Re: [squid-users] High availability based on Squid process

2008-04-16 Thread ??????????? ???????
BJ Tiemessen ?: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Look at Linux HA (www.linux-ha.org), very nice software. BJ Nick Duda wrote: | I might need to take this elsewhere, but curious if anyone is doing this already. | | I need to have a failover Squid proxy server in the event the

Re: [squid-users] Accessing cachemgr.cgi

2008-04-16 Thread hdkutz
On Tue, Apr 15, 2008 at 01:53:46PM -0800, Chris Robertson wrote: hdkutz wrote: Hello List, pretty new to squid 3.0. Tried to configure cachemgr.cgi. Problem: Squid is not listening to his standard port 3128. It is configured to Listen on port 80. Apache Webserver is configured to use port

Re: [squid-users] How to check the cache_peer sibling is working?

2008-04-16 Thread Henrik Nordstrom
ons 2008-04-16 klockan 12:24 +0800 skrev John Lui: in the squid.default.conf,it says if setting icp_query_timeout 0(by default) will automatically determine an optimal ICP query timeout value based on the round-trip-time, Isn't it meaning icp_query_timeout 0 is better than icp_query_timeout

[squid-users] Only one outgoing connection for an incomming connection

2008-04-16 Thread Roman Aspetsberger
Hello. I would like to set up the following environment: Client -- ProxyIN -- Squid -- ProxyOUT -- Webserver The problem is, that ProxyIN adds some request headers, which ProxyOUT needs. So, is there a chance to config Squid in a way, that it opens only one outgoing connection for an

[squid-users] cross-domain in Active Directory 2003 with Squid

2008-04-16 Thread Martin . Steiner
Hello! I already tried 2 weeks to install Squid 2.6.STABLE18 for Windows. So what I want is following: I created a group in the Active Directory with the Name InternetUsers, Group Scope Domain local, Group Type Security. The group scope Domain local is mandatory because we have AD-Trusts with

Re: [squid-users] Only one outgoing connection for an incomming connection

2008-04-16 Thread Amos Jeffries
Roman Aspetsberger wrote: Hello. I would like to set up the following environment: Client -- ProxyIN -- Squid -- ProxyOUT -- Webserver The problem is, that ProxyIN adds some request headers, which ProxyOUT needs. So, is there a chance to config Squid in a way, that it opens only one outgoing

Re: [squid-users] control bandwidth usage on internal LAN?

2008-04-16 Thread Dave Augustus
On Sunday 09 March 2008 9:49:49 pm Chuck Kollars wrote: How can I prioritize traffic on my _internal_ LAN (or to use different words the _other_ side of Squid)? OK The first request for a very large file uses some amount of drop bandwidth which I can control with things like delay_pools.

[squid-users] Marking Cached traffic..

2008-04-16 Thread Stephan Viljoen
HI There, I was wondering whether it's posible to mark cached traffic with a different TOS then uncached traffic. I need to come up with a way of passing cached traffic through our bandwidth manager without taxing the end user for it. Basically giving them the full benefits of the proxy

[squid-users] authentification and banners

2008-04-16 Thread Serj A. Androsov
Hello all, I use basic authentification and want to open full access to some site blabla.com. The blabla.com page can contain images from the different sites. The authentification windows appeared because of these banners have different site urls. Can some explain how can I solve it?

Re: [squid-users] Marking Cached traffic..

2008-04-16 Thread Adrian Chadd
On Wed, Apr 16, 2008, Stephan Viljoen wrote: HI There, I was wondering whether it's posible to mark cached traffic with a different TOS then uncached traffic. I need to come up with a way of passing cached traffic through our bandwidth manager without taxing the end user for it.

Re: [squid-users] Clock sync accuracy importance?

