[squid-users] how to speed up squid

2005-10-10 Thread Tharanga
Greetings! I have installed a squid 2.5 and but my clients are always complaing that the internet access speed is very slow. iam using 1 GB RAM and i incresed cache siz to 340 MB. (approx 1/3 of physical memory.) is there any other parametes to increasse the speed of my proxy server ?? please

RE: [squid-users] how to speed up squid

2005-10-10 Thread Raphael Maseko
Try accessing your statistics through your webmin and see what kind or traffic and hit ratios you are getting on your cache. Ralph -Original Message- From: Tharanga [mailto:[EMAIL PROTECTED] Sent: Monday, October 10, 2005 12:21 PM To: squid-users@squid-cache.org Subject: [squid-users]

[squid-users] Some clients not able to access through WCCP

2005-10-10 Thread Kris Amy
Hi All, I've stumbled on a strange problem and note sure where to start looking. I've implemented and got our squid boxes working with WCCP to our cisco router. But some clients can't browse the web anymore. I don't see them hitting the access.log. But when I turn off WCCP they can browse fine.

[squid-users] Squid statistics

2005-10-10 Thread John Poltorak
What is the recommended way of producing statistics about Squid usage? -- John

Re: [squid-users] how to speed up squid

2005-10-10 Thread Kinkie
On Mon, 2005-10-10 at 16:21 +0600, Tharanga wrote: Greetings! I have installed a squid 2.5 and but my clients are always complaing that the internet access speed is very slow. iam using 1 GB RAM and i incresed cache siz to 340 MB. (approx 1/3 of physical memory.) is there any other

Re: [squid-users] Squid statistics

2005-10-10 Thread Kinkie
On Mon, 2005-10-10 at 13:13 +0100, John Poltorak wrote: What is the recommended way of producing statistics about Squid usage? Internal statistics can be accessed via cachemgr or snmp. Usage statistics are better obtained by log analisys with tools such as calamaris or webalizer. Kinkie

RE: [squid-users] Some clients not able to access through WCCP

2005-10-10 Thread Raphael Maseko
What is your Access list like on your router? Is it possible that the IP Addresses of your dial-up users are not being treated the same way as the ADSL ones? Ralph -Original Message- From: Kris Amy [mailto:[EMAIL PROTECTED] Sent: Monday, October 10, 2005 2:03 PM To:

[squid-users] Squid acl's and dansguardian

2005-10-10 Thread Philippe Dhont \(Sea-ro\)
Hello, I have a new configuration and i want to use web content filtering so i heard that dansguardian is good! Now i have a working configuration like this= Client == dansguardian == squid == internet The problem with this is that i can't use the acl's in squid and i really REALLY

[squid-users] Sparse Objects in Memory

2005-10-10 Thread trainier
I'm getting the following in my messages log, quite frequently: Oct 10 07:46:31 kalproxy (squid): Squid has attempted to read data from memory that is not present. This is an indication of of (pre-3.0) code that hasn't been updated to deal with sparse objects in memory. Squid should

[squid-users] Caching compressed javascripts.

2005-10-10 Thread Lasa Ramírez , Iñigo
Hello: We have seen that compressed objets (like javascripts) which are cached by squid, are downloaded in blocks of 4 KB. When we take a trace, we can see that the download is done in blocks of three packets: two packets of 1500 bytes and last one is not completed. Anyone knows how changing

[squid-users] Squid: no_cache directive issue.

2005-10-10 Thread Fabiano Silos Reis
Hello, Is there any kind of memory cache even if the object is marked to not to be cached? On my tests: I tried with acl someserver dstdomain domain.com no_cache deny someserver Using wget to debug it I have: [EMAIL PROTECTED] bin]# wget -S -O x http://domain.com/ --10:04:43--

Re: [squid-users] Squid: no_cache directive issue.

2005-10-10 Thread trainier
Pardon the standard is it plugged in? question, but Does wget know there's a proxy server it needs to go through? Unless you're running the proxy via port 80 (or it's transparent), wget does not appear to be going through a proxy, which would make your test useless. If your proxy is not set

Re: [squid-users] Sparse Objects in Memory

2005-10-10 Thread Mark Elsen
I'm getting the following in my messages log, quite frequently: Oct 10 07:46:31 kalproxy (squid): Squid has attempted to read data from memory that is not present. This is an indication of of (pre-3.0) code that hasn't been updated to deal with sparse objects in memory. Squid should

[squid-users] SSL+LDAP authentication??

