Re: [squid-users] Help with Squid Proxy on AWS Nat Instance.

2015-03-03 Thread Amos Jeffries
On 4/03/2015 2:30 a.m., laxcat wrote: I have squid installed on a NAT instance in AWS. I installed squid using yum. The OS is amazon linux. When squid is not running I am able to send traffic through the nat box from private subnets but when I start squid I am not. Please follow this

[squid-users] Help with Squid Proxy on AWS Nat Instance.

2015-03-03 Thread laxcat
I have squid installed on a NAT instance in AWS. I installed squid using yum. The OS is amazon linux. When squid is not running I am able to send traffic through the nat box from private subnets but when I start squid I am not. This is the default iptables rules: [admin@box1 ~]# iptables -t

Re: [squid-users] wccp2_service_info fails on more than one port number

2015-03-03 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 You cannot combine HTTP and HTTPS in one WCCP service. http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2 03.03.15 23:04, Guy Helmer пишет: This used to work in 3.3.x: wccp2_service_info 94 protocol=tcp

[squid-users] Can single squid server handle 1Gbps traffic?

2015-03-03 Thread siva prakash
Hi, I would like to know whether a single squid server can handle 1Gbps traffic? Consider I have hardware configuration of 64 GB RAM, 12 Core processor and 10 GB NIC. Is it possible? - SP ___ squid-users mailing list

Re: [squid-users] wccp2_service_info fails on more than one port number

2015-03-03 Thread Guy Helmer
It has worked in the past with WCCP2 dynamic services at multiple sites. I’ve uncovered the wccp2_service_info ports parsing error: --- src/wccp2.cc.ORIG 2015-03-03 11:08:18.0 -0600 +++ src/wccp2.cc2015-03-03 11:10:37.0 -0600 @@ -2264,7 +2264,10 @@ if (i =

Re: [squid-users] wccp2_service_info fails on more than one port number

2015-03-03 Thread Guy Helmer
Thanks Yuri -- I have thoroughly read Cisco IOS configuration manuals pertaining to WCCP2. From what I have read, there is no strict requirement for separate configurations for standard web-cache port 80 and dynamic service for non-port 80 — wccp2 dynamic services allow redirection of any ports

[squid-users] TProxy and client_dst_passthru

2015-03-03 Thread Stakres
Hi All, Does someone know why the *client_dst_passthru* does not work in TProxy mode ? From the Squid wiki, we can read that: /Regardless of this option setting, when dealing with intercepted traffic Squid will verify the Host: header and any traffic which fails Host verification will be treated

Re: [squid-users] TProxy and client_dst_passthru

2015-03-03 Thread Eliezer Croitoru
Hey Fred, It is unclear what doesn't work for you. What would you expect to work and how it works or doesn't work from a user perspective rather then an admin? Is there any trouble from the user side about this issue? Eliezer On 04/03/2015 00:14, Stakres wrote: Hi All, Does someone know

Re: [squid-users] TProxy and client_dst_passthru

2015-03-03 Thread Stakres
Hi Eliezer, Well, we have done many tests with Squid (3.1 to 3.5.x), disabling client_dst_passthru (off) will stop the DNS entry as explained in the wiki, the option directly acts on the flag ORIGINAL_DST. As you know, ORIGINAL_DST switches the optimization off (ex: StoreID) then it's not

Re: [squid-users] Redirecting traffic to fake parent

2015-03-03 Thread johnzeng
Hello Dear Sebastian: i am thinking about node.js + squid at isp environment for video file cache or big file cache recently , Which useful public info will we will obtain from internet ? if

Re: [squid-users] Redirecting traffic to fake parent

2015-03-03 Thread Amos Jeffries
On 4/03/2015 9:35 a.m., Sebastian Goicochea wrote: Hello everyone, I'm experimenting with cache_peer directive and node.js: cache_peer 10.0.0.90 parent 0 no-query no-digest proxy-only name=test in that port I have a node.js Proxy receiveing connections in the same host, it extracts

Re: [squid-users] wccp2_service_info fails on more than one port number

2015-03-03 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Please, read Cisco iOS WCCPv2 manual first. This one: http://www.cisco.com/c/en/us/td/docs/ios/12_2/configfun/configuration/guide/ffun_c/fcf018.html and this one:

Re: [squid-users] Can single squid server handle 1Gbps traffic?

2015-03-03 Thread FredB
I would like to know whether a single squid server can handle 1Gbps traffic? Consider I have hardware configuration of 64 GB RAM, 12 Core processor and 10 GB NIC. Is it possible? Depends on what the users are doing, there is a big difference between A) One user is downloading an

[squid-users] WARNING: disk-cache maximum object size is too large for mem-cache: 102400.00 KB 90.00 KB

2015-03-03 Thread johnzeng
Hi : Thanks Amos Jeffries, i updated to squid 3.5.2 and tested QQ and other application at two different environment ( between intercept and tproxy ) in according to your advisement . result is ok as your saying . Thanks again . but i checked cache log and found ( WARNING: disk-cache maximum

Re: [squid-users] Dual-stack IPv4/IPv6 captive portal

2015-03-03 Thread Steve Hill
On 02.03.15 02:33, Amos Jeffries wrote: These people are plain wrong about how the basic protocol works and yet they are treated with must-accept policies by so many networks. Yep, one of the really big problems we have is the it works when we're not using the proxy, so the proxy must be