Re: [squid-users] How to analyse squid memory usage

2016-05-23 Thread Dan Charlesworth
Gentle bump  Pool Obj SizeChunksAllocatedIn UseIdleAllocations SavedRate (bytes)KB/ch obj/ch(#) used free part %Frag (#) (KB) high (KB) high (hrs) %Tot(#) (KB) high (KB) high (hrs) %alloc(#) (KB) high (KB)(#) %cnt %vol(#)/sec mem_node 413664944 262313 265205 2.87 25.807

[squid-users] What are the chunks per request limits in squid? if at all? and Is there any client that comply with Retry-After response?

2016-05-23 Thread Eliezer Croitoru
Is there any limit to the amount of chunks per range request in squid? I tried to read the RFCs: https://tools.ietf.org/html/rfc7231#section-7.1.3 https://tools.ietf.org/html/rfc7233#section-3.1 But It was a bit hard for me to understand if there is a limit. Currently I have seen MS updates

[squid-users] What are the chunks per request limits in squid? if at all? and Is there any client that comply with Retry-After response?

2016-05-23 Thread Eliezer Croitoru
Is there any limit to the amount of chunks per range request in squid? I tried to read the RFCs: https://tools.ietf.org/html/rfc7231#section-7.1.3 https://tools.ietf.org/html/rfc7233#section-3.1 But It was a bit hard for me to understand if there is a limit. Currently I have seen MS updates

Re: [squid-users] squid 3.5.19, wccp2, pf and forwarding loop

2016-05-23 Thread Mark Davies
On 23/05/16 19:32, Amos Jeffries wrote: There are two other things to check then. Firstly, if the router receiving the wm0 traffic is the one doing WCCP divert into Squid. It needs a similar excemption of that outgoing traffic. Its a different router. Secondly, in squid.conf enable

Re: [squid-users] CPU Load 100% after implementing SSL Bump ....

2016-05-23 Thread Amos Jeffries
On 23/05/2016 8:18 p.m., Sagar Malve wrote: > Hi Team, > > Squid - Version 3.5.13 > > > Please find the below Squid Cache Logs > 2016/05/23 13:35:55 kid1| Error negotiating SSL connection on FD 138: > error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca (1/0) > 2016/05/23 13:35:55

Re: [squid-users] squid 3.5.19, wccp2, pf and forwarding loop

2016-05-23 Thread Amos Jeffries
On 23/05/2016 7:01 p.m., Mark Davies wrote: > > > On 23/05/16 18:48, Amos Jeffries wrote: >>> ext_if="wm0" >>> int_if="bnx0" >>> >>> set skip on lo0 >>> >>> rdr pass on $int_if inet proto tcp from 130.195.0.0/20 to any port 80 -> >>> 127.0.0.1 port 8081 >> >> What prevents Squids outgoing

Re: [squid-users] CPU Load 100% after implementing SSL Bump ....

2016-05-23 Thread Amos Jeffries
On 23/05/2016 6:27 p.m., Sagar Malve wrote: > Hi Team, > > System Config: > > Intel S2400SC2 Motherboard > Intel Xeon ES 2407 V2 CPU > RAM 32 GB > What Squid version? > > http_port 3127 > http_port 3128 intercept > https_port 3129 intercept ssl-bump generate-host-certificates=on >

Re: [squid-users] squid 3.5.19, wccp2, pf and forwarding loop

2016-05-23 Thread Mark Davies
On 23/05/16 18:48, Amos Jeffries wrote: ext_if="wm0" int_if="bnx0" set skip on lo0 rdr pass on $int_if inet proto tcp from 130.195.0.0/20 to any port 80 -> 127.0.0.1 port 8081 What prevents Squids outgoing traffic (to port 80) from being diverted back into Squid again? I would expect the

Re: [squid-users] squid 3.5.19, wccp2, pf and forwarding loop

2016-05-23 Thread Amos Jeffries
On 23/05/2016 4:41 p.m., Mark Davies wrote: > I know this comes up repeatedly but I'm now hitting this and can't see why. > > I have a traditional squid setup that works fine for clients that > explicitly point at it but I also want to allow transparent access for some > destinations for only

[squid-users] CPU Load 100% after implementing SSL Bump ....

2016-05-23 Thread Sagar Malve
Hi Team, System Config: Intel S2400SC2 Motherboard Intel Xeon ES 2407 V2 CPU RAM 32 GB http_port 3127 http_port 3128 intercept https_port 3129 intercept ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid/ssl_certs/squid.crt key=/etc/squid/ssl_certs/squid.key