2005-10-10 Thread Ibrahim Calisir
Hi I have googled and read nearly all the messages that are related to ssl+squid+auth, however I reached a point that squid https_port is not used as proxy port (according to message send to as an answer for SSL Error: clientNegotiateSSL: Error negotiating SSL connection on.. in Wed, 21 Jan

Re: [squid-users] Sparse Objects in Memory

2005-10-10 Thread trainier
3.0-PRE3-20050510 Tim Rainier Information Services, Kalsec, INC [EMAIL PROTECTED] Mark Elsen [EMAIL PROTECTED] wrote on 10/10/2005 12:47:44 PM: I'm getting the following in my messages log, quite frequently: Oct 10 07:46:31 kalproxy (squid): Squid has attempted to read data from

RE: [squid-users] Squid: no_cache directive issue.

2005-10-10 Thread trainier
That isn't transparent at all, actually. set the environment variable http_proxy to the ip address (or name) and port of your squid machine, so wget requests are proxied, which is a requirement for your testing purposes. Tim Rainier Information Services, Kalsec, INC [EMAIL PROTECTED] Fabiano

[squid-users] parent question

2005-10-10 Thread Hendrik Voigtländer
Hello list, I have the a problem with my setup: Two non-transparent caching backend proxies serving users with failover using proxy.pac Both backend are forwarding all traffic to dedicated non-caching squid parents each. Each parent is hooked to an ADSL-Line. If the parents die (host or

[squid-users] Bypassing cache object

2005-10-10 Thread amit pasari
Hello, I have being using Tc class for bandwidth management and squid as a cache server . Everything is working fine .l But from pass couple of months i have being trying to bypass the bandwidth management for the object which are in my cache . I mean i need to give full speed to my local user

Re: [squid-users] Performance tweaks

2005-10-10 Thread Hendrik Voigtländer
I set the full debug then checked my cache log. The slow down seems to be my acl for example acl noporn1 url_regex /usr/local/etc/squid/noporn1 Which is a file i picked off the web that contains a list of porn sites about 44318 in total. Silly me :) So that is not the way to do that i

Re: [squid-users] Performance tweaks

2005-10-10 Thread trainier
Squid's url_regex is a hideously slow way of managing blackholed urls/sites/domains. I'm not necessarily blaming the program itself, the fact is, regular expressions can be quite computational. SquidGuard, on the other hand, is VERY fast and works quite well. Lots of folks around here swear by

Re: [squid-users] Performance tweaks

2005-10-10 Thread D E Radel
- Original Message - From: [EMAIL PROTECTED] To: squid-users@squid-cache.org Sent: Tuesday, October 11, 2005 9:56 AM Subject: Re: [squid-users] Performance tweaks Squid's url_regex is a hideously slow way of managing blackholed urls/sites/domains. I'm not necessarily blaming the

RE: [squid-users] Squid reverse proxy - URL change in the response

2005-10-10 Thread Chris Robertson
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, October 07, 2005 10:21 AM To: squid-users@squid-cache.org Subject: [squid-users] Squid reverse proxy - URL change in the response hi, A question related to the URL a client receives as a

Re: [squid-users] how to speed up squid

2005-10-10 Thread Daniel Navarro
Hi all I agree with kinkie, clients will always complain. Since I own a cibercafe I always trace browsing speed. A good tool for it is bwm-ng you can google for it. Since some pages/sites can be slowly for reasons out of your responsability I just care about my ISP speed using their speed test

RE: [squid-users] SSL+LDAP authentication??

2005-10-10 Thread Chris Robertson
-Original Message- From: Ibrahim Calisir [mailto:[EMAIL PROTECTED] Sent: Monday, October 10, 2005 10:44 AM To: squid-users@squid-cache.org Subject: [squid-users] SSL+LDAP authentication?? Hi I have googled and read nearly all the messages that are related to ssl+squid+auth,

Re: [squid-users] SSL+LDAP authentication??

