[squid-users] tutorial on how to configure Squid under Vmware Workstation (Linux)

2016-11-18 Thread Konrad Kaluszynski 
Hi,

Here is my hands on tutorial showing how to create a virtual environment
under Vmware Workstation (Linux) to test Squid proxy scenarios.

I will be putting more videos with Squid proxy and reverse proxy scenarios
very soon.

Hope that you will find this helpful.

https://www.youtube.com/playlist?list=PL_CtDQmt_Tu22763iF7FjuJGMCY8-DaS5

Konrad Kaluszynski
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

[squid-users] Squid logs TCP_MISS/200 for a served cached object requested with If-None-Match

2016-11-18 Thread Garri Djavadyan 

Hello,

I noticed that Squid logs TCP_MISS/200 when it serves previously cached 
object in return to non-matched conditional request with If-None-Match. 
For example:


1. Non-conditional request to the previously cached object.

$ curl -v -x http://127.0.0.1:3128 
http://mirror.comnet.uz/centos/7/os/x86_64/GPL >/dev/null


< HTTP/1.1 200 OK
< Server: nginx
< Date: Fri, 18 Nov 2016 19:58:38 GMT
< Content-Type: application/octet-stream
< Content-Length: 18009
< Last-Modified: Wed, 09 Dec 2015 22:35:46 GMT
< ETag: "5668acc2-4659"
< Accept-Ranges: bytes
< Age: 383
< X-Cache: HIT from gentoo.comnet.uz
< Via: 1.1 gentoo.comnet.uz (squid/5.0.0-BZR)
< Connection: keep-alive


2. Conditional request with non-matching entity to the same object.

$ curl -v -x http://127.0.0.1:3128 -H 'If-None-Match: "5668acc2-4658"' 
http://mirror.comnet.uz/centos/7/os/x86_64/GPL >/dev/null


< HTTP/1.1 200 OK
< Server: nginx
< Date: Fri, 18 Nov 2016 19:58:38 GMT
< Content-Type: application/octet-stream
< Content-Length: 18009
< Last-Modified: Wed, 09 Dec 2015 22:35:46 GMT
< ETag: "5668acc2-4659"
< Accept-Ranges: bytes
< X-Cache: MISS from gentoo.comnet.uz
< Via: 1.1 gentoo.comnet.uz (squid/5.0.0-BZR)
< Connection: keep-alive


I found that the behavior is related to the following code 
(client_side_reply.cc):


if (!e->hasIfNoneMatchEtag(r)) {
// RFC 2616: ignore IMS if If-None-Match did not match
r.flags.ims = false;
r.ims = -1;
r.imslen = 0;
r.header.delById(Http::HdrType::IF_MODIFIED_SINCE);
--->http->logType = LOG_TCP_MISS;
sendMoreData(result);
return true;
}


So, it seems like intended behavior, but I can't understand the reasons.
Or maybe it is a bug?

Thanks.

Garri
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] range multiple requests still weird with rockstore

2016-11-18 Thread Alex Rousskov 
On 11/18/2016 08:35 AM, Heiler Bemerguy wrote:
> 
> I've reported/asked this before. 

If you are referring to Bug 4469, I do not think there have been any
relevant changes after the last analysis posted there. We are very close
to posting our cache deletion changes for the official review, but,
again, I do not think they will fully address all the problems you are
suffering from.

  http://bugs.squid-cache.org/show_bug.cgi?id=4469

Alex.

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] unexpected debug output

2016-11-18 Thread Garri Djavadyan 

On 2016-11-17 22:01, Alex Rousskov wrote:

On 11/17/2016 12:15 AM, senor wrote:

I discovered that 'squid -k rotate' toggles cache.log output into full
debug mode as if I had done 'squid -k debug'.  Execute a second rotate
and it toggles debug off. This only happens when I have an ecap 
adapter

configured. Comment out those lines and everything works as expected.

My question is about the debug behavior. If this isn't a bug


Sounds like a bug to me. If you can reproduce this behavior with one of
the official sample eCAP adapters, then this is a Squid bug. Otherwise,
it is probably your adapter bug.


I can't reproduce the issue with official sample adapter using 
Squid-3.5.22. I used the following configuration:


# diff etc/squid.conf.default etc/squid.conf
73a74,80

loadable_modules /usr/local/lib/ecap_adapter_modifying.so
ecap_enable on
ecap_service ecapModifier respmod_precache \
uri=ecap://e-cap.org/ecap/services/sample/modifying \
victim= \
replacement=eCAP_works
adaptation_access ecapModifier allow all



Garri
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] squid.conf for soekirs net6501-70

2016-11-18 Thread Marc Sontowski 
Thanks Eliezer!

Sorry, I forgot some information about my scenario.

On the Soekris (2 Gbyte RAM & 40 GB in /var ) runs OpenBSD 6.0 with PF and 
Squid (3.5.20).

