Re: [squid-users] Squid performance issues

ut it: > > systemctl daemon-reload > > and then restart squid. > > systemctl restart squid > > > > > > Eliezer > > > > > > > > *From:* NgTech LTD > *Sent:* Tuesday, August 31, 2021 6:11 PM > *To:* Marcio B. > *Cc:* Squid Users

[squid-users] Squid performance issues

Hi, I implemented a Squid server in version 4.6 on Debian and tested it for about 40 days. However I put it into production today and Internet browsing was extremely slow. In /var/log/syslog I'm getting the following messages: Aug 31 11:29:19 srvproxy squid[4041]: WARNING! Your cache is running

[squid-users] Problems with HTTPS on Squid

I have the following problem on my Squid 4.6 on Debian 10. Squid does not redirect the user to the error page when blocking an HTTPS url. On HTTP it works correctly. I don't use transparent proxy. The proxy is manually configured in the web browser. Here is my squid.conf configuration file:

Re: [squid-users] Squid not sending input into external_acl_type helper script

didn't realize they were preventing Squid from passing input into the script. Thanks Alex! Adrian On Saturday, September 26, 2020, 10:17:53 AM CDT, Alex Rousskov wrote: On 9/25/20 4:28 PM, Ajb B wrote: > So I have a external_acl_type helper script and it's not reading input > from

Re: [squid-users] How te deal with proxy authentication bypass

auth_param negotiate children 300 startup=150 idle=10 auth_param negotiate keep_alive on auth_param basic program /opt/squid-503/libexec/basic_ldap_auth -P -R -b "dc=mydomain,dc=com" -D "cn=ldap,cn=Users,dc=mydomain,dc=com" -W /opt/squid-503/etc/ldappass.txt -f sAMAcco

[squid-users] Squid not sending input into external_acl_type helper script

So I have a external_acl_type helper script and it's not reading input from Squid. Here it is: redis-cli HSET 'test' data 'SCRIPT DID RUN' >/dev/null while read -s line; do   redis-cli HSET 'test' data 'LOOP STARTED ' >/dev/null  printf '%s\n' 'OK' done And here are my Squid configuration

Re: [squid-users] How to select parent proxy based on user password

  Eliezer Croitoru Tech Support Mobile: +972-5-28704261 Email: ngtech1...@gmail.com   From: Ajb B Sent: Friday, September 25, 2020 2:25 AM To: squid-users@lists.squid-cache.org; Eliezer Croitor Subject: Re: [squid-users] How to select parent proxy based on user password   Hey Eliezer

Re: [squid-users] How to select parent proxy based on user password

To: squid-users@lists.squid-cache.org Subject: Re: [squid-users] How to select parent proxy based on user password On 24/09/20 4:14 am, Ajb B wrote: > > Hey Anthony, > > I see you're point. It makes sense to have multiple usernames if I want > a user to access multiple proxies.

Re: [squid-users] How to select parent proxy based on user password

y.packetstream.io:32712 mark251:fq4zEWC1B5A194C1_country-UnitedStates_session-dFgoeQMY:proxy.packetstream.io:32712 So there's definitely a reason to do this. My question is how does PacketStream do this? On Wednesday, September 23, 2020, 9:44:47 PM CDT, Amos Jeffries wrote: On 24/09/20 4:14

Re: [squid-users] How to select parent proxy based on user password

to access different proxies. Also, I know PacketStream (https://packetstream.io/) does this and I'm pretty sure they use Squid. Thanks,Adrian On Tuesday, September 22, 2020, 3:55:15 PM CDT, Antony Stone wrote: On Tuesday 22 September 2020 at 22:35:36, Ajb B wrote: > how can you

[squid-users] How to select parent proxy based on user password

I know you can map a username to a parent proxy (i.e. cache_peer) using and acl directive, e.g. ``` acl parent_proxy_testuser_1 proxy_auth testuser1 cache_peer parent 0 proxy-only cache_peer_access parent1 allow parent_proxy_testuser_1 cache_peer_access parent1 deny !parent_proxy_testuser_1

Re: [squid-users] --foreground vs -N

in my question(s); greatly appreciated. On Wed, Sep 18, 2019 at 4:14 PM Alex Rousskov wrote: > > On 9/18/19 3:37 PM, B. Cook wrote: > > > this is /dev/shm with --foreground (no workers) > > > -rw--- 1 proxy proxy8 2019-09-18 10:30 squid-cf__metadata.shm > >

Re: [squid-users] --foreground vs -N

Thank you for the response.. Confused what you mean.. this is /dev/shm with --foreground (no workers) root:/dev/shm # ls -al total 12 drwxrwxrwt 2 root root 100 2019-09-18 10:30 . drwxr-xr-x 17 root root 3120 2019-09-17 09:08 .. -rw--- 1 proxy proxy8 2019-09-18 10:30