2005-10-10 Thread Henrik Nordstrom
On Mon, 10 Oct 2005, Ibrahim Calisir wrote: I have googled and read nearly all the messages that are related to ssl+squid+auth, however I reached a point that squid https_port is not used as proxy port (according to message send to as an answer for SSL Error: clientNegotiateSSL: Error

Re: [squid-users] Squid statistics

2005-10-10 Thread Daniel Navarro
Hi, Kinkie said right to you, I would agree SARG, the most extensive statistics I have come from it. Yours, Daniel Navarro, Venezuela. --- John Poltorak [EMAIL PROTECTED] escribió: What is the recommended way of producing statistics about Squid usage? -- John

Re: [squid-users] HTTPD reverse proxy

2005-10-10 Thread Henrik Nordstrom
On Fri, 7 Oct 2005, Brett Lymn wrote: On Thu, Oct 06, 2005 at 04:43:22PM +0200, M Harrata wrote: I had to start by all these infos: I'm using Fedora CORE 4. Squid is pre-installed. ah... that's not going to work. I presume I'm using one of the latest stable version... Do I need patch

Re: [squid-users] Error in STABLE11

2005-10-10 Thread Henrik Nordstrom
On Thu, 6 Oct 2005, Awie wrote: Just now, I got the intermittent start but no serve problem (below attached the message). Squid uses same PID with svscanboot. This makes me more clear to know the problem source. As suspected. Make sure old pid file is removed when booting to avoid this

Re: [squid-users] Caching compressed javascripts.

2005-10-10 Thread Henrik Nordstrom
On Mon, 10 Oct 2005, [iso-8859-1] Lasa Ramírez, Iñigo wrote: Hello: We have seen that compressed objets (like javascripts) which are cached by squid, are downloaded in blocks of 4 KB. When we take a trace, we can see that the download is done in blocks of three packets: two packets of

Re: [squid-users] Sparse Objects in Memory

2005-10-10 Thread Henrik Nordstrom
On Mon, 10 Oct 2005 [EMAIL PROTECTED] wrote: Oct 10 07:46:31 kalproxy (squid): Squid has attempted to read data from memory that is not present. This is an indication of of (pre-3.0) code that hasn't been updated to deal with sparse objects in memory. Is there a patch written for this? No.

Re: [squid-users] Some clients not able to access through WCCP

2005-10-10 Thread Henrik Nordstrom
On Mon, 10 Oct 2005, Kris Amy wrote: I've implemented and got our squid boxes working with WCCP to our cisco router. But some clients can't browse the web anymore. I don't see them hitting the access.log. But when I turn off WCCP they can browse fine. MTU issues perhaps? WCCP have a lot of

Re: [squid-users] bad header format?

2005-10-10 Thread Henrik Nordstrom
On Sun, 9 Oct 2005, Melanie Pfefer wrote: What is a http bad header format? and Can it be identified in a snoop output? Whenever Squid encounters something bad then it logs all the relevant details in cache.log. users see This page cannot be displayed message in browser when they try to

Re: [squid-users] pass mac address to external acl

2005-10-10 Thread Henrik Nordstrom
On Sat, 8 Oct 2005, Ben Sagal wrote: Is the a way to pass the mac address of the client to an external acl. Only by implementing support for this in the source. Regards Henrik

Re: [squid-users] parent question

2005-10-10 Thread Henrik Nordstrom
On Mon, 10 Oct 2005, [ISO-8859-1] Hendrik Voigtländer wrote: If the parents die (host or squid crash, network failures) fallback ist provided with direct access via a third line. Parents are marked down. How is this done? Should be more or less the same when the parents fails to resolve..

Re: [squid-users] delay after service load

2005-10-10 Thread Henrik Nordstrom
On Fri, 7 Oct 2005, Daniel Navarro wrote: After booting and squid start it lasts about 4-5 minutes until we can start browsing through it. How are you starting Squid? If you are using the -F command line option then don't... Regards Henrik

RE: [squid-users] Some clients not able to access through WCCP

2005-10-10 Thread Kris Amy
Ahh that's what I thought but wasn't sure. What is the easiest way to do that? Cheers, KA -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Tuesday, 11 October 2005 10:19 AM To: Kris Amy Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Some clients not

RE: [squid-users] Some clients not able to access through WCCP

2005-10-10 Thread Kris Amy
I should probably clarrify. Should I do it on the FBSD box or do it on the cisco? Cheers, KA -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Tuesday, 11 October 2005 10:19 AM To: Kris Amy Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Some clients

Re: [squid-users] Bypassing cache object

2005-10-10 Thread Henrik Nordstrom
On Tue, 11 Oct 2005, amit pasari wrote: I mean i need to give full speed to my local user if the object is in cache and if not in cache , then his bandwidth management rules should apply . Can anybody suggest me how to go about all this .. Any idea ? You could use Squid delay pools instead

Re: [squid-users] digest auth IE problem accessing protected content

2005-10-10 Thread Henrik Nordstrom
On Fri, 7 Oct 2005, Bryan Keet wrote: IE prompts the user to enter the username/password to access the content, which is correct, but then it asks for the squid authentication details again, repeatedly for every page accessed. I'm guessing IE is mixing up the passwords etc.? I would not be

Re: [squid-users] Bug when using %i in ERR_ACCESS_DENIED

2005-10-10 Thread Henrik Nordstrom
On Thu, 6 Oct 2005, Nick Forbes wrote: Hi, I have edited my ERR_ACCESS_DENIED error page to include the client IP by means of %i. This works perfectly then the error page is triggered by an http_access deny ..., however when it is triggered by an http_reply_access deny ..., the IP is

Re: [squid-users] Which the best OS for Squid?