At the moment cache_mem looks like this:
cache_mem 256 MB
and cache_dir like this:
cache_dir 3 64 128

Thank for your understanding
—
Marc Sontowski


> Am 17.11.2016 um 22:37 schrieb Eliezer Croitoru :
> 
> Hey Marc,
> 
> It depends on how much of each you have on the machine.
> Also what other software would run on it.
> I would start with cache_mem only to see how the machine handles the 
> connections and then after you will get some statistics.
> Then you would be able to assess the right and the best for your scenario.
> 
> Eliezer
> 
> 
> Eliezer Croitoru
> Linux System Administrator
> Mobile: +972-5-28704261
> Email: elie...@ngtech.co.il
> 
> 
> -Original Message-
> From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On 
> Behalf Of Marc Sontowski
> Sent: Thursday, November 17, 2016 20:31
> To: squid-us...@squid-cache.org
> Subject: [squid-users] squid.conf for soekirs net6501-70
> 
> Hi,
> 
> What is your suggestion regarding the squid config for a soekris net6501-70?
> 
> Specially cache_men & cache_dir ?
> 
> Thanks in advance!
> -- 
> Marc Sontowski
> 
> 
> 
> ___
> squid-users mailing list
> squid-users@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-users
> 
> 

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

[squid-users] range multiple requests still weird with rockstore

2016-11-18 Thread Heiler Bemerguy 


I've reported/asked this before. It was suggested that Rockstore 
couldn't "share" the pieces among the users trying to get the same file 
at the same time if the maximum_object_size_in_memory wasn't enough.


I've just checked the conf and this issue still persist. It seems 
they're downloading 300k chunks, which are smaller than the 
"maximum_object_size_in_memory" variable.


   cache_mem 512 MB
   maximum_object_size_in_memory *2 MB*
   memory_replacement_policy heap LRU
   cache_replacement_policy heap LRU
   maximum_object_size 8 GB

   acl fullDLext urlpath_regex -i
   \.(exe|ms[iup]|cab|bin|zip|*mar*|pdf|appx(bundle)?|esd|lzma2)\??$

   range_offset_limit -1 fullDLext

   cache_dir rock /cache  375000 min-size=0 max-size=98304
   slot-size=16384 swap-timeout=200 max-swap-rate=900
   cache_dir rock /cache2 444000 min-size=98305 max-size=14680064
   swap-timeout=400 max-swap-rate=900
   cache_dir rock /cache3 344000 min-size=14680065 swap-timeout=600
   max-swap-rate=200


1479481899.852181 10.1.3.90 *TCP_MISS/206* *300544 *GET 
http://download.cdn.mozilla.net/pub/firefox/releases/50.0/update/win32/pt-BR/firefox-50.0.complete.*mar 
*- HIER_DIRECT/201.16.134.42 application/octet-stream
1479481900.056   2386 10.42.0.72 TCP_MISS/206 300544 GET 
http://download.cdn.mozilla.net/pub/firefox/releases/50.0/update/win32/pt-BR/firefox-50.0.complete.mar 
- HIER_DIRECT/201.16.134.49 application/octet-stream
1479481901.726  15817 10.20.4.4 TCP_MISS/206 300543 GET 
http://download.cdn.mozilla.net/pub/firefox/releases/50.0/update/win32/pt-BR/firefox-50.0.complete.mar 
- HIER_DIRECT/201.16.134.49 application/octet-stream
1479481902.640   1009 10.30.40.15 TCP_MISS/206 300544 GET 
http://download.cdn.mozilla.net/pub/firefox/releases/50.0/update/win32/pt-BR/firefox-50.0.complete.mar 
- HIER_DIRECT/201.16.134.49 application/octet-stream
1479481903.899  37326 10.32.0.81 TCP_MISS/206 300542 GET 
http://download.cdn.mozilla.net/pub/firefox/releases/50.0/update/win32/pt-BR/firefox-50.0.complete.mar 
- HIER_DIRECT/201.16.134.49 application/octet-stream
1479481904.278   1676 10.22.0.111 TCP_MISS/206 300542 GET 
http://download.cdn.mozilla.net/pub/firefox/releases/50.0/update/win32/pt-BR/firefox-50.0.complete.mar 
- HIER_DIRECT/201.16.134.42 application/octet-stream
1479481904.280  19072 10.21.0.23 TCP_MISS/206 300542 GET 
http://download.cdn.mozilla.net/pub/firefox/releases/50.0/update/win32/pt-BR/firefox-50.0.complete.mar 
- HIER_DIRECT/201.16.134.49 application/octet-stream
1479481904.709  17778 10.1.3.37 TCP_MISS/206 300544 GET 
http://download.cdn.mozilla.net/pub/firefox/releases/50.0/update/win32/pt-BR/firefox-50.0.complete.mar 
- HIER_DIRECT/201.16.134.49 application/octet-stream
1479481906.201  29446 10.11.0.60 TCP_MISS/206 300544 GET 
http://download.cdn.mozilla.net/pub/firefox/releases/50.0/update/win32/pt-BR/firefox-50.0.complete.mar 
- HIER_DIRECT/201.16.134.42 application/octet-stream
1479481907.267   3814 10.92.0.33 *TCP_MISS/206* 300542 GET 
http://download.cdn.mozilla.net/pub/firefox/releases/50.0/update/win32/pt-BR/firefox-50.0.complete.mar 
- HIER_DIRECT/201.16.134.42 application/octet-stream
1479481907.867  31309 10.32.0.138 *TCP_SWAPFAIL_MISS/206* 300544 GET 
http://download.cdn.mozilla.net/pub/firefox/releases/50.0/update/win32/pt-BR/firefox-50.0.complete.mar 
- HIER_DIRECT/201.16.134.49 application/octet-stream




--
Best Regards,

Heiler Bemerguy
Network Manager - CINBESA
55 91 98151-4894/3184-1751

___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Error negotiating SSL

2016-11-18 Thread erdosain9 
Hi,

for know... how you do 


Amos Jeffries wrote
> define some ACL to identify the qtox traffic you might be 
> able to splice it. 

i mean, that kind of ACL·
Thanks



--
View this message in context: 
http://squid-web-proxy-cache.1019090.n4.nabble.com/Error-negotiating-SSL-tp4680491p4680538.html
Sent from the Squid - Users mailing list archive at Nabble.com.
___
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users