2008-04-16 Thread K K
Have you considered running one of the machines as an NTP server, have the others sync their clock to that? On 4/14/08, Jon Drukman [EMAIL PROTECTED] wrote: Should I throw an Expires header in there? Yes, explicit 'Expires' headers help squid make smarter decisions. If you know an object is

[squid-users] Squid problem

2008-04-16 Thread Michael J. Perrone

[squid-users] Squid Problem

2008-04-16 Thread Michael J. Perrone
Hello, My company uses Squid as a proxy server for select users within our organization. This solution has been functioning without incident for approximately 1.5 years. Recently (within the past three weeks), we have been experiencing problems where the software fails to serve webpages. After

[squid-users] Re: Clock sync accuracy importance?

2008-04-16 Thread Jon Drukman
K K wrote: Have you considered running one of the machines as an NTP server, have the others sync their clock to that? no, one of the machines is shared hosting so i don't have access to run my own ntpd on it. Yes, explicit 'Expires' headers help squid make smarter decisions. If you know

Re: [squid-users] Squid Problem

2008-04-16 Thread Kinkie
On Wed, Apr 16, 2008 at 6:57 PM, Michael J. Perrone [EMAIL PROTECTED] wrote: Hello, My company uses Squid as a proxy server for select users within our organization. This solution has been functioning without incident for approximately 1.5 years. Recently (within the past three weeks), we

Re: [squid-users] Squid2-only plugin from Secure Computing

2008-04-16 Thread Alex Rousskov
On Wed, 2008-04-16 at 11:08 +0800, Adrian Chadd wrote: On Wed, Apr 16, 2008, Adam Carter wrote: I think SmartFilter patches the squid source, so is tied to specific versions. It certainly adds another option to the configure script. You can download it for free from

Re: [squid-users] Squid2-only plugin from Secure Computing

2008-04-16 Thread Adrian Chadd
On Wed, Apr 16, 2008, Alex Rousskov wrote: Well, we could also talk to them about rolling their existing patches into the Squid-2 codebase. I doubt their existing patches should be included in Squid sources because they are relatively large and very SmartFilter-specific. It would be

Re: [squid-users] authentification and banners

2008-04-16 Thread Кабиольский Евгений
Serj A. Androsov пишет: Hello all, I use basic authentification and want to open full access to some site blabla.com. The blabla.com page can contain images from the different sites. The authentification windows appeared because of these banners have different site urls. Can some explain how

Re: [squid-users] squid-2 fork - cacheboy (again)

2008-04-16 Thread Alex Rousskov
On Wed, 2008-04-16 at 11:22 +0800, Adrian Chadd wrote: Well, I'm at that point again, where I'd like to do some large-scale work to the Squid-2 tree to fix a whole range of longstanding performance and codebase issues to help the codebase move forward. Unfortunately this clashes with the

[squid-users] Can I find a performance document for Squid?

2008-04-16 Thread JXu
Hi All, Can I find a performance document for Squid? for example, what is Squid throughput? Thanks, Forrest -- View this message in context: http://www.nabble.com/Can-I-find-a-performance-document-for-Squid--tp16732532p16732532.html Sent from the Squid - Users mailing list archive at

[squid-users] YouTube and other streaming media (caching)

2008-04-16 Thread Ray Van Dolson
Hello all, I'm beginning to implement a Squid setup and am in particular looking to cache Youtube as it is a significant chunk of our traffic and we don't want to outright block it (yet). I'm using squid-2.6.STABLE6 from RHEL 5.1 (latest errata). I've been reading around a lot and am seeking a

Re: FW: [squid-users] Squid Problem

2008-04-16 Thread Kinkie
On Wed, Apr 16, 2008 at 7:33 PM, Michael J. Perrone [EMAIL PROTECTED] wrote: [...] when I type the command squidclient mgr:info this is the result... Is this how I get to the cache manager DNS page (the machine is not running apache...)? [EMAIL PROTECTED] ~]# squidclient mgr:info

