Re: [squid-users] store_id_extras to access request header

2018-07-11 Thread Kedar K
additional note: I do see both request and response header in access.log though. On Wed, Jul 11, 2018 at 11:29 AM Kedar K wrote: > Hi, > I tried to get the request header to store id helper > with %>h option for store_id_extras; However, I get a '-' (and the default > k-v pairs intact) > > Is

Re: [squid-users] store_id_extras to access request header

2018-07-11 Thread Kedar K
It worked with a combination of store-id helper and url rewriter. - Kedar On Wed, Jul 11, 2018 at 11:42 AM Kedar K wrote: > additional note: > I do see both request and response header in access.log though. > > On Wed, Jul 11, 2018 at 11:29 AM Kedar K wrote: > >> Hi, >> I tried to get the

[squid-users] squid 3.5.27 does not respect cache_dir-size but uses 100% of partition and fails

2018-07-11 Thread pete dawgg
Hello list, i run squid 3.5.27 with some special settings for windows updates as suggested here: https://wiki.squid-cache.org/ConfigExamples/Caching/WindowsUpdates It's been running almost trouble-free for some time, but for ~2 months the cache-partition has been filling up to 100% (space;

Re: [squid-users] store_id_extras to access request header

2018-07-11 Thread Kedar K
That was a false alarm; it actually cached only the redirected url and the key generated by store-id helper was not used. On Wed, Jul 11, 2018 at 2:49 PM Kedar K wrote: > It worked with a combination of store-id helper and url rewriter. > > - Kedar > > On Wed, Jul 11, 2018 at 11:42 AM Kedar K

Re: [squid-users] Problems with peek and slice through parent proxy

2018-07-11 Thread Amos Jeffries
On 12/07/18 01:43, Kedar K wrote: > > > On Wed, Jul 11, 2018 at 7:03 PM Hess, Niklas wrote: > > Hello list, > > __ __ > > I´m setting up a Squid proxy specifically to scan the incoming > traffic from a cloud platform. > Please clarify what "incoming" means to you. Is

Re: [squid-users] store_id_extras to access request header

2018-07-11 Thread Alex Rousskov
On 07/10/2018 11:59 PM, Kedar K wrote: > I tried to get the request header to store id helper > with %>h option for store_id_extras; However, I get a '-' > store_id_extras "%>h %>a/%>A %un %>rm myip=%la myport=%lp" > Is this expected behaviour? No, it is not expected. Consider filing a bug

Re: [squid-users] Problems with peek and slice through parent proxy

2018-07-11 Thread Alex Rousskov
On 07/11/2018 09:03 AM, Amos Jeffries wrote: > IIRC, Measurement Factory have an ongoing project adding ability for > Squid to generate CONNECT messages which will make cache_peer links work > better. But even so the second proxy will still have to do its own > SSL-Bump on the crypted traffic

Re: [squid-users] Exchange OWA 2016 behind squid

2018-07-11 Thread Mike Surcouf
I am sure Amos wont mind me saying but nginx is the right tool for that scenario. Squid is a great forward proxy and I use it for our network but form incoming connections nginx is more flexible and designed for the job. -Original Message- From: squid-users

Re: [squid-users] store_id_extras to access request header

2018-07-11 Thread Kedar K
On Wed, Jul 11, 2018 at 8:37 PM Alex Rousskov < rouss...@measurement-factory.com> wrote: > On 07/10/2018 11:59 PM, Kedar K wrote: > > > I tried to get the request header to store id helper > > with %>h option for store_id_extras; However, I get a '-' > > > store_id_extras "%>h %>a/%>A %un %>rm

Re: [squid-users] store_id_extras to access request header

2018-07-11 Thread Kedar K
With following config to access request header; store_id_extras "%>h %>a/%>A %un %>rm myip=%la myport=%lp" the store_id_extras does not seem to forward header info. Is there something that I might be missing? Again, I see the header in access.log; However the same is missing from the data send

[squid-users] Problems with peek and slice through parent proxy

2018-07-11 Thread Hess, Niklas
Hello list, I´m setting up a Squid proxy specifically to scan the incoming traffic from a cloud platform. ClamAV should scan the incoming traffic. So far so good. The cloud uses WebDAV over HTTPS, so I have to SSL-Bump the incoming traffic via Peek and Splice Feature. That works indeed with

Re: [squid-users] Exchange OWA 2016 behind squid

2018-07-11 Thread Pedro Guedes
Hi thanks for your answer. But it is to vague... I first tried putting owa exchange on port 2020 (I could do it in exchange 2003). No way. Besides exchange 2016 only works over ssl. So the idea is putting apache or squid listening on port 2020 to the public and then redirecting to 443 on

Re: [squid-users] Exchange OWA 2016 behind squid

2018-07-11 Thread Amos Jeffries
On 11/07/18 23:50, Mike Surcouf wrote: > I am sure Amos wont mind me saying but nginx is the right tool for that > scenario. I don't mind the saying, but I disagree. The HTTP behaviour bugs I keep hearing about NGinX having tend to make other non-Squid proxies / servers be better when Squid

[squid-users] Exchange OWA 2016 behind squid

2018-07-11 Thread Pedro Guedes
Hi I have been reading some material on this and trying to reverse proxying squid on a diferent ssl port like 2020 an then connect to port 443 on the exchange. Al the examples follow the configs on the 443 port, same on squid and exchange. Looks like is no possible to putsquid listening on a

Re: [squid-users] squid 3.5.27 does not respect cache_dir-size but uses 100% of partition and fails

2018-07-11 Thread Amos Jeffries
On 11/07/18 22:39, pete dawgg wrote: > Hello list, > > i run squid 3.5.27 with some special settings for windows updates as > suggested here: > https://wiki.squid-cache.org/ConfigExamples/Caching/WindowsUpdates It's been > running almost trouble-free for some time, but for ~2 months the >

[squid-users] squid 4.1 works great ;)

2018-07-11 Thread Dieter Bloms
Hi, I run squid4.1 for several days in production and have to say it works pretty good. It is stable and it downloads the missing intermediate certificates automatically. Great work! Thank you very much for this version. -- Regards Dieter -- I do not get viruses because I do not use MS

Re: [squid-users] Problems with peek and slice through parent proxy

2018-07-11 Thread Kedar K
On Wed, Jul 11, 2018 at 7:03 PM Hess, Niklas wrote: > Hello list, > > > > I´m setting up a Squid proxy specifically to scan the incoming traffic > from a cloud platform. > > ClamAV should scan the incoming traffic. > > > > So far so good. > > > > The cloud uses WebDAV over HTTPS, so I have to

Re: [squid-users] squid 3.5.27 does not respect cache_dir-size but uses 100% of partition and fails

2018-07-11 Thread Alex Rousskov
On 07/11/2018 04:39 AM, pete dawgg wrote: > cache_dir aufs /mnt/cache/squid 75000 16 256 > FATAL: Ipc::Mem::Segment::open failed to shm_open(/squid-cf__metadata.shm): > (2) No such file or directory If you are using a combination of an SMP-unaware disk cache (AUFS) with SMP features such as

Re: [squid-users] Delay pools in squid4 not working with https

2018-07-11 Thread Julian Perconti
>> >> El ‎martes‎, ‎10‎ de ‎julio‎ de ‎2018‎ ‎18‎:‎57‎:‎43‎ ‎-03, Alex Rousskov >> escribió: >> >> >> On 07/10/2018 01:50 PM, Paolo Marzari wrote: >>> My home server just updated from 3.5.27, everything is working fine, but >>> delay pools seems broken to me. >> >>> Revert to 3.5.27 and