Re: [squid-users] Squid does not respond to TCP SYN when there are thousands of connection

2013-02-15 Thread Amos Jeffries
On 15/02/2013 10:12 p.m., dahanhsi wrote: Hi all, I use squid as a reverse proxy, and make thousands of connection to the it. Which version of Squid? What do you mean by thousands of connections. 1's of tousands? 10's of thousands? 100's of thousands? There are one ten of all connections

Re: [squid-users] Squid does not respond to TCP SYN when there are thousands of connection

2013-02-15 Thread dahanhsi
Thanks for your reply, provide more information below: 2013/2/15 Amos Jeffries squ...@treenet.co.nz: On 15/02/2013 10:12 p.m., dahanhsi wrote: Hi all, I use squid as a reverse proxy, and make thousands of connection to the it. Which version of Squid? I use Squid 2.7 What do you mean by

Re: [squid-users] Squid does not respond to TCP SYN when there are thousands of connection

2013-02-15 Thread Amos Jeffries
On 15/02/2013 10:43 p.m., dahanhsi wrote: Thanks for your reply, provide more information below: 2013/2/15 Amos Jeffries squ...@treenet.co.nz: On 15/02/2013 10:12 p.m., dahanhsi wrote: Hi all, I use squid as a reverse proxy, and make thousands of connection to the it. Which version of

Re: [squid-users] Netflix+squid

2013-02-15 Thread mbaki
Hi Amos, I still haven't configured/deployed anything yet. My approach is to have a server in the U.S. But I thought maybe there is a better solution/approach to this deployment. Maybe a proxy server local to them and configure it to use my proxy server in the U.S as its upstream proxy.

Re: [squid-users] Squid does not respond to TCP SYN when there are thousands of connection

2013-02-15 Thread dahanhsi
Hi Amos, 2013/2/15 Amos Jeffries squ...@treenet.co.nz: On 15/02/2013 10:43 p.m., dahanhsi wrote: Thanks for your reply, provide more information below: 2013/2/15 Amos Jeffries squ...@treenet.co.nz: On 15/02/2013 10:12 p.m., dahanhsi wrote: Hi all, I use squid as a reverse proxy, and

Re: [squid-users] Securing squid3

2013-02-15 Thread Andreas Westvik
Oh, this was a lot of information! :D So here goes. Im only using squeeze on the production server. On the testing server Im running wheezy, but not squid. Only havp. And yeah, I seems a bit poor but I was only testing this as proof of concept. Or to satisfy my inner nerd. Im not going to

Re: [squid-users] Squid does not respond to TCP SYN when there are thousands of connection

2013-02-15 Thread Amos Jeffries
On 15/02/2013 11:53 p.m., dahanhsi wrote: Hi Amos, 2013/2/15 Amos Jeffries squ...@treenet.co.nz: On 15/02/2013 10:43 p.m., dahanhsi wrote: Thanks for your reply, provide more information below: 2013/2/15 Amos Jeffries squ...@treenet.co.nz: On 15/02/2013 10:12 p.m., dahanhsi wrote: Hi all,

Re: [squid-users] Squid does not respond to TCP SYN when there are thousands of connection

2013-02-15 Thread dahanhsi
2013/2/15 Amos Jeffries squ...@treenet.co.nz: On 15/02/2013 11:53 p.m., dahanhsi wrote: Hi Amos, 2013/2/15 Amos Jeffries squ...@treenet.co.nz: On 15/02/2013 10:43 p.m., dahanhsi wrote: Thanks for your reply, provide more information below: 2013/2/15 Amos Jeffries squ...@treenet.co.nz:

Re: [squid-users] Squid does not respond to TCP SYN when there are thousands of connection

2013-02-15 Thread Luciano Ruete
On 02/15/2013 11:11 AM, dahanhsi wrote: There you go then. Squid is not permitted to _use_ more than 1651 FD. Every client TCP connection uses at least 1, sometimes 2 FD. When all the FD are used up Squid waits until some are free'd before accepting more client connections. With from 4651 to

Re: [squid-users] Squid does not respond to TCP SYN when there are thousands of connection

