Re: [squid-users] Ideas for better caching these popular urls

2018-04-11 Thread Omid Kosari
Eliezer Croitoru wrote > You will need more then just the urls but also the response headers for > these. > I might be able to write an ICAP service that will log requests and > response headers and it can assist Cache admins to improve their > efficiency but this can take a while. Hi Eliezer,

Re: [squid-users] Ideas for better caching these popular urls

2018-04-10 Thread Omid Kosari
Thanks for reply . I assumed the community at different scales from little isp to large ISPs may have common domains like those i highlighted so they may have same issue as mine . So i ignored common parts . One of problems with redbot is it shows timeout for big files like

[squid-users] Ideas for better caching these popular urls

2018-04-10 Thread Omid Kosari
Hello, squid-top-domains.JPG This image shows stats from one of my squid boxes . I have question about highlighted ones . I think they should have better hit ratio because they are popular between clients .

Re: [squid-users] Cache poisoning vulnerability 3.5.23

2017-07-27 Thread Omid Kosari
Amos Jeffries wrote > Cache poisoning (if it is that) is a serious security issue. Please > bring the details of security problems to the *squid-bugs* mailing list > so it can be investigated and solved, rather than blind-siding everyone > with a public announcement like this. > > Amos I

Re: [squid-users] Cache poisoning vulnerability 3.5.23

2017-07-26 Thread Omid Kosari
By my experience if you see any output from following command you may be a victim grep -a 'generate_204' /var/log/squid/access.log | grep -v '/204 ' | grep -v '/000' | grep -v opera | grep -v ucweb | grep -v apple -- View this message in context:

[squid-users] Cache poisoning vulnerability 3.5.23

2017-07-26 Thread Omid Kosari
Hello, Recently i have seen some Cache poisoning specially on android captive portal detection sites . My squid was 3.5.19 (from https://packages.debian.org/stretch/squid) on Ubuntu Linux 16.04 . Then i have upgraded to latest version 3.5.23 (from https://packages.debian.org/stretch/squid) and

Re: [squid-users] What would be the maximum ufs\aufs cache_dir objects?

2017-07-26 Thread Omid Kosari
Interesting because i was going to create a new topic like this but Eliezer read my mind ;) Nowadays i can see that the http traffic is going fewer and fewer and every day i am thinking about retiring the squid . But currently is see that most of the remaining http traffic which worth caching

Re: [squid-users] range_offset_limit not working as expected

2017-07-16 Thread Omid Kosari
Amos Jeffries wrote > Squid DNS system can be updated to do things better. Hi, Any news or updates ? -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/range-offset-limit-not-working-as-expected-tp4679355p4683112.html Sent from the Squid - Users mailing

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2017-05-11 Thread Omid Kosari
Eliezer Croitoru wrote > You can try to use the atime and not the mtime. Each time the fetcher script runs , all of request files will access and then atime will refreshed . I think for "request" directory it should be "mtime" and for "body" directory it should be "atime" . Eliezer Croitoru

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2017-05-10 Thread Omid Kosari
I have deleted and recreate the request directory and see huge decrease in memory usage of the fetcher process . Did i do the right thing ? Is there anything that should i do after a while ? -- View this message in context:

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2017-04-24 Thread Omid Kosari
Hello, Thanks -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Windows-Updates-a-Caching-Stub-zone-A-windows-updates-store-tp4678454p4682189.html Sent from the Squid - Users mailing list archive at Nabble.com. ___

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2017-04-15 Thread Omid Kosari
Hello, I have sent the files you mentioned to your email 2 days ago . A little more investigation shows that some big files (~ 2GB ) are downloading slowly ( ~ 100KBytes/s) while some others downloading very faster. The problem is related to networking (BGP and IXP ) stuff and the fetcher

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2017-04-08 Thread Omid Kosari
Thanks for reply. Eliezer Croitoru wrote > Also what is busy for you? The fetcher script is always downloading . For example right now i can see that a fetcher script is running for more than 3 days and it is downloading files one by one . Eliezer Croitoru wrote > Also what is busy for you? >

