Re: [squid-users] Best practice for adding or removing ACLs dynamically ?

2020-10-31 Thread Eliezer Croitor
Hey Roee, I am trying to understand what part of squid.conf you want to be able to change without a reconfigure/reload? If you have many users, ie above 50 you should probably not use a simple ncsa_auth although it's possible and in more then one case is preferable. You could probably write

Re: [squid-users] Best practice for adding or removing ACLs dynamically ?

2020-10-31 Thread roee klinger
Thanks Amos! I updated "auth_param basic credentialsttl" according to your advice and it is working great. I am still having issues with the "tcp_outgoing_address 192.168.8.12 acl_for_user3002" part, you mentioned: > For ACLs with values that are expected to change often it is best to use > an

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading

2020-10-31 Thread Amos Jeffries
On 31/10/20 3:20 am, Scott wrote: On Sat, Oct 31, 2020 at 12:49:16AM +1300, Amos Jeffries wrote: On 30/10/20 3:27 pm, Scott wrote: On Thu, Oct 29, 2020 at 10:08:42PM +1300, Amos Jeffries wrote: On 29/10/20 12:06 pm, Scott wrote: On Wed, Oct 28, 2020 at 12:00:01PM +, squid-users-reques

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading

2020-10-31 Thread Amos Jeffries
On 31/10/20 3:20 am, Scott wrote: On Sat, Oct 31, 2020 at 12:49:16AM +1300, Amos Jeffries wrote: On 30/10/20 3:27 pm, Scott wrote: On Thu, Oct 29, 2020 at 10:08:42PM +1300, Amos Jeffries wrote: On 29/10/20 12:06 pm, Scott wrote: On Wed, Oct 28, 2020 at 12:00:01PM +, squid-users-reques

Re: [squid-users] Best practice for adding or removing ACLs dynamically ?

2020-10-31 Thread Amos Jeffries
On 31/10/20 1:34 pm, roee klinger wrote:  Hey, I have Squid configured to send users to different outgoing interface like so: .. auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/htpassword acl acl_for_user3002 proxy_auth user2 tcp_outgoing_address 192.168.8.12

Re: [squid-users] squid restart

2020-10-31 Thread Amos Jeffries
On 1/11/20 12:02 am, Vieri wrote: Hi, Around every hour or so, the Squid proxy client experience comes to a crawl. It takes a very long time to load a simple web page. ... I guess the reason could be for this:     Maximum number of file descriptors:   4096     Largest file desc

[squid-users] squid restart

2020-10-31 Thread Vieri
Hi, Around every hour or so, the Squid proxy client experience comes to a crawl. It takes a very long time to load a simple web page. This is a snapshot taken when this happens: # squidclient mgr:info HTTP/1.1 200 OK Server: squid Mime-Version: 1.0 Date: Sat, 31 Oct 2020 10:43:21 GMT