[squid-users] Squid Performance Problem

2006-02-22 Thread Mohamed Naji
'm working for an ISP company and I'm using squid as a cache engine for the first time. when a dial-up user downloads a cached file originally form a local server, the download rate is 10 kbps, but if the origin server is anywhere else on the Internet the download rate of a previously cached file

Re: [squid-users] Squid Performance Problem

2006-02-22 Thread Mark Elsen
'm working for an ISP company and I'm using squid as a cache engine for the first time. when a dial-up user downloads a cached file originally form a local server, the download rate is 10 kbps, but if the origin server is anywhere else on the Internet the download rate of a previously cached

Re: [squid-users] acl req_mime_type

2006-02-22 Thread Mark Elsen
Hi, can anybody tell me what this acl does? does it block downloading or uploading? and how can i test it? It identifies mime types, which can then be used further; when building access control in squid (http_access rules) M.

Re: [squid-users] Mirror sites

2006-02-22 Thread Mark Elsen
Hi, I would just like to know. When downloading a file from a site say for example a link like so: http://host1.example.com/test.zip and the file has a size say 300kb (and timestamp 2006/01/01 ?) and then downloading the same file from another (mirror) site say

Re: [squid-users] Problems with file upload

2006-02-22 Thread Mark Elsen
Hello Squid-User Group Members, The problem is not new, there are many postings about file upload issues with files 1MB. - But I've read the FAQ and searched a few hours in Mailing list archives. The only recommendations I found was to check the Squid Config and php.ini for correct values

Re: [squid-users] Squid 2.5.STABLE9 and Kernel 2.6.11 SMP

2006-02-22 Thread Mark Elsen
HI Mark I´m sorry vor that. I was asked if the squid is waiting (stopping) or crashing. The squid isn´t crashing. It waits and waits and waits. I asked you, to provide, when SQUID is in this condition, to provide the output of cache.log entries after a 2 secs DEBUG session, which can be

Re: [squid-users] rebuilding question

2006-02-22 Thread Mark Elsen
: I'm preparing to rebuild squid on a few servers within a production cluster to apply the epoll patch and fix a FD issue. Once everything is rebuilt (same configuration options), do I have to run squid -z initially? Or, can squid reuse the existing cache directories after being rebuilt?

Re: [squid-users] Solutions for transparent + proxy_auth?

2006-02-22 Thread Kinkie
On Tue, 2006-02-21 at 10:03 -0600, Steve Brown wrote: [...] In the specific scenario I mentioned, the browser isn't submitting any credentials. The traffic is being intercepted and routed through a local proxy which in turns forwards requests to a remote proxy w/ authentication. It seems to

Re: [squid-users] Squid Performance Problem

2006-02-22 Thread Mohamed Naji
On 2/22/06, Mark Elsen [EMAIL PROTECTED] wrote: 'm working for an ISP company and I'm using squid as a cache engine for the first time. when a dial-up user downloads a cached file originally form a local server, the download rate is 10 kbps, but if the origin server is anywhere else on

[squid-users] Problem with Interception Caching/Proxying

2006-02-22 Thread Tony Spencer
Hi Below is a diagram of part of our network. We have an L2TP tunnel that gets terminated on our Cisco 7200 for DSL users. The tunnel comes from our Upstream provider and once terminated we do the Radius authentication and then redirect all port 80 traffic to our Squid server. However the Squid

[squid-users] Sos transparent proxy problem

2006-02-22 Thread Muhammad Bilal Ahmad
Dear all I am in a panic situation. I have configured squid with Diskd to use as a transparent proxy following are the lines I used to support it for transparent proxy. Httpd_accel_host virtual httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header on the

AW: [squid-users] Squid 2.5.STABLE9 and Kernel 2.6.11 SMP

2006-02-22 Thread Christian Herzberg
Hi Mark I will do but I have to wait for the next trouble. Thanks Christian -Ursprüngliche Nachricht- Von: Mark Elsen [mailto:[EMAIL PROTECTED] Gesendet: Mittwoch, 22. Februar 2006 09:53 An: Christian Herzberg Cc: squid-users@squid-cache.org Betreff: Re: [squid-users] Squid 2.5.STABLE9

