[squid-users] Squid 3.5.16 and vary loop objects (bug ?)

Hello I migrated my Squid to the latest version 3.5.16 (from 3.5.10) and now I have many many "Vary loop objects" What happen ? I made no configuration changes After 1 hours Squid 3.5.16 grep "Vary" /var/log/squid/cache.log | wc -l 18176 Squid 3.5.10 grep "Vary" /var/log/squid/cache.log | wc

Re: [squid-users] Squid 3.5.16 and vary loop objects (bug ?)

> Objet: Re: [squid-users] Squid 3.5.16 and vary loop objects (bug ?) > > intercept ?? No, implicit proxy > i got excellent result but not the correct way its and old issue > may be i was not posting the issue in correct way for the dev... to > understand Very recent for me, not problem

Re: [squid-users] Squid 3.5.16 and vary loop objects (bug ?)

> > mmm code ar the same must be something else corrupt the vary before > varyEvaluateMatch() > This ? http://www.squid-cache.org/Versions/v3/3.5/changesets/squid-3.5-14016.patch ___ squid-users mailing list squid-users@lists.squid-cache.org

Re: [squid-users] Squid 3.5.16 and vary loop objects (bug ?)

intercept ?? mostly those you see on accelerator that what i,m trying to explain in my other post i know the cause it's in varyEvaluateMatch in source code some how the vary its not empty and it might not match mem_obj->vary_headers so you end up in cache.log varyEvaluateMatch: Oops. Not a

Re: [squid-users] Squid 3.5.16 and vary loop objects (bug ?)

> > Version 4.0.8 has the same issue after upgrading without cache > clean-up. > Thanks I will test, I confirm the problem still present after a while Eg: this object seems never cleaned/fixed from cache Snip, there are many requests before ... 2016/04/04 13:39:11 kid1| varyEvaluateMatch:

Re: [squid-users] Squid 3.5.16 and vary loop objects (bug ?)

FredB wrote >> Objet: Re: [squid-users] Squid 3.5.16 and vary loop objects (bug ?) >> >> intercept ?? > > No, implicit proxy > >> i got excellent result but not the correct way its and old issue >> may be i was not posting the issue in correct way for the dev... to >> understand > > Very

[squid-users] Problem to configure squid for HTTPS website (HSTS or others certificate problems)

Hi users :) What I want to do: I have a dedicated server and I want to make it as a transparent adblocker through a VPN. So I have installed and configured OpenVPN and route my traffic from the VPN tun into the squid proxy. What is the problem: Websites based on http work great but those

Re: [squid-users] Squid 3.5.16 and vary loop objects (bug ?)

forgot to say if its possible to get one of those link re send thim meny time you should get alwes varyEvaluateMatch: Oops not just once ok and try to get Cache-Control header should be public if its privet then that normal as amos says -- View this message in context:

Re: [squid-users] Squid 3.5.16 and vary loop objects (bug ?)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Version 4.0.8 has the same issue after upgrading without cache clean-up. 04.04.16 14:28, FredB пишет: > Hello > > I migrated my Squid to the latest version 3.5.16 (from 3.5.10) and now I have many many "Vary loop objects" > What happen ? I made

Re: [squid-users] Squid 3.5.16 and vary loop objects (bug ?)

> > i can provide testing patchjust for testing .. not for > production until > they find the right cause > but make shurr the header ar public for those link might be your > situation ar diff... I will, but later on a platform test Now I will fallback to a previous release

Re: [squid-users] Squid 3.5.16 and vary loop objects (bug ?)

the convertion they did might has bug im using the latest trunk try my patch if it work so i may can fix it or they . im using my patch on production for testing so fare its ok but as i sayd it need to be done in correct way -- View this message in context:

[squid-users] Can Squid send the response time information to icap?

Hi, Can Squid send the response time information to icap by passing a header and a value pair to icap? I am trying to get the duration for the http responses within the icap module. That is, the time it takes to get the response from the external web server after the initial http get request

Re: [squid-users] Squid 3.5.16 and vary loop objects (bug ?)

> > Thanks I will test, I confirm the problem still present after a while > Eg: this object seems never cleaned/fixed from cache > No more success with fresh cache, after 5 minutes the messages appears again and again Joe is right there is a bug somewhere

Re: [squid-users] filtering http(s) sites, transparently

On Sun, 2016-04-03 at 21:18 -0700, Jok Thuau wrote: > I'm attempting to build a transparent proxy (policy based routing on > firewall to squid proxy) with the following behavior: > > > > 1) proxies http traffic for a given set of domains, provide an message > otherwise such "domain not allowed"

[squid-users] Squid Queries

Hi Team, I had some queries regarding the squid configuration: We are using squid as a cache for our CWS proxy. As we are aware of the max-forwards header, it decrements as it goes through each of the proxies.Currently, our CWS proxy and squid both decrement the max forwards header value when

Re: [squid-users] Problem to configure squid for HTTPS website (HSTS or others certificate problems)

On 4/04/2016 9:25 p.m., Raph Ghost wrote: > Hi users :) > > > What I want to do: I have a dedicated server and I want to make it as a > transparent adblocker through a VPN. So I have installed and configured > OpenVPN and route my traffic from the VPN tun into the squid proxy. > > > What is

Re: [squid-users] Squid 3.5.16 and vary loop objects (bug ?)