Re: [squid-users] Squid2-only plugin from Secure Computing

2008-04-16 Thread Henrik Nordstrom
ons 2008-04-16 klockan 11:08 +0800 skrev Adrian Chadd: Well, we could also talk to them about rolling their existing patches into the Squid-2 codebase. No, it's some small glue patches and a large binary blob... Regards Henrik

Re: [squid-users] Accessing cachemgr.cgi

2008-04-16 Thread Chris Robertson
hdkutz wrote: Thanx for your suggestion. No SELinux, firewall rules. You are right. Indeed, squid only listens on one IP. Reconfigured squid to listen on 127.0.0.1:80 also. Got now: snip ERROR The requested URL could not be retrieved While trying to retrieve the URL: cache_object://127.0.0.1/

Re: [squid-users] YouTube and other streaming media (caching)

2008-04-16 Thread Adrian Chadd
The problem with caching Youtube (and other CDN content) is that the same content is found at lots of different URLs/hosts. This unfortunately means you'll end up caching multiple copies of the same content and (almost!) never see hits. Squid-2.7 -should- be quite stable. I'd suggest just running

Re: [squid-users] YouTube and other streaming media (caching)

2008-04-16 Thread Ray Van Dolson
On Thu, Apr 17, 2008 at 08:11:51AM +0800, Adrian Chadd wrote: The problem with caching Youtube (and other CDN content) is that the same content is found at lots of different URLs/hosts. This unfortunately means you'll end up caching multiple copies of the same content and (almost!) never see

[squid-users] How do I DOS-proof my cache

2008-04-16 Thread David Young
Hey Squid users :) We had a problem recently where a user with a misconfigured download accelerator was able to bring our proxy to its knees, downloading an 80MB driver about 100 times in parallel. We temporarily solved the problem by stopping the download accelerator, but this makes me

Re: [squid-users] Marking Cached traffic..

2008-04-16 Thread Amos Jeffries
HI There, I was wondering whether it's posible to mark cached traffic with a different TOS then uncached traffic. I need to come up with a way of passing cached traffic through our bandwidth manager without taxing the end user for it. Basically giving them the full benefits of the proxy

Re: [squid-users] YouTube and other streaming media (caching)

2008-04-16 Thread Adrian Chadd
On Wed, Apr 16, 2008, Ray Van Dolson wrote: And here is the store_url_rewrite script. I added some logging: Cool! Could likely remove the last elsif block at this point as it's catching on the previous one now. But this is working great! Probably some tuning yet to be done. Maybe

Re: [squid-users] How do I DOS-proof my cache

2008-04-16 Thread Amos Jeffries
Hey Squid users :) We had a problem recently where a user with a misconfigured download accelerator was able to bring our proxy to its knees, downloading an 80MB driver about 100 times in parallel. We temporarily solved the problem by stopping the download accelerator, but this makes me

Re: [squid-users] How do I DOS-proof my cache

2008-04-16 Thread David Young
Hi Amos, Unfortunately the maxconn ACL is not suitable in our circumstance, since we service several clients who are behind NAT'd IPs.. so there may be as many as 50 real browsers behind a single IP.. the collapsedforwarding option looks interesting, I'll keep an eye on that, thanks :)

Re: [squid-users] Can I find a performance document for Squid?

2008-04-16 Thread Alex Rousskov
On Wed, 2008-04-16 at 13:10 -0700, JXu wrote: Can I find a performance document for Squid? for example, what is Squid throughput? Squid performance varies a lot depending on your hardware and deployment scenario. Some Squids can do thousands of transactions per second (hundreds of Mbits/sec).

Re: [squid-users] How do I DOS-proof my cache

2008-04-16 Thread Amos Jeffries
David Young wrote: Hi Amos, Unfortunately the maxconn ACL is not suitable in our circumstance, since we service several clients who are behind NAT'd IPs.. so there may be as many as 50 real browsers behind a single IP.. the collapsedforwarding option looks interesting, I'll keep an eye on