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2017-04-06 Thread Omid Kosari
Hey Eliezer, Recently i have found that the fetcher script is very busy and it is always downloading . It seems that microsoft changed something . I am not sure and it is just a guess . Whats up at your servers ? -- View this message in context:

Re: [squid-users] squid tproxy connection time out

2017-01-03 Thread Omid Kosari
Hello, I think your problem is topology . I suggest change the position of squid so the mikrotik router stands between clients and squid box . Also assign a private ip address to your squid and also one ip from same range to your mikrotik router . Then try to mangle and route to that private ip

Re: [squid-users] TProxy and client_dst_passthru

2016-09-13 Thread Omid Kosari
Amos Jeffries wrote > ==> ORIGINAL_DST is should *only* ever be used on MISS or > REFRESH/revalidate traffic. Never on a HIT. Thus zero (0%) hit-ratio is > the expected behaviour. > > For the same reason that a report of the log traffic using "grep -v HIT" > will show zero cache ratio. I have

Re: [squid-users] TProxy and client_dst_passthru

2016-09-11 Thread Omid Kosari
Antony Stone wrote > On Thursday 08 September 2016 at 12:27:42, Omid Kosari wrote: > >> Hi Fred, >> >> Same problem here . Do you found any solution or workaround ? > > Please clarify which message you are reply / referring to. > > Thanks, > > >

Re: [squid-users] TProxy and client_dst_passthru

2016-09-08 Thread Omid Kosari
Hi Fred, Same problem here . Do you found any solution or workaround ? Regards -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/TProxy-and-client-dst-passthru-tp4670189p4679422.html Sent from the Squid - Users mailing list archive at Nabble.com.

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-09-06 Thread Omid Kosari
Hey Eliezer, According to these threads http://squid-web-proxy-cache.1019090.n4.nabble.com/range-offset-limit-not-working-as-expected-td4679355.html http://squid-web-proxy-cache.1019090.n4.nabble.com/TProxy-and-client-dst-passthru-td4670189.html Is there any chance that you implement something

Re: [squid-users] range_offset_limit not working as expected

2016-09-06 Thread Omid Kosari
It is tproxy cache . Is there a way to force caching them . current configs: host_verify_strict off client_dst_passthru on dns_nameservers x.y.160.172 dns_nameservers 217.218.155.155 dns_nameservers 217.218.127.127 dns_nameservers 8.8.8.8 dns_nameservers 8.8.4.4 dns_nameservers 208.67.222.222

Re: [squid-users] TCP_RESET non http requests on port 80

2016-09-06 Thread Omid Kosari
Filed a bug report http://bugs.squid-cache.org/show_bug.cgi?id=4585 -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/TCP-RESET-non-http-requests-on-port-80-tp4679102p4679361.html Sent from the Squid - Users mailing list archive at Nabble.com.

[squid-users] range_offset_limit not working as expected

2016-09-05 Thread Omid Kosari
Hello, My config: acl download_until_end dstdomain .cdn.mozilla.net range_offset_limit none download_until_end Squid 3.5.19 1473082997.229697 x.29.186.47 TCP_MISS/206 300476 GET http://download.cdn.mozilla.net/pub/firefox/releases/48.0.2/update/win32/en-US/firefox-48.0.2.complete.mar -

Re: [squid-users] reply_header_access Server deny (IF Server==squid)

2016-09-05 Thread Omid Kosari
Thanks but according to my other thread http://squid-web-proxy-cache.1019090.n4.nabble.com/TCP-RESET-non-http-requests-on-port-80-td4679102.html deny_info generates some other headers/footprints. -- View this message in context:

Re: [squid-users] reply_header_access Server deny (IF Server==squid)

2016-09-04 Thread Omid Kosari
Because squid should be really transparent tproxy . I want to remove its footprints. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/reply-header-access-Server-deny-IF-Server-squid-tp4679338p4679341.html Sent from the Squid - Users mailing list archive at

[squid-users] reply_header_access Server deny (IF Server==squid)

