Re: [squid-users] caching and changing content

2019-09-12 Thread Amos Jeffries
On 12/09/19 8:25 pm, fansari wrote: > In my scenrio (squid 3.5.23) I have several clients which download content. > > Now I want to achieve two things: if one client has already downloaded the > content the second client requesting the same content should take it from > the squid cache. > > But:

Re: [squid-users] caching and changing content

2019-09-12 Thread fansari
I will begin with you last question: the scenario I work on was not meant to work with proxy so far but now we want to integrate it because of traffic costs. Second point is that we cannot change anything on the application right now. This means I have to take everything as it is and to configure

Re: [squid-users] Squid config

2019-09-12 Thread Matus UHLAR - fantomas
On 11.09.19 22:53, MoFaiz wrote: We are using are using transparent proxy, Squid (Squid Cache: Version 3.5.28 Service Name: squid). Any idea what does the line 2 and 3 mean in the squid config ? I am more interested in intercept and ssl-bump intercept respectively. http_port 3128 http_port 3129

[squid-users] intercept vs. accel vhost allow-direct

2019-09-12 Thread sknz
I'm running a hotspot(CoovaChilli, Freeradius, etc.) server where Squid-3.4.8(SSL enabled) for caching and logging. My machine is running on Debian 8.1.1 with 2 NIC card. One for WAN and another for LAN to manage hotspot AP(s). ERROR The requested URL could not be retrieved Below configuration

Re: [squid-users] intercept vs. accel vhost allow-direct

2019-09-12 Thread Amos Jeffries
On 12/09/19 8:43 pm, sknz wrote: > I'm running a hotspot(CoovaChilli, Freeradius, etc.) server where > Squid-3.4.8(SSL enabled) for caching and logging. My machine is running on > Debian 8.1.1 with 2 NIC card. One for WAN and another for LAN to manage > hotspot AP(s). > > ERROR > The requested

Re: [squid-users] intercept vs. accel vhost allow-direct

2019-09-12 Thread sknz
Hello, etho0 is for WAN and eth1 is for LAN side. and more detailed firewall settings: # Generated by iptables-save v1.4.21 on Thu Sep 12 15:46:58 2019 *nat :PREROUTING ACCEPT [3911:298328] :INPUT ACCEPT [384:30494]

[squid-users] Multiple LDAP authentication server for Squid

2019-09-12 Thread Antonino Sanacori
Hi. I use one ldap server for authentication of my users but now i have new users on another branch of same ldap server. How can I configure squid.conf for support ldap authentication of my users on different branches? Many thanks. Antonino Sanacori -- Informativa sulla Privacy:

[squid-users] caching and changing content

2019-09-12 Thread fansari
In my scenrio (squid 3.5.23) I have several clients which download content. Now I want to achieve two things: if one client has already downloaded the content the second client requesting the same content should take it from the squid cache. But: when this content resource on the internet is

[squid-users] squid.config Ignore domains

2019-09-12 Thread Sérgio Vieira
> Hello, > > Can you help me with the query below? > Thanks in advance. > Best regards > > >> On 7 Sep 2019, at 11:41, Sérgio Vieira wrote: >> >> Hello, >> >> I’m trying to ignore some domains (like facebook.com, youtube.com, etc), >> meaning that I don’t want logs from this domains. >>

Re: [squid-users] Disable 302 redirect in squid, but only to http://eais.rkn.gov.ru

2019-09-12 Thread Alex Rousskov
On 9/12/19 1:25 AM, Amos Jeffries wrote: > On 12/09/19 7:45 am, Igor Rylov wrote: >> After I've wrote my question, I thought, if it's possible to to do it with: >> >> acl sites_blocking_redirect url_regex BLOCKER >> reply_header_access Location deny sites_blocking_redirect >> >> Is it a workable

Re: [squid-users] caching and changing content

2019-09-12 Thread fansari
This is the first behaviour I don't want like this: 1568300283.479 3896 xxx.xxx.0.239 TCP_MISS/200 6724533 GET https://xxx/1.mp4 - HIER_DIRECT/xxx.xxx.24.241 video/mp4 The content of the mp4 file has not changed. Nevertheless after clearing the browser cache the content produces a MISS instead

Re: [squid-users] caching and changing content

2019-09-12 Thread Alex Rousskov
On 9/12/19 4:25 AM, fansari wrote: > In my scenrio (squid 3.5.23) I have several clients which download content. > > Now I want to achieve two things: if one client has already downloaded the > content the second client requesting the same content should take it from > the squid cache. When

Re: [squid-users] caching and changing content

2019-09-12 Thread fansari
In case a client has already downloaded the content and I request the content again without deleting the local cache (this would be the scenario "same client") in this case I see a 304 HEAD request which is sent out to the server (no new download from the server). Probably this works due to the

Re: [squid-users] caching and changing content

2019-09-12 Thread Alex Rousskov
On 9/12/19 10:21 AM, fansari wrote: > Yes - I can allow squid to ask the origin server whether the content is > still the same. Probably my problem is that I don't know how to do that. Most likely, Squid will do that automatically. You have not answered my other questions so it is still unclear

Re: [squid-users] caching and changing content

2019-09-12 Thread Alex Rousskov
On 9/12/19 11:02 AM, fansari wrote: > This is the first behaviour I don't want like this: In the future, please post all access.log records from the test case up to and including the first one you do not like (not just the first one you do not like). In caching, _history_ matters. >

Re: [squid-users] caching and changing content

2019-09-12 Thread fansari
squid -v gives this: Squid Cache: Version 3.5.23 Service Name: squid Raspbian linux configure options: '--build=arm-linux-gnueabihf' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var'

Re: [squid-users] caching and changing content

2019-09-12 Thread Alex Rousskov
On 9/12/19 12:22 PM, fansari wrote: > '--enable-delay-pools' OK, so we should be careful with not trusting TCP_MISS too much. > http://squid-web-proxy-cache.1019090.n4.nabble.com/file/t377780/cache.log Squid shows these headers for the second response (near 15:40:03.814): > X-Cache: MISS

[squid-users] Squid Transparent Proxy with Coovachilli is not working

2019-09-12 Thread sknz
I'm running an AP-Hotspot server(coovachilli, freeradius, squid, etc.) with two NIC(eth0 and eth1). eth0 is for WAN(internet) and eth1 is for managing LAN(APs). Coovachilli is created tun0 under the eth1 interface. I'm using squid3 as an HTTP transparent proxy. Hardware Setup Diagram

Re: [squid-users] intercept vs. accel vhost allow-direct

2019-09-12 Thread Amos Jeffries
On 12/09/19 9:53 pm, sknz wrote: > Hello, > > > > etho0 is for WAN and eth1 is for LAN side. > > and more detailed firewall settings: > > # Generated by iptables-save v1.4.21 on Thu Sep 12 15:46:58 2019 > *nat >