[squid-users] --foreground vs -N

tl;dr: is there any functional difference between the two? Using runit to handle my squid processes. I have Observium graphing system information. My data/traffic is consistent In my run file I changed from squid -N to squid --foreground #!/bin/sh -e exec \ chpst -o 131070 \ chpst -e ./env

Re: [squid-users] squid transparent proxy forward loop

; (Max 1-mail / month)* Am Mo., 22. Okt. 2018 um 15:12 Uhr schrieb Amos Jeffries < squ...@treenet.co.nz>: > On 23/10/18 1:26 AM, Juan Carvajal B. wrote: > > Dear list, > > > > I hope you can give me some hints for my current task. > > > > I would like to a

[squid-users] squid transparent proxy forward loop

Dear list, I hope you can give me some hints for my current task. I would like to achieve the following: 1. A user comes with the own device, for example phone or table. 2. The user connects to our own WLAN network 4. The user enters the addres of our website 3. The user can only access our

[squid-users] TLS Connection Upgrade for Windows

Hi, I've seen several discussions on using Squid proxy to upgrade client TLS connections using ssl_bump. But all of the existing discussions applies to Linux/Unix Systems. Can anyone confirm if this is also applicable or possible for Windows? I am trying to integrate our application (SAP PI)

[squid-users] Private root certificate

What are the security vulnerabilities with trusting your own private root certificate? ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Squid stopped working after cache.log and access.log rotation

If you do "lsof /var/log | grep -i delete" does it show squid writing to a deleted access.log / cache.log? j From: "Chee M Gui" To: squid-users@lists.squid-cache.org Sent: Wednesday, March 22, 2017 10:17:32 AM Subject: [squid-users] Squid stopped working after

Re: [squid-users] URL list from a URL

--- Original Message - From: "Alex Rousskov" <rouss...@measurement-factory.com> To: squid-users@lists.squid-cache.org Cc: "Jason Nance" <ja...@tresgeek.net> Sent: Tuesday, March 21, 2017 4:42:33 PM Subject: Re: [squid-users] URL list from a URL On 03/21/2017 02:30

Re: [squid-users] URL list from a URL

, March 21, 2017 1:19:43 PM Subject: Re: [squid-users] URL list from a URL Yes. Functionality you required is: http://wiki.squid-cache.org/Features/StoreID 21.03.2017 21:52, Jason B. Nance пишет: > Hello, > > I'm using Squid 3.5.20 and wonder if it is possible to define an ACL wh

Re: [squid-users] URL list from a URL

oinov" <yvoi...@gmail.com> To: squid-users@lists.squid-cache.org Sent: Tuesday, March 21, 2017 1:19:43 PM Subject: Re: [squid-users] URL list from a URL Yes. Functionality you required is: http://wiki.squid-cache.org/Features/StoreID 21.03.2017 21:52, Jason B. Nance пишет: > Hello,

[squid-users] URL list from a URL

Hello, I'm using Squid 3.5.20 and wonder if it is possible to define an ACL which retrieves the list of URLs from another URL (similar to pointing to a file). In this specific use case it is to allow a Foreman server to sync Yum content from the CentOS mirrors. I tell Foreman to use the

Re: [squid-users] HTTPS sites specifics URL

7 1:40 AM, Amos Jeffries wrote: On 8/02/2017 4:04 a.m., Dante F. B. Colò wrote: Hi Leonardo, Thanks for your reply,I tried SSL Bump under client-first and server-first modes both didn't work, Squid version is 3.4.14 running under OpenBSD 5.6 and 5.7 test boxes, i also increased verbosity log to 9 of

Re: [squid-users] HTTPS sites specifics URL

s involved on that crypto session. To enable squid to see the whole URL and be able to do full filtering on HTTPS requests, you're looking for SSL-Bump feature. Google for it, there's a LOT of tutorials and mailing list messages on that. Em 06/02/17 12:40, Dante F. B. Colò escreveu: Hello Everyo

[squid-users] HTTPS sites specifics URL

Hello Everyone I have a question , probably a noob one , i 'm trying to allow some https sites with specific URL's (i mean https://domain.tld/blablabla) but https sites are working only with the domain part , what i have to do to make this work ? Regards Dante F. B. Colò

Re: [squid-users] Is this proper usage of Squid?

. serve the our modified player/resources from and pointing to these CNAMES . then route thru squid all the request and response traffic running eCAP on both headers and body, both ways ? Thanks again --- On 2017-01-08 10:59, Eddie B wrote: > > Can we acco

[squid-users] Is this proper usage of Squid?

