[squid-users] Re: Fail-over config

2009-04-06 Thread Heinz Diehl
On 06.04.2009, rightfoot wrote: cache_dir ufs /var/spool/squid 40100 16 256 ^^^ If speed matters, I personally would change this to aufs. Please read the FAQ and manual what this change results in, you simply can't change it in your squid.conf, reboot, and

Re: [squid-users] Squid Scalability

2009-04-06 Thread Amos Jeffries
Gavin McCullagh wrote: Hi, On Sat, 04 Apr 2009, Amos Jeffries wrote: For now what we need are the hit/miss ratios and user numbers from Squid under peak load, and a few other details to guide comparisons. http://wiki.squid-cache.org/KnowledgeBase/Benchmarks details what we are looking

Re: [squid-users] Re: Fail-over config

2009-04-06 Thread Amos Jeffries
Heinz Diehl wrote: On 06.04.2009, rightfoot wrote: cache_dir ufs /var/spool/squid 40100 16 256 ^^^ If speed matters, I personally would change this to aufs. Please read the FAQ and manual what this change results in, you simply can't change it in your squid.conf,

[squid-users] Re: Re: Fail-over config

2009-04-06 Thread Heinz Diehl
On 06.04.2009, Amos Jeffries wrote: Only the algorithm to access that storage changes so only a reconfigure is needed to change between these three (if squid is built with them all). ^^^ That was my concern.

Re: [squid-users] Re: Re: Fail-over config

2009-04-06 Thread Amos Jeffries
Heinz Diehl wrote: On 06.04.2009, Amos Jeffries wrote: Only the algorithm to access that storage changes so only a reconfigure is needed to change between these three (if squid is built with them all). ^^^ That was my

Re: [squid-users] Squid Scalability

2009-04-06 Thread Gavin McCullagh
Hi, On Mon, 06 Apr 2009, Amos Jeffries wrote: Thank you. Added. What sort of CPU load does it run under? Very high, but the web still feels reasonably responsive in general. The load average peaked yesterday at 9 but this is since I reduced the cache size. It hit 30 last week which is when

Re: [squid-users] Squid Scalability

2009-04-06 Thread Amos Jeffries
Gavin McCullagh wrote: Hi, On Mon, 06 Apr 2009, Amos Jeffries wrote: Thank you. Added. What sort of CPU load does it run under? Very high, but the web still feels reasonably responsive in general. The load average peaked yesterday at 9 but this is since I reduced the cache size. It hit 30

Re: [squid-users] Squid Scalability

2009-04-06 Thread Gavin McCullagh
On Mon, 06 Apr 2009, Amos Jeffries wrote: Ah, sorry I meant CPU load as reported by Squid in %: It can be extracted from the general runtime information or info cachemgr page. It's the value marked CPU Usage I'll hold off until a peak time and check. If it's similar, top generally shows

Re: [squid-users] Squid Scalability

2009-04-06 Thread Amos Jeffries
Gavin McCullagh wrote: On Mon, 06 Apr 2009, Amos Jeffries wrote: Ah, sorry I meant CPU load as reported by Squid in %: It can be extracted from the general runtime information or info cachemgr page. It's the value marked CPU Usage I'll hold off until a peak time and check. If it's

[squid-users] Re: Want to create SQUID mesh, but force certain URLs to be retrieved by only one Proxy

2009-04-06 Thread Pandu E Poluan
Anyone care to comment on my email? And another question: Is it possible to use miss_access with a dstdomain acl? Rgds. Pandu E Poluan wrote: Hi, I want to know is there a way to force a URL to be retrieved by only a certain proxy, while ensuring that meshing works. Here's the

[squid-users] Re: Squid Scalability

2009-04-06 Thread Jan-Frode Myklebust
Version: 2.6.STABLE21 (RHEL5.3) OS: 64-bit RHEL5.3 CPU: Quad core Intel(R) Xeon(R) CPU E5430 @ 2.66GHz RAM: 12 GB HDD: 136GB on 3-disk RAID5, plus 30GB on 2-disk RAID1 Cache: 109663MB + 24190MB Users: ~4000 (settop-boxes) RPS: max 62