On 5/04/2016 2:44 a.m., FredB wrote: >> >> Thanks I will test, I confirm the problem still present after a while >> Eg: this object seems never cleaned/fixed from cache >> > > No more success with fresh cache, after 5 minutes the messages appears again > and again > Joe is right there is a bug

Re: [squid-users] filtering http(s) sites, transparently

On 5/04/2016 4:49 a.m., Jok Thuau wrote: > On Sun, Apr 3, 2016 at 9:59 PM, Amos Jeffries wrote: > >> On 4/04/2016 4:18 p.m., Jok Thuau wrote: >>> I'm attempting to build a transparent proxy (policy based routing on >>> firewall to squid proxy) with the following behavior:

[squid-users] Squid 3.5.16-1 is available for Ubuntu 14.04 LTS (online repo ubuntu.diladele.com)

Greetings everyone, The Squid 3.5.16-1 package for Ubuntu 14.04 LTS is now available. This version is recompiled using Squid DEB source from Debian Testing with some changes required to support SSL bump / libecap3 on Ubuntu 14.04 LTS. * Original release notes are at

Re: [squid-users] X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY error with transparent proxy configured with peek and splice

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 acl BrokenButTrustedServers2 dstdomain "/usr/local/squid/etc/dstdom2.broken" acl UnableGetIssuer ssl_error X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE sslproxy_cert_error allow BrokenButTrustedServers2

Re: [squid-users] squid 3.5 vs 4.0

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 http://wiki.squid-cache.org/RoadMap 04.04.16 21:06, Mike пишет: > Is there any list or page with any comparison information, say for the 2 > latest versions 3.5.16 and 4.0.8 beta? I understand many of the fixes coming out are being done for

Re: [squid-users] filtering http(s) sites, transparently

Thanks James! This is really close to what I need. Comparing this to my existing config, it looks like i'm pretty close, except that i don't want to "terminate" the sslbump, i need to send an error notification to the end-user. ​ ___ squid-users mailing

[squid-users] X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY error with transparent proxy configured with peek and splice

Hi community, I have setup Squid as transparent proxy (iptable is taking care of redirecting 80/tcp and 443/tcp traffic to Squid) with peek and splice on a Debian Jessie server to perform SSL inspection. Below is the interesting part of my squid.conf file: http_port 3130 http_port 3128 intercept

Re: [squid-users] filtering http(s) sites, transparently

On Sun, Apr 3, 2016 at 9:59 PM, Amos Jeffries wrote: > On 4/04/2016 4:18 p.m., Jok Thuau wrote: > > I'm attempting to build a transparent proxy (policy based routing on > > firewall to squid proxy) with the following behavior: > > > > 1) proxies http traffic for a given set

[squid-users] squid 3.5 vs 4.0

Is there any list or page with any comparison information, say for the 2 latest versions 3.5.16 and 4.0.8 beta? I understand many of the fixes coming out are being done for both, but so far I do not see any information that describes any benefit to using 4.0 over 3.5. any help would be

Re: [squid-users] Can Squid send the response time information to icap?

On 04/04/2016 08:52 AM, Giray Simsek wrote: > Hi, > > Can Squid send the response time information to icap by passing a header > and a value pair to icap? Yes, Squid can do that via adaptation_meta, but true "response time" may not be the information you actually want.

Re: [squid-users] Slowly rising CPU load (eventually hits 100)

On 2016-03-31 16:21, sq...@peralex.com wrote: > On 2016-03-31 16:07, Yuri Voinov wrote: >> >> Looks like permanently running clients, which is exausted network >> resources and then initiating connection abort. >> >> Try to add >> >> client_persistent_connections off This option didn't fix the

[squid-users] Squid 3.5.16 for Microsoft Windows 64-bit is available

Greetings everyone, The CygWin based build of Squid proxy for Microsoft Windows version 3.5.16 is now available (amd64 only!). * Original release notes are at http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.16-RELEASENOTES.html. * Ready to use MSI package can be downloaded from

Re: [squid-users] Identifying intercepted clients

On 04/03/2016 08:06 PM, Amos Jeffries wrote: On 4/04/2016 4:22 a.m., Brendan Kearney wrote: with fedora 24 being released in a couple months, haproxy v1.6.x will be available, and the ability to easily intercept HTTP traffic will be in the version (see the set-uri directive). with v1.6 i will

Re: [squid-users] squid 3.5 vs 4.0

> 04.04.16 21:06, Mike пишет: >> Is there any list or page with any comparison information, say for the 2 >> latest versions 3.5.16 and > 4.0.8 beta? I understand many of the fixes coming out are being done for > both, but so far I do not see any information that describes any benefit > to using