Re: [squid-users] Access control by user age

2009-04-25 Thread Amos Jeffries
Christian Tosta wrote: Hello list, For a time I'm searching web and squid lists for a solution for my case. I need to check users age when they try to access some sites like Orkut. In our environment we have a LDAP directory when user data is stored and I can search for user personal data. I fou

Re: [squid-users] how to avoid external acl caching ? external_acl_cache_add

2009-04-25 Thread Amos Jeffries
Julien P. wrote: Hi everyone, I am trying to setup a very specific ACL using an external acl program written in C. I looked almost everywhere and I wasn't able to find anything about that ... This is the output that I get when I try to access a website that I didn't try to access before: 2009/

Re: [squid-users] Squid on transparent proxy for 443 request

2009-04-25 Thread Amos Jeffries
Jorge Bastos wrote: Hi there, What are the concerns that I need to have to make squid act as a transrent proxy on port 443? I need to catch the data that is being sent from a website that works under https, is it possible? Data Right now I only use it for standard port 80. Not possible. HTT

Re: [squid-users] Long running squid proxy slows way down

2009-04-25 Thread Amos Jeffries
Gavin McCullagh wrote: Hi Amos, On Sat, 25 Apr 2009, Amos Jeffries wrote: ipcache_low 90 # ipcache_high 95 ipcache_high 95 cache_mem 1024 MB # cache_swap_low 90 cache_swap_low 90 # cache_swap_high 95 cache_swap_high 95 For cache >1GB the difference of 5% between high/low can mean long period

[squid-users] Access control by user age

2009-04-25 Thread Christian Tosta
Hello list, For a time I'm searching web and squid lists for a solution for my case. I need to check users age when they try to access some sites like Orkut. In our environment we have a LDAP directory when user data is stored and I can search for user personal data. I found the external_acl is th

[squid-users] how to avoid external acl caching ? external_acl_cache_add

2009-04-25 Thread Julien P.
Hi everyone, I am trying to setup a very specific ACL using an external acl program written in C. I looked almost everywhere and I wasn't able to find anything about that ... This is the output that I get when I try to access a website that I didn't try to access before: 2009/04/25 20:51:59.405|

Re: [squid-users] High response time warning option

2009-04-25 Thread John Horne
On Sat, 2009-04-25 at 16:14 +0100, John Horne wrote: > Hello, > > We are running Squid 2.7stable6 and I have configured the > 'high_response_time_warning' option. > > However, I cannot find this option in the squid source except for in > src/cf.data.pre. Is the option still valid, and if so can s

[squid-users] High response time warning option

2009-04-25 Thread John Horne
Hello, We are running Squid 2.7stable6 and I have configured the 'high_response_time_warning' option. However, I cannot find this option in the squid source except for in src/cf.data.pre. Is the option still valid, and if so can someone point me to the relevant source file(s)? Thanks, John.

Re: [squid-users] CONNECT method support(for https) using squid3.1.0.6 + tproxy4

2009-04-25 Thread Mikio Kishi
Hi, Amos > Added to Squid-3. I'd really really appreciate ! Sincerely, -- Mikio Kishi On Fri, Apr 24, 2009 at 1:20 PM, Amos Jeffries wrote: > Mikio Kishi wrote: >> >> Hi, Amos >> >>> Ah, you need the follow_x_forwarded_for feature on Proxy(1). >> >> That's right, I know about that, but I'd li

Re: [squid-users] Long running squid proxy slows way down

2009-04-25 Thread Matus UHLAR - fantomas
On 24.04.09 10:36, Seann Clark wrote: >I am looking for ideas on ways to avoid this, as the tuning guides I > have found lead me all over the place. What I am seeing is over time the > cache starts to slow down from being lightning fast to being ok, to it > taking 1-3 minutes to decide to

[squid-users] Squid on transparent proxy for 443 request

2009-04-25 Thread Jorge Bastos
Hi there, What are the concerns that I need to have to make squid act as a transrent proxy on port 443? I need to catch the data that is being sent from a website that works under https, is it possible? Data Right now I only use it for standard port 80.

Re: [squid-users] Long running squid proxy slows way down

2009-04-25 Thread Gavin McCullagh
Hi Amos, On Sat, 25 Apr 2009, Amos Jeffries wrote: >> ipcache_low 90 >> # ipcache_high 95 >> ipcache_high 95 >> cache_mem 1024 MB >> # cache_swap_low 90 >> cache_swap_low 90 >> # cache_swap_high 95 >> cache_swap_high 95 > > For cache >1GB the difference of 5% between high/low can mean long > pe

[squid-users] Re: Re: Long running squid proxy slows way down

2009-04-25 Thread Heinz Diehl
On 25.04.2009, Seann Clark wrote: > Based on what is easiest for me to do initally I expect at > least a 20% improvement, if not a 70% improvement (depends on how I look > at it) on what I get for an improvement of the system. These mount options help to improve responsiveness and reduce lat

Re: [squid-users] Re: Long running squid proxy slows way down

2009-04-25 Thread Seann Clark
Heinz Diehl wrote: On 24.04.2009, Seann Clark wrote: Fedora 9, ext3 filesystem ^^^ Besides all the tips you received from Amos, you could maybe consider to mount the ext3 partitions with the "noatime" and "data=writeback" options to improve latency. Depending o