Re: [squid-users] Squid Scalability

2009-04-06 Thread Gavin McCullagh
Hi, On Tue, 07 Apr 2009, Amos Jeffries wrote: Gavin McCullagh wrote: Mine too. The operating system is on linux software RAID1 partitions so I Ah, there we probably have the answer as to why there is so much iowait. I'm not convinced of that. The iowait seems to grow directly as a

[squid-users] Re: cache-peer problem - query string requests

2009-04-06 Thread Amos Jeffries
Vivek wrote: Hi All, I am using squid 2.7 and configured Polipo server as a parent of squid.. cache_peer 172.16.1.40 parent8123 3130 no-query default I think maybe heirarchy_stoplist is set in your Squid. Be aware there are bugs when Squid sends dynamic requests to peers which

[squid-users] cache-peer problem - query string requests

2009-04-06 Thread Vivek
Hi All, I am using squid 2.7 and configured Polipo server as a parent of squid.. cache_peer 172.16.1.40 parent8123 3130 no-query default But all the requests go via Polipo except the URLs with query ? string. How do we force the squid to send all the request to parent?

Re: [squid-users] Squid Scalability

2009-04-06 Thread Quin Guin
Hi, Here are the results for 2 of our squid servers with the highiest use. One is 2.6 and the other is 2.7 they all use AUFS with JBOD ext2, rw,notatime. I will upgrade the 2.6 to 2.7 this week so we can see the change. Version 2.7.STABLE6 Quad-Core CPU Intel(R) Xeon(R) CPU L5420 @

Re: [squid-users] Re: Want to create SQUID mesh, but force certain URLs to be retrieved by only one Proxy

2009-04-06 Thread Amos Jeffries
Pandu E Poluan wrote: Anyone care to comment on my email? And another question: Is it possible to use miss_access with a dstdomain acl? Rgds. Pandu E Poluan wrote: Hi, I want to know is there a way to force a URL to be retrieved by only a certain proxy, while ensuring that meshing

Re: [squid-users] Squid Scalability

2009-04-06 Thread Amos Jeffries
Gavin McCullagh wrote: Hi, On Tue, 07 Apr 2009, Amos Jeffries wrote: Gavin McCullagh wrote: Mine too. The operating system is on linux software RAID1 partitions so I Ah, there we probably have the answer as to why there is so much iowait. I'm not convinced of that. The iowait seems to

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Leslie Jensen
Leslie Jensen wrote: Hello My Proxy, Squid-3.0.13 on FreeBSD 7.1-RELEASE-p4, is running fine but I can't get the folowing to work. # acl blocked_sites dstdomain .aftonbladet.se. acl blocked_sites dstdomain /usr/local/etc/squid/dstdomain deny_info ERR_ACCESS_DENIED blocked_sites

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Bharath Raghavendran
Were you testing it with a non-localhost client? The only line i can see that can affect it is http_access allow localhost .. which means localhost gets access irrespective of the http_access directives that come after this one. btw, although this is not related to the problem, you have

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Pandu E Poluan
I see that the very first http_access is this: http_access allow localnet That means all requests coming from the localnet will be allowed. Assuming you've set localnet correctly (i.e. the IP address range covers your LAN), then that rule practically allows every URL; the http_access

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Pandu E Poluan
Or, alternatively, place http_access allow localhost *AFTER* http_access deny blockedlist That should do the trick, methinks. Rgds. [p] Bharath Raghavendran wrote: Were you testing it with a non-localhost client? The only line i can see that can affect it is http_access allow localhost ..

Re: [squid-users] acl dstdomains does not block!

2009-04-06 Thread Leslie Jensen
2009/4/6 Leslie Jensen les...@eskk.nu Leslie Jensen wrote: Hello My Proxy, Squid-3.0.13 on FreeBSD 7.1-RELEASE-p4, is running fine but I can't get the folowing to work. # acl blocked_sites dstdomain .aftonbladet.se. acl blocked_sites dstdomain /usr/local/etc/squid/dstdomain

[squid-users] zero sized replay

2009-04-06 Thread Riccardo Castellani
I have squid 2.5 stable and I often obtain zero sized replay to visit specific sistes both by I.E. and Firefox. My squid traffic is deteted from another machine where a transparent proxy B forwards again requests to Internet. I tried to use only Squid or only proxy B and in both cases the site