2016-09-03 Thread Omid Kosari
Hello, I want to hide squid's OWN reply header . I have tested following config acl squid_server rep_header Server squid reply_header_access Server deny squid_server reply_header_replace Server Foo/1.0 But got the error "ACL is used in context without an HTTP response. Assuming mismatch." The

Re: [squid-users] TCP_RESET non http requests on port 80

2016-08-29 Thread Omid Kosari
Alex Rousskov wrote > On 08/28/2016 03:10 AM, Omid Kosari wrote: >> Alex Rousskov wrote >>> I understand that it works for regular requests. Does it also work >>> (i.e., >>> does Squid reset the connection) when handling a non-HTTP request on >>> por

Re: [squid-users] TCP_RESET non http requests on port 80

2016-08-28 Thread Omid Kosari
Alex Rousskov wrote > I understand that it works for regular requests. Does it also work (i.e., > does Squid > reset the connection) when handling a non-HTTP request on port 80? No , when the request is non-HTTP it does not reset the connection . Here is my test results . i would test with

Re: [squid-users] TCP_RESET non http requests on port 80

2016-08-27 Thread Omid Kosari
Alex Rousskov wrote > I recommend starting with something like this: > > http_reply_access deny all > deny_info TCP_RESET all > > Does that reset all connections to Squid (after Squid fetches the reply)? Thanks for reply . As i mention before the deny_info works in other configs for

Re: [squid-users] TCP_RESET non http requests on port 80

2016-08-26 Thread Omid Kosari
Alex Rousskov wrote > I do not know why deny_info does not work > in your tests. Should i give up ? -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/TCP-RESET-non-http-requests-on-port-80-tp4679102p4679207.html Sent from the Squid - Users mailing list

Re: [squid-users] TCP_RESET non http requests on port 80

2016-08-24 Thread Omid Kosari
Alex Rousskov wrote > Thus, the existing implementation should cover non-HTTP > requests on port 80 (or 3128). If it does not, it is a bug. We should > polish the documentation to make this clear. The problem is not squid itself . The problem is in some situations for example DOS(with malformed

Re: [squid-users] TCP_RESET non http requests on port 80

2016-08-24 Thread Omid Kosari
acl status_400 http_status 400 deny_info TCP_RESET status_400 http_reply_access deny status_400 still send headers . just the 400 changed to 403 HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Wed, 24 Aug 2016 14:11:35 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5

Re: [squid-users] TCP_RESET non http requests on port 80

2016-08-24 Thread Omid Kosari
This config works for dstdomain acl type acl test dstdomain 123.com deny_info TCP_RESET test adapted_http_access deny test but it is not what i want . I want acl status_400 http_status 400 deny_info TCP_RESET status_400 adapted_http_access deny status_400 OR acl HTTP proto HTTP acl PORT_80

[squid-users] TCP_RESET non http requests on port 80

2016-08-24 Thread Omid Kosari
Hello, I want to squid send tcp_reset as reply to non http requests on port 80 . I want that squid DONT reply these headers HTTP/1.1 400 Bad Request Server: squid Mime-Version: 1.0 Date: Wed, 24 Aug 2016 12:08:02 GMT Content-Type: text/html;charset=utf-8 Content-Length: 0 X-Cache: MISS from

Re: [squid-users] Yet another store_id question HIT MISS

2016-08-20 Thread Omid Kosari
I have also tested with several browsers, PCs etc . Also i have disabled every refresh pattern except default squid rules as like as yours . Same result . The only way to get hits are the way i mentioned in

Re: [squid-users] Yet another store_id question HIT MISS

2016-08-18 Thread Omid Kosari
I was correct . If one of following conditions happens then the mentioned urls will not cache . 1-in squid.conf have this line acl storeiddomainregex dstdom_regex ^igcdn(\-photos|\-videos)[a-z0-9\-]{0,9}\.akamaihd\.net$ 2-in storeid_db have this line

Re: [squid-users] Yet another store_id question HIT MISS

2016-08-18 Thread Omid Kosari
Simply open following url in firefox http://igcdn-photos-h-a.akamaihd.net/hphotos-ak-xap1/t51.2885-15/s640x640/sh0.08/e35/13702999_1008425479275495_76276919_n.jpg then rename h to a,b,c,d,e,f for example