2005-10-10 Thread Henrik Nordstrom
On Thu, 6 Oct 2005, Sushil Deore wrote: I've tried squid on all the FC's i.e. FC-1,FC-2 the latest is on FC-3 which works fine. Have had a couple of reports that the aufs disk I/O performance suffers on FC-3 and later using NPTL. But I have not verified this myself yet. Regards Henrik

Re: [squid-users] Problem with squid connecting to an FTP server

2005-10-10 Thread Henrik Nordstrom
On Thu, 6 Oct 2005, Neil A. Hillard wrote: o Squid issues a PORT command (Active FTP connection). Ok. o FTP server acknowledges with a 200. Ok. o Squid issues LIST command Ok. o FTP server establishes data connection to Squid (three-way handshake successful). Ok. o FTP server

RE: [squid-users] Some clients not able to access through WCCP

2005-10-10 Thread Henrik Nordstrom
On Tue, 11 Oct 2005, Kris Amy wrote: I should probably clarrify. Should I do it on the FBSD box or do it on the cisco? The FBSD box. Regards Henrik

Re: [squid-users] FTP reverse proxy

2005-10-10 Thread Henrik Nordstrom
On Tue, 4 Oct 2005, Alvarez, Wilfried wrote: I would like now to do the same thing with FTP servers, but Howto? You'll need an FTP proxy. Not Squid related. Regards Henrik

[squid-users] Is Squid for me? Redirecting to multiple servers...

2005-10-10 Thread David Leangen
Hello! I've read through the documentation, but there's a lot to digest. Can anybody tell me if Squid is the right product for me? Here is a summary of what I'd like to do. I would like to set up a proxy that will forward outside HTTP/HTTPS requests to a different internal server depending

RE: [squid-users] Some clients not able to access through WCCP

2005-10-10 Thread Kris Amy
Well I just tried this, but it didn't solve the problem. I also noticed that everything works fine when you have mppp turned on for single connections but when turned off it doesn't. I also found I can get to some sites (hp.com) but not to others (google.com). Cheers, KA -Original

[squid-users] 302 response becomes not cacheable with if-modified-since header?

2005-10-10 Thread Chris Fong
Hi, I am currently using squid 2.5.STABLE9. I noticed that if my request has the if-modified-since header, server's 302 response becomes no longer cacheable. However, if I take out that header, the 302 response becomes cacheable again. However, if the response is 200 instead of 302, even

[squid-users] Re: Squid regex fast purge.

2005-10-10 Thread Sally Huang
From: Ernest Rider [EMAIL PROTECTED] Date: Tue, 10 May 2005 13:28:28 -0700 Funny thing is, Our support people have found grep outperforms the purge utility for purging. In a three tier script. i.e. dumping using the utility, greping, then deleting from the cache. They are doing a test using

[squid-users] http-connect per IP ACL

2005-10-10 Thread Mark Jayson R. Alvarez
Hi, Can I have an ACL which says that http-connect method be allowed only on trusted network? Our proxy allows connection of yahoo messenger but, not limited to our network, someone tried it at home and it worked. thanks

Re: [squid-users] http-connect per IP ACL

2005-10-10 Thread Odhiambo Washington
* On 11/10/05 11:40 +0800, Mark Jayson R. Alvarez wrote: Hi, Can I have an ACL which says that http-connect method be allowed only on trusted network? Our proxy allows connection of yahoo messenger but, not limited to our network, someone tried it at home and it worked. Go read the FAQ, I

Re: [squid-users] 302 response becomes not cacheable with if-modified-since header?

2005-10-10 Thread Odhiambo Washington
* On 10/10/05 20:09 -0700, Chris Fong wrote: Hi, I am currently using squid 2.5.STABLE9. I noticed that if my request has the if-modified-since header, server's 302 response becomes no longer cacheable. However, if I take out that header, the 302 response becomes cacheable again. However,