Re: [squid-users] Sos transparent proxy problem

2006-02-22 Thread Kinkie
On Wed, 2006-02-22 at 15:30 +0500, Muhammad Bilal Ahmad wrote: Dear all [...] touch /var/lock/subsys/local ulimit -n 8192 echo 1 /proc/sys/net/ipv4/ip_forward iptables -t nat -A POSTROUTING -p tcp -j MASQUERADE iptables -t nat -A PREROUTING -p tcp --dport 80 -i eth0 -j DNAT --to

RE: [squid-users] Sos transparent proxy problem

2006-02-22 Thread Muhammad Bilal Ahmad
Thanx for your reply I have tried all of the instructions listed in the given site but they wont work. I think problem is out of the iptables. Waiting for reply M Bilal Ahmad -Original Message- From: Kinkie [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 22, 2006 4:23 PM To:

[squid-users] Save clients password

2006-02-22 Thread Franco, Battista
Hi I use squid ldap users authentication. From my client PCs every time I start IE I need to insert username and password. Is it possible to configure squid user and password popup with a checkbox to permit to save password? So next time I'll not retype password.

Re: [squid-users] Problem with intercept squid and boinc

2006-02-22 Thread Oliver Schulze L.
I think my problem could be that I use an IP alias for interception. Will do some test, thanks for you comments Mark! Oliver -- Oliver Schulze L. [EMAIL PROTECTED]

Re: [squid-users] Passing username from external acl to cache peer

2006-02-22 Thread Henrik Nordstrom
tis 2006-02-14 klockan 13:55 +0800 skrev Russell: Hi, Was hoping to get some help passing usernames from an external acl to a cache peer. My situation is squid - dansguardian - squid. First squid for making ident queries and applying some acl's we have in place (quota limits,

Re: [squid-users] Help tuning squid

2006-02-22 Thread Henrik Nordstrom
mån 2006-02-13 klockan 14:55 -0200 skrev Carlos Eduardo Gomes Marins: I don't have Squidguard nor Dansguardian, only Trendmicro IWSS as mentioned, so all the acls's and handled by Squid itself. Is there anything I can do to improve the overall performance? What kinds of ACLs are you using?

Re: [squid-users] regexp after redirect

2006-02-22 Thread Henrik Nordstrom
tis 2006-02-14 klockan 18:36 -0600 skrev Fernando Rodriguez: Hello, Is there a way to match a regexp after redirect returns?? The rproxy patch available from devel.squid-cache.org adds among a lot of other things a http_access2 statement executing after redirectors and can be used for this.

Re: [squid-users] cpu usage increases over time, squid performance declines

2006-02-22 Thread Henrik Nordstrom
tis 2006-02-14 klockan 22:31 -0800 skrev Mike Solomon: Hardware: DualCore Opeteron 270, 1800MHz A bit overkill. Squid can not use SMP effectively... This would be fantastic, but the machines fall over after several hours. I have 4 machines, each configured identically. They last a few

Re: [squid-users] Quick question about dynamic delay pools - current status

2006-02-22 Thread Henrik Nordstrom
ons 2006-02-15 klockan 16:37 +0200 skrev laurentiu r: Hi everyone, Just a quick question about the dynamic delay pools. Apologies if it has been asked before - it must have been - but I've looked into the mail archives and didn't seem to find indication as to what's the current

Re: [squid-users] Redirector Capture

2006-02-22 Thread Henrik Nordstrom
ons 2006-02-15 klockan 11:39 -0600 skrev Fernando Rodriguez: Is there any way to capture the return url of a redirector program so i can reprosses the resulting url for password authentication?? Can you explain in more detail what it is you want to do? Regards Henrik signature.asc

Re: [squid-users] Problem with intercept squid and boinc

2006-02-22 Thread Oliver Schulze L.
Hi Mark, I have 2 identical servers (CentOS 4.2), with same squid version and interception iptables settings. I have the same boinc client behind both squid servers, and in one that work I see: 1140608197.087 3022 192.168.1.1 TCP_MISS/200 248 POST

Re: [squid-users] Squid and WCCP v1 (squid-2.5.STABLE11-3.FC3) on Fedora Core 3 (2.6.9-1.667smp) -- SOS

