Re: [squid-users] High utilization of CPU squid-3.5.23, squid-3.5.24

On Wed, 2017-02-01 at 23:55 +0300, Vitaly Lavrov wrote: > Periodically squid begins to linearly increase the use of the CPU. > Sometimes this process reaches 100%. At random moment of time the CPU > usage is reduced to 5-15%, > and in the presence of client requests can again start linearly >

Re: [squid-users] High utilization of CPU squid-3.5.23, squid-3.5.24

Yes, it is require to perform extended diagnostics. Including the system level. BTW, it can also network IO. And, it is possible that even a slow DNS. Have to search. 02.02.2017 3:34, Eliezer Croitoru пишет: > I believe that the squid manager info page should give some clue about the > number

Re: [squid-users] High utilization of CPU squid-3.5.23, squid-3.5.24

I believe that the squid manager info page should give some clue about the number of concurrent requests. If it's above some number(300-400 and above) per second then removing the cache_dir from the server for a windows of a day will answer if it's a DISK IO bottle neck or something else. All

Re: [squid-users] High utilization of CPU squid-3.5.23, squid-3.5.24

It seems as IO bottleneck at first look. 02.02.2017 2:55, Vitaly Lavrov пишет: > Periodically squid begins to linearly increase the use of the CPU. > Sometimes this process reaches 100%. At random moment of time the CPU usage > is reduced to 5-15%, > and in the presence of client requests can

Re: [squid-users] Buy Certificates for Squid 'man in the middle'

In three words: Forget about it. No one in the world permit you to do Man-In-The-Middle-Attack hidden from users. CAs in the event of such certificates immediately include it in the list of untrusted. And you can give up the problems up to prison for a long time. For violation of the privacy of

Re: [squid-users] Buy Certificates for Squid 'man in the middle'

02.02.2017 2:58, angelv пишет: > Hi, > > I need your advice. > > I have a transparent proxy running with the self generated > certificates 'myCA.pem', as it is not signed by a valid entity then I > have to import the 'myCA.der' certificate in all web browsers ... > > I want to know where I can

[squid-users] Buy Certificates for Squid 'man in the middle'

Hi, I need your advice. I have a transparent proxy running with the self generated certificates 'myCA.pem', as it is not signed by a valid entity then I have to import the 'myCA.der' certificate in all web browsers ... I want to know where I can buy a valid certificate that work in Squid. PD:

[squid-users] High utilization of CPU squid-3.5.23,squid-3.5.24

Periodically squid begins to linearly increase the use of the CPU. Sometimes this process reaches 100%. At random moment of time the CPU usage is reduced to 5-15%, and in the presence of client requests can again start linearly increasing use of CPU. In the protocols are no error messages. CPU

Re: [squid-users] transparent http and https filter with white-list only

On 02/01/2017 07:46 AM, Amos Jeffries wrote: > On 28/01/2017 12:36 a.m., Sergey Klusov wrote: >> acl step1 at_step SslBump1 >> ssl_bump peek step1 >> ssl_bump splice https_allow >> ssl_bump terminate all > All other traffic will be terminated ... maybe with an HTTP error page. Bugs not

Re: [squid-users] Antivirus for squid

Thanks. Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: Yuri Voinov [mailto:yvoi...@gmail.com] Sent: Wednesday, February 1, 2017 6:16 PM To: Eliezer Croitoru Cc:

Re: [squid-users] Not all html objects are being cached

After some time reading the thread and getting to the bottom of it I think I have an idea on how to give another angle on the caching subject. This is an example access.log which I got to with the help of Amos: https://gist.github.com/elico/2ea2253ef1c09872ba90becb961acd91 It can reveal to the

Re: [squid-users] Two dns record fqdn pointing to different squid servers

On Wednesday 01 February 2017 at 20:06:22, erdosain9 wrote: > Hi. > I have running two squid servers. > One with ip access and another with users. Sorry, what do you mean by "IP access"? I assume both Squid servers have IP addresses. Do you mean that only one of them has connectivity to the

Re: [squid-users] squid reverse proxy (accelerator) for MS Exchange OWA

I'm sorry to interrupt, gentlemen - but Microsoft does not use certificate pinning in OWA? 01.02.2017 22:19, Amos Jeffries пишет: > On 27/01/2017 9:31 p.m., Vieri wrote: >> >> >> >> - Original Message - From: Alex Rousskov >> >> It's interesting to

Re: [squid-users] squid reverse proxy (accelerator) for MS Exchange OWA

On 27/01/2017 9:31 p.m., Vieri wrote: > > > > > - Original Message - From: Alex Rousskov > > >>> It's interesting to note that the following actually DOES give >>> more information (unsupported > >>> protocol):> >> * If the server sent nothing, then

Re: [squid-users] heart beet between squid peers

Thanks reinerotto .. But log file parsing to understand the state would be the last thing I would like to do It would be really great if some utility that will tell me if the heartbeat is exchanged successfully !! or may be some result file where I can check how the health !!! Thanks ~S

Re: [squid-users] Antivirus for squid

http://wiki.squid-cache.org/ConfigExamples/ContentAdaptation/C-ICAP 01.02.2017 22:14, Eliezer Croitoru пишет: > Hey Yuri, > > What wiki article? > > Thanks, > Eliezer > > > Eliezer Croitoru > Linux System Administrator > Mobile: +972-5-28704261 > Email: elie...@ngtech.co.il > > >

Re: [squid-users] Antivirus for squid

Hey Yuri, What wiki article? Thanks, Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261 Email: elie...@ngtech.co.il -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Yuri Voinov Sent: Wednesday, February

Re: [squid-users] Not all html objects are being cached

You'r welcome. I do not understand what the hell you have clung to me. I have my own point of view on the problem. Tell tales of the guy who started this thread. I know the developer's position. So, let's stop useless discussion. This is wasted time only. 01.02.2017 21:48, Amos Jeffries пишет:

Re: [squid-users] Not all html objects are being cached

On 28/01/2017 1:35 a.m., Yuri wrote: > > I just want to have a choice and an opportunity to say - "F*ck you, man, > I'm the System Administrator". Does that go down well in parties or something? > > If you do not want to violate the RFC - remove violations HTTP at all. > If you remember, this

Re: [squid-users] Antivirus for squid

Hi, again. Well i installed squidclamav, c-icap, and clamav; and its working all fine, but... the download is too slow, the download of a file. There is a way to accelerate this?? Also, when the file its a virus, the message "this is a virus bla bla", go fast... i mean the slow download its for

Re: [squid-users] transparent http and https filter with white-list only

On 28/01/2017 12:36 a.m., Sergey Klusov wrote: > Hello. I'm trying to get working transparent setup allowing only certain > domains and have problem that in order to allow https "ssl_bump splice > allowed_domains" i have to "http_access allow all", thus allowing all > other http traffic through.

Re: [squid-users] irregular traffic when using proxy, not if NATed

On 31/01/2017 6:10 a.m., le dahut wrote: > Hello. > > On certain upload websites, the traffic monitor shows an irregular > traffic when uploading through squid, while uploading NATed (not using > squid) gives a regular traffic. > > > > Can you help me find out why ? > The first thing that

Re: [squid-users] Squid error BUG 3279: HTTP reply without Date:

On 1/02/2017 4:47 p.m., Tory M Blue wrote: > > Thanks Amos, glad to see you are still around kicking!! > > refresh_pattern . 0 0% 0 ignore-reload , that's what I have in my config. > Anything I can do here to sway it from being whiney :) > > And ya i'm a bit behind for sure!! > > Tory >