Re: [squid-users] Malformed HTTP on tproxy squid

2016-08-18 Thread Omid Kosari
Amos Jeffries wrote > About the only thing you could do to speed it up is locate the error > page templates (file paths: en/ERR_INVALID_REQ and > templates/ERR_INVALID_REQ) and remove their contents. Then restart Squid. > That should remove at least a few of the vprintf() syscalls that your >

Re: [squid-users] Yet another store_id question HIT MISS

2016-08-17 Thread Omid Kosari
Eliezer Croitoru-2 wrote > StoreID is not the only thing which can affect a HIT or a MISS. > A nice tool which was written to understand the subject is RedBot at: > https://redbot.org/ > > From a simple inspection of the file it seems that it should get hit but, > why are you using StoreID for

Re: [squid-users] Squid cpu usage 100% from few days ago !!

2016-08-17 Thread Omid Kosari
Aha . We have found that this request belongs to a cheap popular satellite receiver www.starmax.co . Maybe it has been infected and becomes zombie of a btnet . Maybe you should buy one device from them -- View this message in context:

[squid-users] Yet another store_id question HIT MISS

2016-08-17 Thread Omid Kosari
Why following link is HIT X-Cache:"HIT from cache1" X-Cache-Lookup:"HIT from cache1:3128" http://igcdn-photos-c-a.akamaihd.net/hphotos-ak-xaf1/t51.2885-15/s150x150/e35/13649137_1547514802224163_950421795_n.jpg but this one is MISS

Re: [squid-users] Squid cpu usage 100% from few days ago !!

2016-08-17 Thread Omid Kosari
Matus UHLAR - fantomas wrote > are you intercepting traffic for port 80 only? yes -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-cpu-usage-100-from-few-days-ago-tp4678894p4678968.html Sent from the Squid - Users mailing list archive at Nabble.com.

Re: [squid-users] Malformed HTTP on tproxy squid

2016-08-17 Thread Omid Kosari
Hi Eliezer, Eliezer Croitoru-2 wrote > If you know what domain or ip address causes and issue the first thing I > can think about is bypassing the malicious traffic to allow other > clients\users to reach the Internet. Source ip may be 70% of our customers because it is a popular device so it

Re: [squid-users] Squid cpu usage 100% from few days ago !!

2016-08-16 Thread Omid Kosari
Even one ip address with less than 5 requests per second can grow squid cpu usage up to 30% . And 10 requests per second made 100% cpu usage . While there is nothing other than that client goes through squid . The client bandwidth is less than 10Kbps . Isn't it crazy also ? -- View this

Re: [squid-users] Malformed HTTP on tproxy squid

2016-08-16 Thread Omid Kosari
Squid access.log and wireshark PCAP attached access_(1).log dump2.pcap -- View this message in context:

[squid-users] Malformed HTTP on tproxy squid

2016-08-16 Thread Omid Kosari
According to my other post http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-cpu-usage-100-from-few-days-ago-td4678894.html Squid cpu usage becomes 100% when it forwatds some kind of malformed http traffic . Even one ip address with less than 5 requests per second can grow squid cpu usage

Re: [squid-users] Squid cpu usage 100% from few days ago !!

2016-08-15 Thread Omid Kosari
One of server's ip addresses that i've found belongs to cloudflare . Cloudflare does not accept anything other than HTTP on port 80 . So it seems an attack to some servers . Maybe our clients are infected and they are zombies . Anyone knows some good ways to defend squid . I mean when squid

Re: [squid-users] Squid cpu usage 100% from few days ago !!

2016-08-14 Thread Omid Kosari
My investigation shows even 1 random chosen ip address makes squid cpu usage about 30% . I have chosen that ip address based on users with TAG_NONE/400 errors . I've found that a kind of request makes a loop in squid . Wireshark shows infinite loop of X-Squid-Error: ERR_INVALID_REQ 0 and

Re: [squid-users] Squid cpu usage 100% from few days ago !!