We have embedded Vimeo videos on a site accessible only to logged in users. Because of different firewalls, using different types of blocks, the videos sometimes do not work for the client. Aside from cases where the firewall blocks any video streaming, we want to serve video to clients that

Re: [squid-users] acl maxconn and max_user_ip config help please

_MC My ignorance is great, I really must not shoot myself in the feet with errors like this. Thanks for your clear and complete explanations. -- B.H. Registerd Linux User 521886 Amos Jeffries wrote: Mon, Jul 18, 2016 at 07:15:48PM +1200 > On 18/07/2016 6:23 p.m., B. Henry wrote:

Re: [squid-users] dns children setting breaks my squid.conf

The > > #dns_nameser 208.67.222.2224.2.2.4 was a typo that was corrected in my working squid.conf, > #dns_nameservers 208.67.222.222 4.2.2.4 If I understood the documentation on this there is no punctuation needed, and nicely squid avoids that kind of syntax confusion. I found out a couple

Re: [squid-users] acl maxconn and max_user_ip config help please

the request snip Good, that's what made sense to me, but one statement in the documentation, don't remember exactly where, had me doubting myself. Regards, -- B.H. Registerd Linux User 521886 Amos Jeffries wrote: Mon, Jul 18, 2016 at 05:14:57PM +1200 > On 18/07/2016 1

[squid-users] dns children setting breaks my squid.conf

Here's is what I have in my working squid.conf related to dns. Note that the dns children entry is commented out as when I try and use any value this breaks things and I can't use the server at all. positive_dns_ttl 3 hours negative_dns_ttl 30 seconds #minimum_expiry_time 30 seconds

[squid-users] acl maxconn and max_user_ip config help please

I want to limit max simultanious connections for any user in group foo, and also limit how may different IPs they can have devices logged in from at any one time. I've had squid3 working well with a very simple policy for years just allowing access from two different ip ranges, but now want to

Re: [squid-users] dead gateway, not dead peer..

se try the request again.​ On Wed, Jun 22, 2016 at 10:45 AM, Amos Jeffries <squ...@treenet.co.nz> wrote: > On 23/06/2016 2:00 a.m., B. Cook wrote: > > ... > > > > What can I do about it? > > > > (thank you for working through understanding the problem..) &g

Re: [squid-users] dead gateway, not dead peer..

... What can I do about it? (thank you for working through understanding the problem..) On Wed, Jun 22, 2016 at 9:55 AM, Amos Jeffries <squ...@treenet.co.nz> wrote: > On 23/06/2016 1:25 a.m., B. Cook wrote: > > ​when the one of the proxies loses its internet connection.. the de

Re: [squid-users] dead gateway, not dead peer..

TO the outside is dead and gone. That is what I am trying to fix.. When a cache_peer has a connectivity problem.. On Wed, Jun 22, 2016 at 12:46 AM, Amos Jeffries <squ...@treenet.co.nz> wrote: > On 22/06/2016 7:12 a.m., B. Cook wrote: > > On Tue, Jun 21, 2016 at 3:18 AM, Amos Jeffries <sq

Re: [squid-users] dead gateway, not dead peer..

On Tue, Jun 21, 2016 at 3:18 AM, Amos Jeffries wrote: > > So you're trolling. The FAQ it is then: > > > > ​Thank you the response.. squid.conf (3.5.19 debian host

Re: [squid-users] dead gateway, not dead peer..

On Mon, Jun 20, 2016 at 4:04 PM, Antony Stone < antony.st...@squid.open.source.it> wrote: > > > Please answer the following questions: > > 1. How many squid servers do you have (in this setup)? > ​ I have three squid servers ​ > > 2. What are their IP addresses? > ​172.16.0.30/20 - Oasis,

[squid-users] dead gateway, not dead peer..

Looking for a second opinion.. I think this is beyond the scope of squid, but I figured I would ask anyway.. VZW FiOS link in one building (primary) and VZW FIOS link in a second building (secondary). the gateway for the primary link is sometimes unavailable.. squid is fine on both ends.. 0.30

[squid-users] How can i keep log files for longer periods?

configuration file? I already read about rotate a log file but it confused me so i haven't tried it yet. Kindly provide me some solution Thanks Regards, Mr. Brijesh B. Mehta Research Scholar, Computer Engineering Department, S. V. National Institute of Technology, Surat - 395007 Gujarat, India http

Re: [squid-users] squid-users Digest, Vol 7, Issue 70

Thank you all, I have set 'logfile_rotate 30'. Lets see how it works Regards, Mr. Brijesh B. Mehta Research Scholar, Computer Engineering Department, S. V. National Institute of Technology, Surat - 395007 Gujarat, India http://brijeshbmehta.wordpress.com/ Tips: If you forward this email, please