Re: [squid-users] Re: cache-peer problem - query string requests

2009-04-06 Thread Vivek
Amos, Thanks for your reply. It is working. Regards Vivek -Original Message- From: Amos Jeffries squ...@treenet.co.nz To: Vivek vivek...@aol.in Cc: squid-users@squid-cache.org; hen...@henriknordstrom.net Sent: Mon, 6 Apr 2009 5:51 pm Subject: [squid-users] Re: cache-peer

[squid-users] squid and proxy.pac file query

2009-04-06 Thread Benedict simon
Dear All, I am sorry if i posting it to the wrong group I have Centos OS 5.2 server with squid-2.6.STABLE6-5.el5_1.3 running perfect for quite some time we have a couple of local intranet web sites which are working with or without the bypass proxy server for local address in their browsers.

[squid-users] ...Memory-only Squid questions

2009-04-06 Thread David Tosoff
Hey all, haven't heard anything on this and could really use some help. :) You can disregard the HIT related questions, as once I placed this into a full scale test, it started hitting from memory wonderfully (~40% offload from the origin) The config works great, to a point. It fills up my

[squid-users] Squid Reverse proxy cache Storage for Vhosts

2009-04-06 Thread Prabhakar, Ramprasad (GE, Corporate, consultant)
For a squid reverse proxy cache, is there a way to set squid to use a single cache storage for all the virtual hosts it hosts ? For example, abc.domain.com, cde.domain.com, fgh.domain.com all point to the same site. Will Squid storage abc.domain.com/image.png, cde.domain.com/image.png

Re: [squid-users] Fail-over config

2009-04-06 Thread rightfoot
So with your help, I now have squid running and it seems to be doing ok. I'm not yet sure what to expect in terms of speed but in quick tests so far; site 1- From 8.8 to 4.2 site 2 - From 4.6 to 4.9 site 3 - From 13.8 to 6.6 site 4 - From 2.3 to 2 site 5 - From 13.3 to 9 site 6 - From

Re: [squid-users] Active - Active

2009-04-06 Thread graham
Hello Pieter, The failover requirement that you describe looks remarkably like one of the configurations commonly used by Astaro firewall devices. If you were to conceptually remove the squid function from the failover, ie in the simplest case onto another device on the private LAN, then an

Re: [squid-users] Active - Active

2009-04-06 Thread Pieter De Wit
Hi Graham, That is correct - but since I would like to run a transparent proxy (yes - I *could* redirect off the box) I would prefer to keep it on the boxes. They are going to be beefy boxes to say the least, so might as well use them while we can :) I spoke to the guys and they are happy

Re: [squid-users] zero sized replay

2009-04-06 Thread Kinkie
On Mon, Apr 6, 2009 at 5:31 PM, Riccardo Castellani ric.castell...@alice.it wrote: I have squid 2.5 stable and I often obtain zero sized replay to visit specific sistes both by I.E. and Firefox. My squid traffic is deteted from another machine where a transparent proxy B forwards again

[squid-users] using squid reverse proxy to filter shot TCP requests

2009-04-06 Thread Woodward, Andrew
Hi group, I'm wondering if anyone has seen any use cases where they have set up squid to reverse-proxy for TCP connections that may not contain enough data. A simple test of the entire request size would be sufficient. The request would then be sent on if it passes the test. No caching of the

[squid-users] cache_peer over openvpn

2009-04-06 Thread jonnytabpni
Hi folks, I have an openvpn server which also runs squid. I wish this squid server to use a squid server running on a openvpn client as it's parent cache. It's not working. The connection to to remote openvpn client times out. Access to the openvpn client is OK everwhere else (e.g. ping from

Re: [squid-users] ...Memory-only Squid questions

2009-04-06 Thread Chris Robertson
David Tosoff wrote: Hey all, haven't heard anything on this and could really use some help. :) You can disregard the HIT related questions, as once I placed this into a full scale test, it started hitting from memory wonderfully (~40% offload from the origin) Good news... The config

Re: [squid-users] concurrency attribute external_acl_type

2009-04-06 Thread Chris Robertson
louis gonzales wrote: List, 1) for the concurrency attribute does this simply indicate how many items in a batch will be sent to the external helper? No. There is no such thing as a batch in HTTP. 1.1) assuming concurrency is set to 6 for example, and let's assume a user's browser

Re: [squid-users] Can a guru verify my config?