2016-08-13 Thread Omid Kosari
debug_options ALL,1 -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-cpu-usage-100-from-few-days-ago-tp4678894p4678901.html Sent from the Squid - Users mailing list archive at Nabble.com. ___ squid-users

Re: [squid-users] Squid cpu usage 100% from few days ago !!

2016-08-13 Thread Omid Kosari
The bandwidth was about 120Mbps to each squid box but now even 10Mbps makes 100% cpu usage With 10% of users Average HTTP requests per minute since start: 2355.3 16GB of ram and i3-2100 CPU @ 3.10GHz, 4 cores and NO SMP like before . It seems like an attack to/from our clients to/from

[squid-users] Squid cpu usage 100% from few days ago !!

2016-08-13 Thread Omid Kosari
Hello, Recently 2 different squid boxes grows from ~40% cpu usage to 100% without any changes to config/banwidth/number of clients/etc The problems forced me to bypass squid until the problem found . Right now even 10% of users can make squid 100% . Info Squid is in tproxy mode with routing

Re: [squid-users] cache peer communication about HIT/MISS between squid and and non-squid peer

2016-07-25 Thread Omid Kosari
Following config in squid does not log anything logformat nfmark %ts.%03tu %6tr %>a %Ss/%03>Hs %nfmark %http://squid-web-proxy-cache.1019090.n4.nabble.com/cache-peer-communication-about-HIT-MISS-between-squid-and-and-non-squid-peer-tp4600931p4678676.html Sent from the Squid - Users mailing list

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-25 Thread Omid Kosari
Hi, Thanks for support . recently i have seen a problem with version beta 0.2 . when fetcher is working the kernel logs lots of following error TCP: out of memory -- consider tuning tcp_mem I think the problem is about orphaned connections which i mentioned before . Managed to try new version

Re: [squid-users] cache peer communication about HIT/MISS between squid and and non-squid peer

2016-07-21 Thread Omid Kosari
Amos Jeffries wrote > Note that it is the connection CONNMARK value not the packet MARK value > that is copied. Can you confirm my iptables rules ? iptables -t mangle -A OUTPUT -j CONNMARK --restore-mark iptables -t mangle -A OUTPUT -p tcp -d 127.0.0.1,1.1.1.12 --sport 8080 -j MARK --set-mark

Re: [squid-users] cache peer communication about HIT/MISS between squid and and non-squid peer

2016-07-21 Thread Omid Kosari
Amos Jeffries wrote > 2) Squid can do pass-thru using Netfilter MARK flags. Each squid.conf > directive that deals with TOS has both a 'tos' and a 'mark' variant. The > 'mark' ones are able to pass-thru these netfilter markings the way you > want. > > However, since netfilter marks are local to

[squid-users] Squid determine peer content to routers

2016-07-19 Thread Omid Kosari
According to my previous emails i have created this topic to summerize my need . Squid has peer config as follow acl wu dstdom_regex \.download\.windowsupdate\.com$ \.download\.microsoft\.com$ acl wu-rejects dstdom_regex stats acl GET method GET cache_peer 1.1.1.14 parent 8080 0 proxy-only

Re: [squid-users] rep_header not working

2016-07-19 Thread Omid Kosari
Amos Jeffries wrote > Sure, if I can assist with that I will do so in a reply to that thread. Thanks . My bad , you have replied my last email in that thread but main problem was in previous emails . Now i will describe it in new topic . -- View this message in context:

Re: [squid-users] cache peer communication about HIT/MISS between squid and and non-squid peer

2016-07-19 Thread Omid Kosari
Amos Jeffries wrote > On 18/07/2016 8:05 p.m., Omid Kosari wrote: >> Maybe i should describe more . >> The port 8080 is a parent peer of squid . It is >> http://squid-web-proxy-cache.1019090.n4.nabble.com/Windows-Updates-a-Caching-Stub-zone-A-windows-updates-store-td4678

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-19 Thread Omid Kosari
Eliezer Croitoru-2 wrote > Hey Omid, > > Indeed my preference is that if you can ask ask and I will try to give you > couple more details on the service and the subject. Hey Eliezer, 1.I have refresh patterns from days before your code . Currently i prefer not to store windows updates in squid

