making all in base make[3]: Entering directory `/data/squid-3.1.11/src/base' /bin/sh ../../libtool --tag=CXX --mode=compile g++ -DHAVE_CONFIG_H -I../..

[squid-users] Re: Squid DG Sandwich... Squid3 (auth) - DansGuardian - Squid3 (proxy)

2011-02-24 Thread bwright
Anyone have any other ideas?!?!? Or something to try (to be able to find the problem) I am willing to try stuff, just need some direction. -- View this message in context:

Re: [squid-users] make error with squid-3.1.11

2011-02-24 Thread jeffrey j donovan
On Feb 24, 2011, at 9:13 AM, Martin (Jake) Jacobson wrote: Hi, I am trying to build the newest squid 3.1.11 with ssl support and I received the following error when running the make command: Making all in base make[3]: Entering directory `/data/squid-3.1.11/src/base' /bin/sh

Re: [squid-users] make error with squid-3.1.11

2011-02-24 Thread N3O
Please check that you have openssl-devel libraries installed On Thu, Feb 24, 2011 at 12:43 PM, jeffrey j donovan dono...@beth.k12.pa.us wrote: On Feb 24, 2011, at 9:13 AM, Martin (Jake) Jacobson wrote: Hi, I am trying to build the newest squid 3.1.11 with ssl support and I received the

Re: [squid-users] make error with squid-3.1.11

2011-02-24 Thread Martin (Jake) Jacobson
Thanks, That did the trick. Jake Jacobson http://www.google.com/profiles/jakecjacobson Our greatest fear should not be of failure, but of succeeding at something that doesn't really matter.    -- ANONYMOUS On Thu, Feb 24, 2011 at 10:16 AM, N3O strutte...@gmail.com wrote: Please check that

[squid-users] Re: Squid DG Sandwich... Squid3 (auth) - DansGuardian - Squid3(proxy)

2011-02-24 Thread Chad Naugle
I would like to recommend a few changes to the config of the (auth/no cache) squid in the link below: - http_access rules http_access allow AUTHENTICATED http_access deny all - also cache_log /dev/null cache_store_log none - for cache_dir, the default is none, so just comment it out, and no

[squid-users] Disk space for two node squid

2011-02-24 Thread N3O
Hi I want to create a 2-node squid reverse caching layer for an apache server that has these features: - 2 Xeon@ 2GHz - 2 GB RAM - 72GB HD RAID1 - RHEL with Kernel 2.6.9 - 1 EXT3 filesystem Traffic is a million visits/month My question is, how much disk space should i allocate for

Re: [squid-users] Disk space for two node squid

2011-02-24 Thread Pieter De Wit
On 25/02/2011 06:04, N3O wrote: Hi I want to create a 2-node squid reverse caching layer for an apache server that has these features: - 2 Xeon@ 2GHz - 2 GB RAM - 72GB HD RAID1 - RHEL with Kernel 2.6.9 - 1 EXT3 filesystem Traffic is a million visits/month My question is, how

[squid-users] Need help configuring squid 3.1.11 to pass Certs

2011-02-24 Thread Martin (Jake) Jacobson
Hi, I am trying to build a squid box that will proxy requests to two sites that require a PKI cert. The client doesn't have a cert so I want the squid box to take a request from the client and submit the certs it has to retrieve the resource. I was able to build squid 3.1.11 with ssl support

[squid-users] Re: Squid DG Sandwich... Squid3 (auth) - DansGuardian - Squid3(proxy)

2011-02-24 Thread bwright
Alright so I made the adjustments now my squid-auth.conf looks like: auth_param negotiate program /usr/lib/squid3/squid_kerb_auth -d auth_param negotiate children 10 auth_param negotiate keep_alive on cache_peer 127.0.0.1 parent 8080 0 no-query login=*:nopassword acl AUTHENTICATED

[squid-users] Re: Squid DG Sandwich... Squid3 (auth) - DansGuardian -Squid3(proxy)

2011-02-24 Thread Chad Naugle
How long does the negotiate auth take to identify a user, even if run by itself? Also, what is the logic behind running three types of proxies on the same hardware, where one instance of Squid can technically do all of the above? Perhaps I just don't know what Dansguardian does versus Squid's

[squid-users] Re: Squid DG Sandwich... Squid3 (auth) - DansGuardian -Squid3(proxy)

2011-02-24 Thread bwright
When I combine the 2 config files and only have 1 instance of squid running it is almost instantaneous. I also tried just switching/swapping my squid.conf for squid-auth.conf (to test just the auth part) and it is almost instantaneous too. DansGuardian is very extensive web filter: It can

[squid-users] Re: Squid DG Sandwich... Squid3 (auth) - DansGuardian-Squid3(proxy)

2011-02-24 Thread Chad Naugle
Then, perhaps you can try running the combined Squid (auth/cache) - DG - (Internet), would that work? bwright bwri...@hwahomewarranty.com 2/24/2011 1:42 PM When I combine the 2 config files and only have 1 instance of squid running it is almost instantaneous. I also tried just

[squid-users] Re: Squid DG Sandwich... Squid3 (auth) - DansGuardian-Squid3(proxy)

2011-02-24 Thread bwright
Basically DansGuardian needs a web proxy behind it to work. So some people have used tiny proxy etc. But for larger environments it seems like squid is normally used. Also I can't just combine them either b/c dansguardian needs to know the username (so I can have different policies based on

Re: [squid-users] TIMEOUT_ROUNDROBIN_PARENT and poor SIBLING_HIT performance

2011-02-24 Thread M. Leong Lists
The LB does periodic health checks of the backend and marks out any backend not responding in time. Would you recommend using squid to connect directly to the backend and use the monitorurl parameter instead? The origin servers are on the same subnet as the squid cluster. I turned of

Re: [squid-users] Need help configuring squid 3.1.11 to pass Certs

2011-02-24 Thread Amos Jeffries
On 25/02/11 06:32, Martin (Jake) Jacobson wrote: Hi, I am trying to build a squid box that will proxy requests to two sites that require a PKI cert. The client doesn't have a cert so I want the squid box to take a request from the client and submit the certs it has to retrieve the resource. I

Re: [squid-users] TIMEOUT_ROUNDROBIN_PARENT and poor SIBLING_HIT performance

2011-02-24 Thread Amos Jeffries
On 25/02/11 08:35, M. Leong Lists wrote: The LB does periodic health checks of the backend and marks out any backend not responding in time. Would you recommend using squid to connect directly to the backend and use the monitorurl parameter instead? The origin servers are on the same subnet as

Re: [squid-users] Squid with three isp

2011-02-24 Thread Senthilkumar
Thank you very much, with your suggestions we achieved it by adding necessary route. Thanks, Senthil Amos Jeffries wrote: On Wed, 23 Feb 2011 18:06:18 +0530, Senthilkumar wrote: Thank you. When we use tcp_outgoing address and select isp . The all traffic seems to be going through the