2013-02-15 Thread Amm
  ulimit -n must be run as the same user that the proxy is running. In debian/ubuntu that user is proxy, and if you type ulimit as root you will get a different answer that if you type ulimit logged in as proxy user. Be sure  to check the ulimit for the right user Or you can check

[squid-users] uploading attachments in hotmail failing

2013-02-15 Thread Tim Duncan
A Hotmail account converted to hotmail's new outlook style email which I believe uses sliverlight, consistently fails to allow file attachments when going through proxy. Any ideas? Squid Cache: Version 3.1.19

RE: [squid-users] uploading attachments in hotmail failing

2013-02-15 Thread Tim Duncan
Resolved The request was never even making it to the proxy server. The workstation was using a pac file that had some return DIRECT for hotmail.com live.com login.live.com Fmail.live.com Not sure why they were interfering, but removing them from the pac file made the problem go away.

[squid-users] Redirect Youtube out second ISP

2013-02-15 Thread Stinn, Ryan
I'm wondering if it's possible to use squid to redirect youtube out a second ISP line. We have two connections and I'd like to push all youtube out the second connection. I was thinking I could put a second squid proxy on that line and then redirect all youtube traffic to it, but I'm not sure

Re: [squid-users] Redirect Youtube out second ISP

2013-02-15 Thread Pieter De Wit
On 16/02/2013 11:43, Stinn, Ryan wrote: I'm wondering if it's possible to use squid to redirect youtube out a second ISP line. We have two connections and I'd like to push all youtube out the second connection. I was thinking I could put a second squid proxy on that line and then redirect all

Re: [squid-users] Squid does not respond to TCP SYN when there are thousands of connection

2013-02-15 Thread dahanhsi
2013/2/15 Amm ammdispose-sq...@yahoo.com: ulimit -n must be run as the same user that the proxy is running. In debian/ubuntu that user is proxy, and if you type ulimit as root you will get a different answer that if you type ulimit logged in as proxy user. Be sure to check the ulimit for

Re: [squid-users] Redirect Youtube out second ISP

2013-02-15 Thread Amos Jeffries
On 16/02/2013 12:01 p.m., Pieter De Wit wrote: On 16/02/2013 11:43, Stinn, Ryan wrote: I'm wondering if it's possible to use squid to redirect youtube out a second ISP line. We have two connections and I'd like to push all youtube out the second connection. I was thinking I could put a second

Re: [squid-users] Redirect Youtube out second ISP

2013-02-15 Thread Amos Jeffries
On 16/02/2013 3:11 p.m., Amos Jeffries wrote: On 16/02/2013 12:01 p.m., Pieter De Wit wrote: On 16/02/2013 11:43, Stinn, Ryan wrote: I'm wondering if it's possible to use squid to redirect youtube out a second ISP line. We have two connections and I'd like to push all youtube out the second

Re: [squid-users] Redirect Youtube out second ISP

2013-02-15 Thread Amm
- Original Message - From: Stinn, Ryan ryan.st...@htcsd.ca To: squid-users@squid-cache.org squid-users@squid-cache.org Cc: Sent: Saturday, 16 February 2013 4:13 AM Subject: [squid-users] Redirect Youtube out second ISP I'm wondering if it's possible to use squid to redirect

[squid-users] auth for system services

2013-02-15 Thread James Harper
On a Windows desktop there are often a bunch of system services that make http connections, either running as a system account or running as a user but that don't know how to authenticate. The list of these exceptions is tedious to maintain so it would be good to be able to authorise the users

Re: [squid-users] auth for system services

2013-02-15 Thread Amos Jeffries
On 16/02/2013 3:23 p.m., James Harper wrote: On a Windows desktop there are often a bunch of system services that make http connections, either running as a system account or running as a user but that don't know how to authenticate. The list of these exceptions is tedious to maintain so it

RE: [squid-users] auth for system services

2013-02-15 Thread James Harper
On 16/02/2013 3:23 p.m., James Harper wrote: On a Windows desktop there are often a bunch of system services that make http connections, either running as a system account or running as a user but that don't know how to authenticate. The list of these exceptions is tedious to maintain so