[squid-users] Squid 2.6 21 as reverse-proxy and caching-proxy the same time

2010-12-23 Thread Alexander Weber
Dear Squid Gurus! I am running squid 2.6 on an IPCOP firewall as caching proxy for my internal network. I got 2 more servers now running an HTTPS service. Our webhoster forwards traffic by URL-HIDING to our dynDNS. a) internal clients being able to browse the web via squid b) HTTP website on

Re: [squid-users] Squid 2.6 21 as reverse-proxy and caching-proxy the same time

2010-12-23 Thread Amos Jeffries
On 24/12/10 01:45, Alexander Weber wrote: Dear Squid Gurus! I am running squid 2.6 on an IPCOP firewall as caching proxy for my internal network. Well, first of all an upgrade would be worthwhile if you can. 2.6 is very old now. I got 2 more servers now running an HTTPS service. Our

Re: [squid-users] TCP_MISS TCP_HIT with Squid-SNMP or squidclient

2010-12-23 Thread Amos Jeffries
On 23/12/10 20:21, Michael Hendrie wrote: On 23/12/2010, at 12:03 AM, Amos Jeffries wrote: On 22/12/10 18:39, Tom Tux wrote: Hi Is there a squid-snmp-oid or a squidclient-option to get the following values (since startup of squid or since creation of cache_dirs)? - tcp_miss - tcp_hit -

[squid-users] [HELP] As times passed, web browser didn't open.

2010-12-23 Thread Seok Jiwoo
Dear all, I have several problems of squid-cache server. Firstly, the symptoms are o at first when I installed squid, it worked well as cache-server. o but as times passed, web browser didn't open. - there're some kinds of error messages. - one is 'time out' - the other is

[squid-users] Squid 3.2 - Dynamic SSL certs that aren't self-signed

2010-12-23 Thread Alex Ray
When using squid 3.2 beta with ssl-bump and dynamic certificate generation, is it possible to have the generated certificates issued by a trusted CA (trusted on each computer), so that browsers receive neither the website does not match certificate CN or this certificate is self-signed/untrusted

Re: [squid-users] How to use cbq

2010-12-23 Thread lupuscramus
Do you know someone who managed to use the squid marked packets to make a QoS based on ip source with classful queuing ? (cbq, htb) Yes, I do this. For an example you could have a look at my website. It is out of date and probably not exactly what you are looking for, but it would

[squid-users] Squid 3.2 - Dynamic SSL certs that aren't self-signed

2010-12-23 Thread Alex Ray
I've written an ad-hoc bash script, ssl_srtd_ca, that acts like the following, but doesn't work when dropped-in. Is there some sort of spec on how ssl_crtd communicates? squid01:/etc/ssl/ssl_crtd_tmp# ssl_crtd_ca -M 4MB -s /usr/local/squid/var/lib/ssl_db new_certificate 13 host=host.dom ok 1502

[squid-users] SQUID + BGP

2010-12-23 Thread Daniel Echizen
HI, i need a best solution to implement a squid proxy in front of a bgp. I dont know the bgp system right now, but a was thinking in a tproxy or wccp.. any idea the best way to do this.. and also the best hardware for 100M of link.

Re: [squid-users] Squid 3.2 - Dynamic SSL certs that aren't self-signed

2010-12-23 Thread Henrik Nordström
tor 2010-12-23 klockan 11:52 -0800 skrev Alex Ray: I've written an ad-hoc bash script, ssl_srtd_ca, that acts like the following, but doesn't work when dropped-in. Is there some sort of spec on how ssl_crtd communicates? src/ssl/ssl_crtd.cc is the closest to a spec I think. why did you need

Re: [squid-users] Squid 3.2 - Dynamic SSL certs that aren't self-signed

2010-12-23 Thread Alex Ray
2010/12/23 Henrik Nordström hen...@henriknordstrom.net: tor 2010-12-23 klockan 11:52 -0800 skrev Alex Ray: I've written an ad-hoc bash script, ssl_srtd_ca, that acts like the following, but doesn't work when dropped-in.  Is there some sort of spec on how ssl_crtd communicates?

Re: [squid-users] Squid 3.2 - Dynamic SSL certs that aren't self-signed

2010-12-23 Thread Henrik Nordström
tor 2010-12-23 klockan 13:56 -0800 skrev Alex Ray: 2010/12/23 13:54:55 kid1| Closing SSL FD 10 as lacking SSL context in the cache.log, and in a browser bounces between Looking Up and Waiting For. That means it failed to dynamically generate the cert, and since there was no default cert

Re: [squid-users] SQUID + BGP

2010-12-23 Thread Henrik Nordström
tor 2010-12-23 klockan 18:02 -0300 skrev Daniel Echizen: HI, i need a best solution to implement a squid proxy in front of a bgp. I dont know the bgp system right now, but a was thinking in a tproxy or wccp.. any idea the best way to do this.. and also the best hardware for 100M of link. How