Re: [squid-users] ICAP protocol error

?zabbix?munin?Icinga?prtg? Thanks, Eliezer On 6/13/2013 5:22 PM, guest01 wrote: Hi, Thanks for your answers. At the moment, we have 4 monster-servers, no indication of any performance issues. (there is an extensive munin monitoring) TCP-states: http://prntscr.com/19qle2 CPU: http

Re: [squid-users] ICAP protocol error

assistance, Eliezer On 6/12/2013 4:57 PM, guest01 wrote: Hi guys, We are currently using Squid 3.1.12 (old, I know) on RHEL 5.8 64bit (HP ProLiant DL380 G7 with 16 CPU and 28GB RAM) Squid Cache: Version 3.1.12 configure options: '--enable-ssl' '--enable-icap-client' '--sysconfdir=/etc/squid

[squid-users] ICAP protocol error

Hi guys, We are currently using Squid 3.1.12 (old, I know) on RHEL 5.8 64bit (HP ProLiant DL380 G7 with 16 CPU and 28GB RAM) Squid Cache: Version 3.1.12 configure options: '--enable-ssl' '--enable-icap-client' '--sysconfdir=/etc/squid' '--enable-async-io' '--enable-snmp' '--enable-poll'

[squid-users] SSL certificate issue with Squid as Forward-Proxy

Hi, We are using Squid 3.1.12[1] in our environment as forward-Proxy with a PAC-file for HTTP and HTTPs. As far as I know, HTTPs works via the CONNECT-method (we are not using any SSL-bump-stuff) and should not touch the SSL certificate at all. Unfortunately, we are currently experiencing a

Re: [squid-users] Squid transparent proxy issues with redirecting from HTTP to HTTPs

ok, in my setup I am using the same IP with different Ports: http_port 10.122.125.2:3129 intercept name=transparentHTTPPort https_port 10.122.125.2:3130 intercept cert=/etc/squid/squid.pem name=transparentHTTPsPort acl redirectbehavior myportname transparentHTTPPort And how would I apply

[squid-users] Squid transparent proxy issues with redirecting from HTTP to HTTPs

Hi guys, We are currently using our Squid (3.1.x) as transparent HTTP proxy (with dst nat). We also want to use our Squid as transparent HTTPs proxy, which works too, despite our Internet research in which we got many results for transparent https proxying is not possible. I admit that there are

Re: [squid-users] Squid transparent proxy issues with redirecting from HTTP to HTTPs

Hi, Thanks for the fast response. On Fri, Mar 16, 2012 at 3:08 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 17/03/2012 2:27 a.m., guest01 wrote: Can anybody offer a solution or how do you allow HTTPs in your guest (W)LANs? Direct connection or using proxy-scripts (WPAD,...)? Add

[squid-users] Re: Squid Ldap Authenticators

about what else we could check or experienced anything similar? Thanks! regards Peter On Tue, Mar 13, 2012 at 3:07 PM, guest01 gues...@gmail.com wrote: Hi, We are having strange Sq

Re: [squid-users] requests per second

Hi, We are using Squid as forward-proxy for about 10-20k clients with about 1200RPS. In our setup, we are using 4 physical servers (HP ProLiant DL380 G6/G7 with 16CPU, 32GB RAM) with RHEL5.8 64Bit as OS with a dedicated hardware loadbalancer. At the moment, the average server load is approx 0.6.

Re: [squid-users] load balancing

Hi, Yes, it is even pretty easy to accomplish. We are using a dedicated Loadbalancer (but you can of course use LVS as loadbalancer) which is balancing proxy request to 8 squid instances on 4 different real servers with Kerberos authentication. We are not using any cache hierarchy, just 4

Re: [squid-users] Problem downloading file from catalog.update.microsoft.com and MS BITS(Background Intelligent Transfer Service)

as it is not marked as stable, I can't do anything. regards Peter On Tue, Jul 26, 2011 at 7:09 AM, Amos Jeffries squ...@treenet.co.nz wrote: On 25/07/11 23:34, guest01 wrote: Hi guys, I have a problem with site catalog.update.microsoft.com and MS BITS (Background Intelligent Transfer Service

[squid-users] Problem downloading file from catalog.update.microsoft.com and MS BITS(Background Intelligent Transfer Service)

Hi guys, I have a problem with site catalog.update.microsoft.com and MS BITS (Background Intelligent Transfer Service) Squid 3.1.12. Squid 3.2.0.7 seems to work without problems. Most of my clients use Kerberos authentication and WinXP as client. Unfortunately, BITS can only use Basic

Re: [squid-users] Squid uses way too much RAM and starts swapping ...

Hi, Any news on this topic? Unfortunately, RAM is running full within days and at the moment, our workaround is to do a reboot ... We would appreciate any other solution! thanks, peter On Wed, May 11, 2011 at 3:47 PM, guest01 gues...@gmail.com wrote: On Wed, May 11, 2011 at 10:47 AM, Amos

Re: [squid-users] Squid uses way too much RAM and starts swapping ...

ok, I can at least try to start it under valgrind, which I have never heard before. Do I just start squid under valgrind and send you the logfile? Do you need any special options? On Mon, May 30, 2011 at 2:15 PM, Amos Jeffries squ...@treenet.co.nz wrote: On 30/05/11 20:07, guest01 wrote: Hi

[squid-users] Squid uses way too much RAM and starts swapping ...