2006-02-22 Thread Daniel EPEE LEA
Hi, I have a RHELv4 cache + Cisco IOS Software, C1700 Software (C1700-K9O3SY7-M), Version 12.3(14)T2, RELEASE SOFTWARE (fc4). I have applied your suggestions, but it's still not working. Please take a lookt at my Router's + Squid config. Am I missing something ? - ! version

RE: [squid-users] Save clients password

2006-02-22 Thread Paul Mattingly
If you can configure squid to use NTLM, this authentication process happens in the background with no user intervention which may be a better option. Is your ldap program talking to active directory or some other ldap directory? -Original Message- From: Franco, Battista [mailto:[EMAIL

Re: [squid-users] RHEL v4 + Squid + wccp

2006-02-22 Thread Daniel EPEE LEA
Hi, My kernel is 2.6.9-22.ELsmp #1 SMP And I have loaded the ip_gre module. Please can you point out where I do not get it ? Regards, Dan On 2/21/06, Henrik Nordstrom [EMAIL PROTECTED] wrote: mån 2006-02-13 klockan 13:31 -0500 skrev Shoebottom, Bryan: Hello, I have not been able to get

Re: [squid-users] Problem with intercept squid and boinc

2006-02-22 Thread Mark Elsen
On 2/22/06, Oliver Schulze L. [EMAIL PROTECTED] wrote: Hi Mark, I have 2 identical servers (CentOS 4.2), with same squid version and interception iptables settings. I have the same boinc client behind both squid servers, and in one that work I see: 1140608197.087 3022 192.168.1.1

Re: [squid-users] RHEL v4 + Squid + wccp

2006-02-22 Thread Daniel EPEE LEA
hello, I have a RHELv4 cache + Cisco IOS Software, C1700 Software (C1700-K9O3SY7-M), Version 12.3(14)T2, RELEASE SOFTWARE (fc4). I have applied your suggestions, but it's still not working. Please take a lookt at my Router's + Squid config. Am I missing something ? - ! version

[squid-users] management get MSN 24/7

2006-02-22 Thread Brent Clark
Hi all I need to setup up a interesting configuration for a different list of users acl management src /etc/SQUID/management.txt# List of managment users acl staff src /etc/SQUID/staff.txt # List of normal users My MSN controlling time is as so: acl msntime time M T W H F A

Re: [squid-users] Sos transparent proxy problem

2006-02-22 Thread Mark Elsen
Thanx for your reply I have tried all of the instructions listed in the given site but they wont work. I think problem is out of the iptables. - For your hotmail issue , please try (in squid.conf) : acl hotmail_domains dstdomain.hotmail.msn.com header_access

Re: [squid-users] R: [squid-users] Save clients password

2006-02-22 Thread Mark Elsen
Yes my program talks with Windows 2003 AD. Please ( !- again) , keep discussions into the same original-thread - You are friendly-er to the community - Archives en search-tools will be able to organize and operate, themselves in a more optimal manner; which will also benefit

RE: [squid-users] rebuilding question

2006-02-22 Thread Gregori Parker
By wiser, I mean: will squid just picked up where it left off with the cache as if nothing happened? Or will items in the cache become alien to squid? Not a big deal either way, I'll just try it and if I have to wipe the caches, so be it.   -Original Message- From: Mark Elsen

Re: [squid-users] rebuilding question

2006-02-22 Thread Mark Elsen
By wiser, I mean: will squid just picked up where it left off with the cache as if nothing happened? Or will items in the cache become alien to squid? Certainly not, SQUID is alien-free, and was even designed to run on : http://planetquest.jpl.nasa.gov/TPF/tpf_index.cfm Some

[squid-users] squid + windows media player

2006-02-22 Thread Terry Dobbs
Has anyone got this working properly? When users access a page that plays a .wav/mp3 there is userid/password prompt. If you click cancel it goes away until you go to the next page. These pages with the audio have a NSPlayer header. I don't have any rules setup to allow only header X. Surely,

RE: [squid-users] management get MSN 24/7

2006-02-22 Thread Chris Robertson
See lines inserted below... -Original Message- From: Brent Clark [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 22, 2006 5:20 AM To: squid-users@squid-cache.org Subject: [squid-users] management get MSN 24/7 Hi all I need to setup up a interesting configuration for a

Re: [squid-users] cpu usage increases over time, squid performance declines

2006-02-22 Thread Mike Solomon
I added this line to the config on two of my hosts, but it did not have any effect. The host experienced the same amount of slowdown under high load and had to be restarted. I should note that I changed the config file and did: sudo squid -k reconfigure I did not kill the process. I'm not

[squid-users] low squid performance?

