Bug#329140: squid: works as a forkbomb when httpd_accel_single_host is on
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Steinar, the configuration you reported is the suggested equivalent for httpd_accel_single_host. If you agree, I would close this bug. Regards, L Il giorno 02/ago/06, alle ore 10:25, Steinar H. Gunderson ha scritto: On Wed, Aug 02, 2006 at 02:45:28AM +0200, Luigi Gangitano wrote: can you confirm this bug with the latest version of squid. Since the transparent proxy feature was widely alterated in squid-2.6.STABLE I'd like to check if this issue was resolved. The option itself seems to be gone, and I'm not sure what the equivalent is. I haven't seen the bug in 2.6 with these settings, though: http_port 80 vhost vport=8008 defaultsite=127.0.0.1 cache_peer 127.0.0.1 parent 8008 0 originserver no-query no- digest login=PASS Is there any specific setting you want me to try that might trigger the bug in 2.6? - -- Luigi Gangitano -- [EMAIL PROTECTED] -- [EMAIL PROTECTED] GPG: 1024D/924C0C26: 12F8 9C03 89D3 DB4A 9972 C24A F19B A618 924C 0C26 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (Darwin) iD8DBQFFMAq88ZumGJJMDCYRAkL7AJ9v5EcHBeXYImk8m4YVn66XRJ3d9QCfeeZb xYycXqxK9WLMEur/KvEmwCs= =Q/nR -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#329140: squid: works as a forkbomb when httpd_accel_single_host is on
On Wed, Aug 02, 2006 at 02:45:28AM +0200, Luigi Gangitano wrote: can you confirm this bug with the latest version of squid. Since the transparent proxy feature was widely alterated in squid-2.6.STABLE I'd like to check if this issue was resolved. The option itself seems to be gone, and I'm not sure what the equivalent is. I haven't seen the bug in 2.6 with these settings, though: http_port 80 vhost vport=8008 defaultsite=127.0.0.1 cache_peer 127.0.0.1 parent 8008 0 originserver no-query no-digest login=PASS Is there any specific setting you want me to try that might trigger the bug in 2.6? /* Steinar */ -- Homepage: http://www.sesse.net/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#329140: squid: works as a forkbomb when httpd_accel_single_host is on
Hi Steinar, can you confirm this bug with the latest version of squid. Since the transparent proxy feature was widely alterated in squid-2.6.STABLE I'd like to check if this issue was resolved. Regards, -- Luigi Gangitano -- [EMAIL PROTECTED] -- [EMAIL PROTECTED] GPG: 1024D/924C0C26: 12F8 9C03 89D3 DB4A 9972 C24A F19B A618 924C 0C26 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#329140: squid: works as a forkbomb when httpd_accel_single_host is on
Package: squid Version: 2.5.10-3 Severity: important I have Squid working as a HTTP accelerator, with squid.conf settings like this: httpd_accel_host 127.0.0.1 httpd_accel_port 8008 httpd_accel_single_host off httpd_accel_uses_host_header on redirect_rewrites_host_header off pipeline_prefetch off If I set “httpd_accel_single_host on”, Squid suddenly starts acting more or less like a forkbomb -- for every request in a persistent connection, it opens up a new socket to Apache instead of continuing in the connection it already has open, leading to hundreds of Apache children being spawned for a single persistent connection with many requests. Setting it to off (as in the example above) fixes the problem. -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.11.8 Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