Hi, I am currently using squid 3.1.12 as forward-proxy without harddisk-caching (only RAM is used for caching). Each server is running on RHEL5.5 and is pretty strong (16 CPUs, 28GB RAM), but each servers starts swapping a few days after start. The workaround at the moment is to reboot the server

Re: [squid-users] Re: kerberos authentication - performance tuning

) rpccli_netlogon_sam_network_logon: credentials chain check failed : 3923 Time(s) -- samba End - On Wed, Feb 16, 2011 at 10:32 PM, Amos Jeffries squ...@treenet.co.nz wrote: On Wed, 16 Feb 2011 13:28:29 +0100, guest01 wrote: Hi, We had to bypass the kerberos

Re: [squid-users] Re: kerberos authentication - performance tuning

... On 09/02/2011 09:34, guest01 gues...@gmail.com wrote: Hi, We are currently using Squid 3.1.10 on RHEL5.5 and Kerberos authentication for most of our clients (authorization with an icap server). At the moment, we are serving approx 8000 users with two servers. Unfortunately, we have

[squid-users] squid 3.2.0.5 - keeps reloading itself when using kerberos or ntlm authentication

Hi guys, For testing purposes I tried squid 3.2.0.5 beta. After a couple of smaller issues I ran into a bigger one which I will share with you :-) I compiled squid 3.2.0.5 beta on RHEL5.5 64Bit with following options: Squid Cache: Version 3.2.0.5 configure options: '--enable-ssl'

[squid-users] kerberos authentication - performance tuning

Hi, We are currently using Squid 3.1.10 on RHEL5.5 and Kerberos authentication for most of our clients (authorization with an icap server). At the moment, we are serving approx 8000 users with two servers. Unfortunately, we have performance troubles with our Kerberos authentication. Load values

[squid-users] multiple squid 3.1.10 instances - independent vs frontend/backend

Hi guys, I am using a couple of squid instances per server (Squid 3.1.0, RHEL 5.5, lots of RAM) and was wondering which would be the better configuration? Better in that case means more performance. Either 1) - 4 separate squid instances, each with its own completely independent cache? (no cache

[squid-users] tcp_miss/502 when surfing with IE6 to http://www.raiffeiseninformatik.at

Hi, We are currently having a strange problem with our Squids (3.1.9, on RHEL 5.5 64Bit). When we surf to the site http://www.raiffeiseninformatik.at with IE6, we get a ERR_ZERO_SIZE_OBJECT error message. With every other browser (tested FF 3.6.12 and Chrome 8) it is working without issues.

Re: [squid-users] https to http translation

Maybe not exactly what you are looking for, but have you thought of using IPSec? You could deploy IPSec and encrypt every connection from your clients to the Proxy. I don't know what you are trying to achieve, but if your objective is to encrypt connections from the Clients to the proxy, IPSec

[squid-users] bug 3106 - no username in respmod request when icap_log is enabled

Hi guys, This is basically just a fyi mail, I just filled following bug report: http://bugs.squid-cache.org/show_bug.cgi?id=3106 A very brief summary, if I enable icap_log, then the x-authenticated-user-attribut in the icap header is missing in respmod requests. I am curious if anybody has ever

[squid-users] strip domain/realm from icap header username

Hi, We are using squid 3.1.8 (on RHEL5.5 64Bit) as authentication/caching forward proxy and an ICAP server for authorization and content filtering. At the moment, most of the users are authenticated by NTLM (we are planning for Kerberos) and the username is sent to our ICAP server which will do

[squid-users] got NTLMSSP command 3, expected 1

Hi guys, At first I have to appologize for starting a new thread concerning this message: [2010/10/01 12:29:45, 1] libsmb/ntlmssp.c:ntlmssp_update(334) got NTLMSSP command 3, expected 1 I know that it has been discussed previously and I read almost all of the answers but I did not find any

Re: [squid-users] Re: Native Kerberos (squid_kerb_auth) with LDAP-Fallback (squid_ldap_auth)

Hi, I am stuck with a similar problem, has there been any solution for this topic? (Btw, I am running Squid 3.1.8 on RHEL5.5) We are trying to achieve following: CompanyA (us): own Active Directory domain and we are hosting the squid web server (central forward proxy for internet access with

[squid-users] icap loadbalacing

Hi guys, I am currently implementing a proxy solution with squid (3.1.4) as caching/authentication proxy and a mcafee webwasher as content filter. Besides some other issues, it seems to work. Unfortunately, we have way too much traffic, only one squid and one webwasher cannot handle that (we

[squid-users] Squid 3.1.1 ICAP Issue

Hi guys, I may have found a bug related to the ICAP capabilities of Squid 3.1.1 (on RHEL5.4). We are currently evaluating a squid deployment which is referenced by this url [1]. We want to use Squid as Caching/Authentication-Proxy and ICAP Client, which talks to the Webwasher-server (content

[squid-users] squid deployment

Hi guys, We want to replace our current proxy solution (crappy commercial product which is way too expensive) and thought about Squid, which is a great product.I already found a couple of example configurations, basically for reverse proxying. What we are looking for is a caching and

[squid-users] Re: squid deployment

-Server || ^ |---| | | v INTERNET I would appreciate any input, thanks, best regards On Mon, Mar 29, 2010 at 3:18 PM, guest01 gues...@gmail.com wrote: Hi guys

[squid-users] squid performance - requests per second

Hi guys, I am sorry if this is a question which has been asked for many times, but I did not find any actual question concerning the performance of recent versions of squid. We are trying to replace a commercial product with squid servers on 64bit linux servers (most likely red hat 5). At the

[squid-users] access denied, WHY????????

Hi! I have a very strange problem with my squid. I am using it on a livecd as http proxy. It always worked, but now, I don't know why not! I am using Debian Woody stable, squid/2.5.STABLE4 with a previous working config file, all iptable-rules are disabled. Authentication disabled to. I tried to