2009-04-06 Thread Chris Robertson
Amos Jeffries wrote: Hello, I'm placing a few details you may need to be aware of inline to reply to your latest post, followed by the help you asked for in your first post. What the heck kind of reply is this and why did you send it to my email address and not post it in the forums!

Re: [squid-users] squid and proxy.pac file query

2009-04-06 Thread Chris Robertson
Benedict simon wrote: Dear All, I am sorry if i posting it to the wrong group I have Centos OS 5.2 server with squid-2.6.STABLE6-5.el5_1.3 running perfect for quite some time we have a couple of local intranet web sites which are working with or without the bypass proxy server for local

Re: [squid-users] ...Memory-only Squid questions

2009-04-06 Thread David Tosoff
Thanks Chris. I had already read both of the wiki post and the thread you directed me to before I posted this to the group. I already had compiled heap into my squid before this issue happened. I am using heap GDSF. And, I wasn't able to find --enable-heap-replacement as a compile option in

[squid-users] disable error page in squid

2009-04-06 Thread Ryan Raymond
Hi all When accessing an unreachable server or dns no found, squid has been generated an error page. How to disable this page generated by Squid? and display the original error page from browser ? Thanks Best Regards, RR

[squid-users] Squid-tproxy patch for squid 3.0

2009-04-06 Thread Vivek
Hi All, I need squid tproxy patch for squid 3.0. I know squid 3.1 has the built-in code for tproxy support. But i need the patch file. Where can i download the patch( Not kernel patch) squid-tproxy patch?. If anybody knows give the link. Regards Vivek

[squid-users] Squid 3.1.6, zph, shorewall, and tc on debian 5.0 (lenny)

2009-04-06 Thread Jason
Everyone, I have compiled squid 3.1.6 from source on amd64 Debian 5.0 with zph options enabled. I don't peer with any other caches, so all peering stuff is disabled in my build. I did not compile a kernel with the zph patches, because, as I understand, that is only necessary if I want to

RE: [squid-users] ...Memory-only Squid questions

2009-04-06 Thread Gregori Parker
Glad to help David, please let us know how it progresses. Dont know if you saw this in the archives: http://www.mail-archive.com/squid-users@squid-cache.org/msg19824.html but it might help guide you on your SO_FAIL issue. It might be worth moving to LRU and establishing a baseline of

[squid-users] defaultsite=domainname?

2009-04-06 Thread louis gonzales
Dist, Squid 2.7.Stable6 I'm setting up a reverse proxy, such that the Squid system will be viewed as the originserver to the clients contacting it. Does the defaultsite= attribute get the name of the actual web server or the proxy server? Thanks, -- Louis Gonzales BSCS EMU 2003 HP Certified

[squid-users] Thnaks Re: [squid-users] squid and proxy.pac file query

2009-04-06 Thread Benedict simon
Benedict simon wrote: Dear All, I am sorry if i posting it to the wrong group I have Centos OS 5.2 server with squid-2.6.STABLE6-5.el5_1.3 running perfect for quite some time we have a couple of local intranet web sites which are working with or without the bypass proxy server for local

Re: [squid-users] Re: Want to create SQUID mesh, but force certain URLs to be retrieved by only one Proxy

2009-04-06 Thread Amos Jeffries
Pandu E Poluan wrote: The URL is allowed to be accessed by everyone, ProxyA-users, and ProxyB/C-users alike. I just want the URL to be retrieved by ProxyA, because accessing that certain URL through ProxyB/C is too damn slow (pardon the language). Rgds. Okay. Thought it might be

Re: [squid-users] Squid-tproxy patch for squid 3.0

2009-04-06 Thread Amos Jeffries
Vivek wrote: Hi All, I need squid tproxy patch for squid 3.0. I know squid 3.1 has the built-in code for tproxy support. But i need the patch file. Where can i download the patch( Not kernel patch) squid-tproxy patch?. If anybody knows give the link. The patch I and others were

Re: [squid-users] Squid 3.1.6, zph, shorewall, and tc on debian 5.0 (lenny)

2009-04-06 Thread Amos Jeffries
Jason wrote: Everyone, I have compiled squid 3.1.6 from source on amd64 Debian 5.0 with NP: please use the correct version numbering: 3.1.0.6. there will probably be a 3.1.6 at some point in the future and hopefully this problem will not apply to those users, best not to add confusion.