Re: [squid-users] rep_header not working

2016-07-19 Thread Omid Kosari
Amos Jeffries wrote > On 19/07/2016 5:48 p.m., Omid Kosari wrote: >> Amos Jeffries wrote >>> On 19/07/2016 2:42 a.m., Omid Kosari wrote: >>>> Hello, >>>> >>>> It seems rep_header does not work at all. >>>> >>>> acl msh

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-19 Thread Omid Kosari
Also i have seen that another guy did successfully something like that (not exactly ) in this thread http://squid-web-proxy-cache.1019090.n4.nabble.com/cache-peer-hit-miss-and-reject-td4661928.html -- View this message in context:

Re: [squid-users] rep_header not working

2016-07-19 Thread Omid Kosari
Amos Jeffries wrote > On 19/07/2016 2:42 a.m., Omid Kosari wrote: >> Hello, >> >> It seems rep_header does not work at all. >> >> acl mshit rep_header X-SHMSCDN . >> acl mshit rep_header Content-Type -i text\/html >> acl html rep_header Content-Type -

Re: [squid-users] rep_header not working

2016-07-19 Thread Omid Kosari
Eliezer Croitoru-2 wrote > Well I cannot say a thing until I will study the subject. > One thing I was thinking about was: > Can you analyze the squid access.log and to reduce from the account\user > the HIT traffic? > If so then I can recommend some log format special log to give you the > needed

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-18 Thread Omid Kosari
Alex Rousskov wrote > On 07/18/2016 05:39 AM, Omid Kosari wrote: > >> acl mshit rep_header X-SHMSCDN HIT >> clientside_tos 0x30 mshit > > You cannot use response-based ACLs like rep_header with clientside_tos. > That directive is currently evaluated only at reques

Re: [squid-users] rep_header not working

2016-07-18 Thread Omid Kosari
Hey Eliezer, I am aware of thay sentence . I have carefully read that . But as you see even apache or html one does not work . -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/rep-header-not-working-tp4678561p4678565.html Sent from the Squid - Users mailing

[squid-users] rep_header not working

2016-07-18 Thread Omid Kosari
Hello, It seems rep_header does not work at all. acl mshit rep_header X-SHMSCDN . acl mshit rep_header Content-Type -i text\/html acl html rep_header Content-Type -i ^text\/html acl apache rep_header Server ^Apache debug_options 28,3 Other types of acl works fine the log is very huge because

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-18 Thread Omid Kosari
Dear Eliezer, Unfortunately no success . I will describe what i did maybe i missed something . run the command perl -pi -e '$/=""; s/\r\n\r\n/\r\nX-SHMSCDN: HIT\r\n\r\n/;' /cache1/header/v1/* and verified that the text injected correctly squid config acl mshit rep_header X-SHMSCDN HIT

Re: [squid-users] cache peer communication about HIT/MISS between squid and and non-squid peer

2016-07-18 Thread Omid Kosari
Maybe i should describe more . The port 8080 is a parent peer of squid . It is http://squid-web-proxy-cache.1019090.n4.nabble.com/Windows-Updates-a-Caching-Stub-zone-A-windows-updates-store-td4678454.html squid config is acl wu dstdom_regex \.download\.windowsupdate\.com$ acl wu-rejects

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-17 Thread Omid Kosari
Apart from previous email , maybe this is a bug or not but the fetcher does not release open files/sockets . Its number of open files just grows . currently i have added 'ulimit 65535' at the line 4 of fetch-task.sh to see what happens . before it was killed. -- View this message in context:

Re: [squid-users] cache peer communication about HIT/MISS between squid and and non-squid peer

2016-07-17 Thread Omid Kosari
Lets assume the all of parents replies are hits . Now is there a way ? iptables -t mangle -A OUTPUT -t mangle -p tcp -m tcp -d 192.168.1.1,192.168.1.2 --sport 8080 -j DSCP --set-dscp 0x60 is this ok ? -- View this message in context:

