Re: [squid-users] squid delay_pools can't limit speed on certain connections

2019-02-24 Thread Amos Jeffries
On 25/02/19 11:34 am, reinerotto wrote: > 1) I did some tests with my own webserver, and my local openwrt-system, > running squid. > And I can see, that http-traffic is throttled, but https is _not_. > I used 10MB of data for my tests. Download speed for http is throttled to > (my) 512kBit/s, as

Re: [squid-users] squid delay_pools can't limit speed on certain connections

2019-02-24 Thread reinerotto
1) I did some tests with my own webserver, and my local openwrt-system, running squid. And I can see, that http-traffic is throttled, but https is _not_. I used 10MB of data for my tests. Download speed for http is throttled to (my) 512kBit/s, as expected, but https is not throttled. 2) I got

Re: [squid-users] Squid for Windows Repeatedly Crashing

2019-02-24 Thread eliezer
It depends on the hardware in the server grade Windows. It can take more then 3k conn's for 100%. It's possible that squid was not designed for windows 2k16 Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From:

Re: [squid-users] Squid for Windows Repeatedly Crashing

2019-02-24 Thread Van Order, Drew (US - Hermitage)
Wondered that too, and experimented with the squid.conf setting to see when warning messages appear, which was 1,000. Default cygwin setting of 3,200 is plenty. Thanks for the idea, though! Sent via the Samsung Galaxy S8+, an AT 5G Evolution smartphone Original message

Re: [squid-users] Squid for Windows Repeatedly Crashing

2019-02-24 Thread Rafael Akchurin
As far as I know the internal FD limit for Windows build is around 3K - might be being existed and thus unexpected behavior raising its ugly head.. -Original Message- From: squid-users On Behalf Of Van Order, Drew (US - Hermitage) Sent: Sunday, 24 February 2019 14:40 To:

Re: [squid-users] Squid for Windows Repeatedly Crashing

2019-02-24 Thread Van Order, Drew (US - Hermitage)
This is helpful, and I especially appreciate the time given it is the weekend. The Squids are confusing me, as everything is well behaved at the moment. One server was erroring off and on for a few hours earlier today, but stopped after a reboot. It does appear that redirecting roughly 125

Re: [squid-users] ICAP and 403 Encapsulated answers (SSL denied domains)

2019-02-24 Thread eliezer
I do not see any context, can you redirect me towards the last email? Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users On Behalf Of FredB Sent: Sunday, February 24, 2019 12:33 Cc:

Re: [squid-users] | Ignoring non-issuer CA from ... while squid -kparse

2019-02-24 Thread eliezer
I assume it's fine in general since it works. I will try to run a request with openssl to see what is the certificate chain that I'm receiving. The issue is that it's a special "redirect all" proxy for filtering only blacklisted domains. So the squid receives all SSL requests and denies them

Re: [squid-users] ICAP and 403 Encapsulated answers (SSL denied domains)

2019-02-24 Thread FredB
Thanks, there a lot of impacts here, response time, load average, etc, unfortunately we should wait that FF 66 (and after) is installed everywhere to fix that ... I'm really surprised that there is no more messages about this Fred ___ squid-users

Re: [squid-users] squid 4.x: decided: do not cache but share because the entry has been released

2019-02-24 Thread David Touzeau
Many thanks for the explanation There is a miss configuration in config file: "cache deny all" It's a shame... -Message d'origine- De : squid-users De la part de Alex Rousskov Envoyé : samedi 23 février 2019 23:16 À : squid-users@lists.squid-cache.org Objet : Re: [squid-users] squid

Re: [squid-users] | Ignoring non-issuer CA from ... while squid -kparse

2019-02-24 Thread Amos Jeffries
On 24/02/19 3:36 pm, eliezer wrote: > I am testing intermediate  certificates and I have just created a key > and certificate files. > > The http line for ssl bump is: > > http_port 23128 ssl-bump generate-host-certificates=on > dynamic_cert_mem_cache_size=16MB  cert=/etc/squid/ssl_cert/cert.pem