what is the benefit from setting real-time priority to squid
or at least higher priority then the default ??
using nice -n 20 or a bit higher would it harm the sistem ??
-
**
* Crash to the future
**
--
Sent from:
On 9/25/19 1:27 PM, Gaël Ranaivo wrote:
> Here is a minimal squid config that demonstrates this weird issue:
>
> http_port 3128 ssl-bump tls-cert=/tmp/cert.pem tls-key=/tmp/key.pem
>
> acl regua browser .*Firefox.*
> http_access allow regua
> http_access deny all
>
> acl step1
On 9/25/19 11:07 AM, Alessandro Andrei wrote:
> acl AuthResponse407 http_status 407
> acl excludefromlog dstdomain .vortex-win.data.microsoft.com
> acl DoNotLog any-of AuthResponse407 excludefromlog
> access_log stdio:/var/log/squid/access.log logformat=squid !DoNotLog
> it's not clear to me how
Hello,
Here is a minimal squid config that demonstrates this weird issue:
http_port 3128 ssl-bump tls-cert=/tmp/cert.pem tls-key=/tmp/key.pem
acl regua browser .*Firefox.*
http_access allow regua
http_access deny all
acl step1 at_step SslBump1
acl step2 at_step SslBump2
acl
Hai Rafael,
Yes, i did that in an older setup, with you site guidance..
That works also very good ..
Once i have time i'll see if i can update the squid wiki.
Greetz,
Louis
Van: Rafael Akchurin [mailto:rafael.akchu...@diladele.com]
Verzonden: woensdag 25 september 2019 17:27
Hello everyone,
Just my two cents too. Note you can map the *user* to the Kerberos SPN - this
lets you have your squid proxy live outside of the AD.
Just setup the dedicated user in the AD, map SPN to it and export the keytab to
your squid.
See
On 9/25/19 11:01 AM, L.P.H. van Belle wrote:
> I also had problems with msktutil.. so i suggest you try this, see below..
> Im using it for few years and it always works (for me offcourse)..
>
> It should be pretty simple, but the site squid-cache (wiki) is in my
> opinion a bit outdated.
On 25/09/2019 15:29, Alex Rousskov wrote:
On 9/25/19 7:12 AM, Alessandro Andrei wrote:
My access_log file il flooded with messages that I do not want to see
Specifically
1) CONNECT vortex-win.data.microsoft.com
2) TCP_DENIED/407
So I created two ACLs to exclude them from logging and applied
I also had problems with msktutil.. so i suggest you try this, see below..
Im using it for few years and it always works (for me offcourse)..
It should be pretty simple, but the site squid-cache (wiki) is in my opinion a
bit outdated.
And its for Amos to adapt it on the site.
Amos or Alex,
On 9/25/19 7:12 AM, Alessandro Andrei wrote:
> My access_log file il flooded with messages that I do not want to see
>
> Specifically
> 1) CONNECT vortex-win.data.microsoft.com
> 2) TCP_DENIED/407
>
> So I created two ACLs to exclude them from logging and applied it to my
> access log
>
> acl
On 25/09/19 6:41 am, Alex Rousskov wrote:
> On 9/24/19 12:02 PM, Tom Karches wrote:
>
>> 2019/09/24 11:31:46 kid1| PROXY protocol error: invalid header ...
>
>> So, you are saying that v4 does not contain changes to fix the "PROXY
>> protocol error" and my only option at this point is v5 code?
>
Hi, I try to use kerberos in my squid. Nut I get an error message :
33
msktutil --auto-update --verbose --computer-name suqidpnb1 --server
dctoyo1.toyo.grp -k /etc/squid/PROXY.keytab
-- init_password: Wiping the computer password structure
-- generate_new_password:
My access_log file il flooded with messages that I do not want to see
Specifically
1) CONNECT vortex-win.data.microsoft.com
2) TCP_DENIED/407
So I created two ACLs to exclude them from logging and applied it to my access
log
acl AuthRequest http_status 407
acl excludefromlog dstdomain
13 matches
Mail list logo