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-17 Thread Omid Kosari
It looks like the guy there is having the same request as I have. http://squid-web-proxy-cache.1019090.n4.nabble.com/cache-peer-communication-about-HIT-MISS-between-squid-and-and-non-squid-peer-td4600931.html -- View this message in context:

Re: [squid-users] cache peer communication about HIT/MISS between squid and and non-squid peer

2016-07-17 Thread Omid Kosari
Do you found any solution ? I have same problem and looking for solution . -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/cache-peer-communication-about-HIT-MISS-between-squid-and-and-non-squid-peer-tp4600931p4678531.html Sent from the Squid - Users mailing

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-15 Thread Omid Kosari
Hi, Questions 1-What happens if disk or partition becomes full ? 2-Is there a way to use more than one location for store ? 3-Currently hits from your code , could not be counted .How i can use qos flows/tos mark those hits ? -- View this message in context:

Re: [squid-users] Windows Updates a Caching Stub zone, A windows updates store.

2016-07-14 Thread Omid Kosari
Hi, Great idea . I was looking for something like this for years and i was too lazy to start it myself ;) I am going to test your code in a multi thousand client ISP . It would more great if use the experiences of http://www.wsusoffline.net/ specially for your fetcher . It is GPL Also the ip

Re: [squid-users] time based range_offset_limit

2016-07-13 Thread Omid Kosari
Amos Jeffries wrote > Though be aware that Squid being Internet software operates using UTC > timezone. Not local wall-time. After many try and false i can confirm that the time is NOT UTC and it is local time !! Recheck plz -- View this message in context:

Re: [squid-users] time based range_offset_limit

2016-07-13 Thread Omid Kosari
Amos Jeffries wrote > Though be aware that Squid being Internet software operates using UTC > timezone. Not local wall-time. Good point , Thanks Amos Jeffries wrote > Whether that behaviour will "work" for whatever your problem actually is > nobody knows, because you did not state what the

[squid-users] assertion failed: DestinationIp.cc:41: "checklist->conn() && checklist->conn()->clientConnection != NULL"

2016-07-12 Thread Omid Kosari
Hello, squid crashes after following error assertion failed: DestinationIp.cc:41: "checklist->conn() && checklist->conn()->clientConnection != NULL" From the error massage i guess that following config may cause the problem #acl download_until_end_by_ip dst 13.107.4.50 acl freetimes time

[squid-users] time based range_offset_limit

2016-07-12 Thread Omid Kosari
Hello, I want to have "range_offset_limit none" for specific acl in specific time . The config is and squid -k parse/check does not show any error . acl download_until_end_by_ip dst 13.107.4.50 acl freetimes time 03:00-08:00 range_offset_limit none download_until_end_by_ip freetimes But please

Re: [squid-users] Hypothetically comparing SATA\SAS to NAS\SAN for squid.

2015-02-03 Thread Omid Kosari
The only reason for extend is more capacity . Currently there is no problem with current setup except capacity . I can replace each SSD with new 500GB which doubles the capacity and it is not enough . and old SSDs will be unusable . So i prefer a long term solution like NAS . Current spec of

Re: [squid-users] Hypothetically comparing SATA\SAS to NAS\SAN for squid.

2015-02-03 Thread Omid Kosari
How we can test this ? What protocol suggested for Squid ? NFS, iSCSI,... ? Apart from bandwidth, is there any important difference between 1Gbit ethernet and 10G ? Do you suggest me to buy 1Gbit storage and monitor it or you think the money will be wasted ? Any news about this REALLY

Re: [squid-users] Squid 3.4.9 RPM release

2014-12-01 Thread Omid Kosari
Any news about ubuntu version ? -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-3-4-9-is-available-tp4668181p4668576.html Sent from the Squid - Users mailing list archive at Nabble.com. ___ squid-users

Re: [squid-users] High cpu usage by re_search_internal

2014-10-06 Thread Omid Kosari
Thanks for the tip . 1. Is there any way to detect that what is current LANG without need to restart squid ? 2. Is there any way to put that string inside /etc/init/squid.conf ? how ? Thanks again . -- View this message in context: