[squid-users] Quadruple memory usage with squid

2009-11-22 Thread Linda Messerschmidt
We run four squid 2.7-STABLE7 reverse proxies. Two have 8GB of memory. cache_mem is set to 2GB. One has 16GB of memory. cache_mem is set to 4GB. One has 24GB of memory. cache_mem is set to 6GB. All machines are 64-bit FreeBSD 7.2. On all machines, we have: cache_dir null /null

Re: [squid-users] rtsp on squid

2009-11-22 Thread Matus UHLAR - fantomas
fre 2009-11-20 klockan 12:35 -0700 skrev Gerardo Valdez Andrade: there is support for RTSP protocol on Squid 2.6 STABLE14? On 21.11.09 03:46, Henrik Nordstrom wrote: Squid is an HTTP proxy, so no. You need either NAT with RTSP support or an RTSP proxy for RTSP, if no direct connection

[squid-users] Handling slow HTTP client

2009-11-22 Thread Ryan Chan
Hello, People said Squid can be used to handle slow HTTP client, right? http://jeremy.zawodny.com/blog/archives/008496.html Then, what parameters / settings are suggested? Seems difficult to find a suitable one. Thanks.

Re: [squid-users] Handling slow HTTP client

2009-11-22 Thread Kinkie
Then, what parameters / settings are suggested? Seems difficult to find a suitable one. Should work out of the box. But then it depends what you mean by Slow Client -- /kinkie

Re: [squid-users] Handling slow HTTP client

2009-11-22 Thread Ryan Chan
On Sun, Nov 22, 2009 at 11:29 PM, Kinkie gkin...@gmail.com wrote: Then, what parameters / settings are suggested? Seems difficult to find a suitable one. Should work out of the box. But then it depends what you mean by Slow Client That's why I ask if any parameters are related, so I can fine

Re: [squid-users] Handling slow HTTP client

2009-11-22 Thread Brian Mearns
On Sun, Nov 22, 2009 at 10:34 AM, Ryan Chan ryanchan...@gmail.com wrote: On Sun, Nov 22, 2009 at 11:29 PM, Kinkie gkin...@gmail.com wrote: Then, what parameters / settings are suggested? Seems difficult to find a suitable one. Should work out of the box. But then it depends what you mean by

[squid-users] Your opinion: Squid and MySQL interaction, for redirecting users? Is it possible?

2009-11-22 Thread Jonas Brunsgaard
Hallo World We are 156 users on separated VLANs sharing the same internet connection, and we have established a transparent squid server on the network. We have a MySQL server (in the house) which know if people are unblocked(value=0) or blocked(value=1) We know witch ip-address people are

Re: [squid-users] Your opinion: Squid and MySQL interaction, for redirecting users? Is it possible?

2009-11-22 Thread Amos Jeffries
Jonas Brunsgaard wrote: Hallo World We are 156 users on separated VLANs sharing the same internet connection, and we have established a transparent squid server on the network. We have a MySQL server (in the house) which know if people are unblocked(value=0) or blocked(value=1) We know witch

[squid-users] Different SSL keys for different accelerated hosts

2009-11-22 Thread Brian Mearns
I'm using squid as a reverse proxy for both secure and non-secure connections to an origin server with several name-based vhosts. Is there anyway to have squid present a different certificate (to clients) depending on which host the client is trying to reach, without having it listen on multiple

Re: [squid-users] Your opinion: Squid and MySQL interaction, for redirecting users? Is it possible?

2009-11-22 Thread Gavin McCullagh
Hi, On Sun, 22 Nov 2009, Jonas Brunsgaard wrote: I have the squid, i have the MySQL data. But how do I make the Squid distinguish between blocked and not blocked. And further how do I redirect blocked users to the internal you are a bad boy page. We do something like this by keeping the

[squid-users] Brief Flash of CACHE _ACCESS_DENIED on 30 2 (yahoo.com)‏

2009-11-22 Thread Jenny Lee
Hello Squid Users, Here is my problem: For our proxy_auth users, yahoo.com briefly flashes a CACHE_ACCESS_DENIED error before showing the page. Is there something I am not understanding about 302 Redirects? I am an old time squid users, I did not face this issue with older squids. I tried

Re: [squid-users] Brief Flash of CACHE_ACCESS_DENIED on 302 (yahoo.com)‏

2009-11-22 Thread Amos Jeffries
On Sun, 22 Nov 2009 21:07:52 +, Jenny Lee bodycar...@live.com wrote: Hello Squid Users, Here is my problem: For our proxy_auth users, yahoo.com briefly flashes a CACHE_ACCESS_DENIED error before showing the page. Is there something I am not understanding about 302 Redirects? I am an old