2006-02-22 Thread Tomasz Kolaj
Hello, I observed have too low performance. On 2x 64bit Xeon 2,8GHz 2GB DDR2, 2x WD RAPTOR Squid 2.5.STABLE12 can answer max for 120 requests/s. 115 r/s - 97-98% usage of first processor. Second is unusable for squid :/. I have two cache_dirs (aufs). One pre disk. aragorn ~ # squid -v Squid

Re: [squid-users] low squid performance?

2006-02-22 Thread Mark Elsen
Hello, I observed have too low performance. On 2x 64bit Xeon 2,8GHz 2GB DDR2, 2x WD RAPTOR Squid 2.5.STABLE12 can answer max for 120 requests/s. 115 r/s - 97-98% usage of first processor. Second is unusable for squid :/. I have two cache_dirs (aufs). One pre disk. aragorn ~ # squid -v

Re: [squid-users] squid + windows media player

2006-02-22 Thread Mark Elsen
Has anyone got this working properly? When users access a page that plays a .wav/mp3 there is userid/password prompt. If you click cancel it goes away until you go to the next page. These pages with the audio have a NSPlayer header. I don't have any rules setup to allow only header X.

Re: [squid-users] low squid performance?

2006-02-22 Thread Tomasz Kolaj
Dnia środa, 22 lutego 2006 23:18, Mark Elsen napisał: - Make your own build and installation of SQUID; configure only those options which you need. This may help for performance too. Ok, I'll rebuild squid without not-needed options. I have top squid's usage at 18:00-21:00 so I'll check

Re: [squid-users] Need help to improve squid performance

2006-02-22 Thread Raj
After I upgrade the memory to 2gb can I increase the cache_mem value to 256MB. At the moment it is 64MB. Thanks On 2/22/06, Kevin [EMAIL PROTECTED] wrote: We are running OpenBSD version 3.6 I'd recommend going to 3.8. Can you define performance issues? If I access a website it takes

RE: [squid-users] low squid performance?

2006-02-22 Thread Chris Robertson
-Original Message- From: Tomasz Kolaj [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 22, 2006 1:30 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] low squid performance? Dnia środa, 22 lutego 2006 23:18, Mark Elsen napisał: - Make your own build and

Re: [squid-users] low squid performance?

2006-02-22 Thread Tomasz Kolaj
Dnia środa, 22 lutego 2006 23:57, Chris Robertson napisał: [cut] The answer to that question is dependant on a whole host of variables, such as ACLs used, whether it's a proxy or an accelerator, the types of clients accessing it (client latency has a dramatic effect on CPU usage), types of

RE: [squid-users] low squid performance?

2006-02-22 Thread Chris Robertson
-Original Message- From: Tomasz Kolaj [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 22, 2006 2:24 PM To: squid-users@squid-cache.org Subject: Re: [squid-users] low squid performance? Dnia środa, 22 lutego 2006 23:57, Chris Robertson napisał: [cut] The answer to that

[squid-users] FILE DESCRIPTORS

2006-02-22 Thread Gregori Parker
Sorry to be pounding the list lately, but I'm about to lose it with these file descriptors... I've done everything I have read about to increase file descriptors on my caching box, and now I just rebuilt a fresh clean squid. Before I ran configure, I did ulimit -HSn 8192, and I noticed that

Re: [squid-users] management get MSN 24/7

2006-02-22 Thread Brent Clark
Chris Robertson wrote: See lines inserted below... acl msntime time M T W H F A 11:59-12:59 acl msntime time M T W H F A 16:59-18:59 acl msnp rep_mime_type ^application/x-msn-messenger$ acl msnq req_mime_type ^application/x-msn-messenger$ # Allow management MSN http_reply_access allow msnp

Re: [squid-users] Solutions for transparent + proxy_auth?

2006-02-22 Thread Kinkie
On Wed, 2006-02-22 at 11:39 -0600, Steve Brown wrote: It seems that I misunderstood what you meant. Do you want the PROXY to authenticate against its parent? Independently from who is the user it acts in behalf of? Yes, that's the idea. All users are restricted to the same ACL, so I see