RE: [squid-users] Br ief Flash of CACHE_A CCESS_DENIED on 302 (yahoo.com)‏

2009-11-22 Thread Jenny Lee
I suspect something to do with the browser. All squid does is send back a 4xx auth challenge. Same as always. Amos, I think you are right. I replaced all error messages, restarted squid and yet IE7 was still flashing the (now nonexistant) error message. It happens when you fail proxy

RE: [squid-users] Br ief Flash of CACHE_A CCESS_DENIED on 302 (yahoo.com)‏

2009-11-22 Thread Jenny Lee
acl ERR_BADGUYS src 0.0.0.0/0.0.0.0 acl ERR_BADGUYS src all WOW! Apart from the flashing issue, I also must mention that this made tons of differences with my access lists and fixed so many issues for me. I am eternally grateful! What exactly has changed from '0.0.0.0/0.0.0.0'

RE: [squid-users] Brief Flash of CACHE_ACCESS_DENIED on 302 (yahoo.com)‏

2009-11-22 Thread Amos Jeffries
On Sun, 22 Nov 2009 23:54:49 +, Jenny Lee bodycar...@live.com wrote: acl ERR_BADGUYS src 0.0.0.0/0.0.0.0 acl ERR_BADGUYS src all WOW! Apart from the flashing issue, I also must mention that this made tons of differences with my access lists and fixed so many issues for me.

Re: [squid-users] Different SSL keys for different accelerated hosts

2009-11-22 Thread Henrik Nordstrom
sön 2009-11-22 klockan 14:44 -0500 skrev Brian Mearns: I'm using squid as a reverse proxy for both secure and non-secure connections to an origin server with several name-based vhosts. Is there anyway to have squid present a different certificate (to clients) depending on which host the client

Re: [squid-users] Handling slow HTTP client

2009-11-22 Thread Henrik Nordstrom
sön 2009-11-22 klockan 21:57 +0800 skrev Ryan Chan: Hello, People said Squid can be used to handle slow HTTP client, right? http://jeremy.zawodny.com/blog/archives/008496.html Then, what parameters / settings are suggested? Seems difficult to find a suitable one. See read_ahead_gap

Re: [squid-users] Quadruple memory usage with squid

2009-11-22 Thread Henrik Nordstrom
sön 2009-11-22 klockan 07:50 -0500 skrev Linda Messerschmidt: In all cases, the steady state memory usage of squid at most times is about double each machine's cache_mem setting. What is your average object size? The amount of metadata kept per cache_mem object is pretty large and not

Re: [squid-users] Different SSL keys for different accelerated hosts

2009-11-22 Thread sqlcamel
Brian Mearns: I'm using squid as a reverse proxy for both secure and non-secure connections to an origin server with several name-based vhosts. Is there anyway to have squid present a different certificate (to clients) depending on which host the client is trying to reach, without having it

[squid-users] LDAP Single Sign On

2009-11-22 Thread Riley E. Chandler
Keith, Any Luck? I'm trying the same thing, I want LDAP attributes in the access.log, but cannot auth from LDAP.

[squid-users] LDAP in access.log

2009-11-22 Thread Riley E. Chandler
I need to do a LDAP search for username based on source IP, I would prefer to have Squid put it in the access.log. My other option is to generate my own log file based off the access.log and to include the LDAP info separately. My users are only online for minutes or seconds at a time, so

Re: [squid-users] Different SSL keys for different accelerated hosts

2009-11-22 Thread Brian Mearns
On Sun, Nov 22, 2009 at 8:57 PM, Henrik Nordstrom hen...@henriknordstrom.net wrote: sön 2009-11-22 klockan 14:44 -0500 skrev Brian Mearns: I'm using squid as a reverse proxy for both secure and non-secure connections to an origin server with several name-based vhosts. Is there anyway to have

RE: [squid-users] Br ief Flash of CACHE_A CCESS_DENIED on 302 (yahoo.com)‏

2009-11-22 Thread Jenny Lee
Um, sounds like you might have a few legacy setting issues. Mail me a copy of your config if you would like a free audit. Amos, thank you so much for your help and offer, my config is working as expected now. It is not necessary to waste more of your time. That 'all' made _ALL_ the

[squid-users] Fwd: Digest Ldap Authentication got failed for some user accounts

2009-11-22 Thread sankar m
Dear Sir/Madam, Please let me know the status of this bug report. Kindly ask me if you need any additional information about this. I am looking forward to hear from you. Thank you. Sankar.M -- Forwarded message -- From: sankar m debianlinux...@gmail.com Date: Wed, Nov 4, 2009