Re: [squid-users] Splash page issues

=100 %SRC /usr/lib/squid3/ext_session_acl -t 7200 -b /mnt/ksn/squid/session/session.db happy days. thanks Darren B On 31/01/2015 9:26 AM, Amos Jeffries wrote: On 31/01/2015 2:00 p.m., Darren B. wrote: Hi I am trying to set up a router that is inline between the clients and the internet

Re: [squid-users] Splash page issues

=100 %SRC /usr/lib/squid3/ext_session_acl -t 7200 -b /mnt/ksn/squid/session/session.db happy days. thanks Darren B On 31/01/2015 9:26 AM, Amos Jeffries wrote: On 31/01/2015 2:00 p.m., Darren B. wrote: Hi I am trying to set up a router that is inline between the clients and the internet

[squid-users] Splash page issues

page. Any guidance on this would be greatly appreciated. thanks in advance Darren B. the relevant bits of the config are as follows. acl localnet1 src 172.25.101.0/24 # RFC1918 possible internal network acl localnet2 src 172.25.102.0/24

Re: [squid-users] SSL/SSH/SFTP/FTPS to alternate ports

, but with the domain feature only. -B On 10/12/2014 7:48 AM, Timothy Spear wrote: Hello, Here is the issue: I can proxy through Squid just fine to HTTP and HTTPS. I can also run SSH via Corkscrew to a SSH server running on port 443 and it works fine. What I cannot do, is access HTTPS or SSH

[squid-users] Transparent proxy with squid and Dansguardian

to loop back on itself. All the various versions are current to ubuntu 14.04 although the dansguardian is a little old in this distro. Any pointers would be greatly appreciated. Darren B. Currently the processes running and listening are root@dnsmasq:~# netstat -ntlp | grep LISTEN tcp

[squid-users] Force Video content caching?

+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=* Security: Proprietary +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=* I've been thinking lately. Would it be possible to ensure the 100% cacheability of video content? By configuring Squid in a certain way. So, for example. I could

[squid-users] refresh pattern questions

I have some questions related to refresh pattern options First, since “no-cache” now seems in-effective with http 1.1, what would be a possible way to force an object to cache using both standards of html 1.0 and 1.1? If it’s not possible, then is there any plans to implement in a future

Re: [squid-users] Help with Squid HTTPS proxy

Netflix doesn't work through Squid The only option you have to allow Netflix to work through a proxied environment without adding exceptions on all your clients, is to put this code in your configuration file: acl netflix dstdomain .netflix.com cache deny netflix That allows Netflix to fully

[squid-users] Refresh Pattern useless?

I'm beginning to conclude that refresh pattern in Squid is useless. I had a neat refresh pattern which is supposed to help cache just about everything, below: refresh_pattern ([^.]+\.)?(download|(windows)?update)\.(microsoft\.)?com/.*\.(cab|exe|msi|msp|psf) 4320 100% 43200 override-expire

Re: [squid-users] requests per second

Hi Jenny, Reverse proxy or not ? We're using squid as reverse proxy et only that. We can achieve about 2K RPS with our boxes and this server isn't overloaded... In fact, it's common hardware, like mono dual core Xéon, some RAM and a poor RAID 1 disk array without BBU. I think 5K RPS is possible.

Re: [squid-users] requests per second

Hi, It's only a reverse proxy cache, not a proxy. This is different. We use squid only for images. Squid : 3.1.x OS : debian 64 bits Le 12/03/2012 12:44, Student University a écrit : Hi David You achieve 2K with what version of squid ,,, do you have any special configuration tweaks ,,,

Re: [squid-users] 3.2.0.13: Cannot bind socket FD 21 to [::]:22381: (98) Address already in use

Hi David, Please remove icp_port Oct 24 09:35:32 prxysquid squid[3586]: assertion failed: icp_v2.cc:778: Comm::IsConnOpen(icpOutgoingConn) - maybe ICP Bug with workers ? - David Touzeau da...@touzeau.eu a écrit : Dear I encounter many times this issue. Cannot bind socket FD 21

[squid-users] [statusIfComplete: Request not yet fully sent PROPFIND ...] Should I worry ?

Hi squid-users, We're using squid as reverse proxy on several boxes since several months All seems to be working great. But i can find theses on me logs. I can't remenber when this have show up. 2011/10/18 11:39:05| statusIfComplete: Request not yet fully sent PROPFIND

Re: [squid-users] squid-3.1.16: squid -k shutdown causes crash

.) , theContext = 0x0, theRead = { fd = 405033456, buf = 0x816cb20 S\203\354\030\213D$ \213\030\205\333t!\211\034$\350\332\025\376\377\200=\020%6\b, len = -1210707229, callback = { p_ = 0xb7e6b400

Re: [squid-users] squid-3.1.16: squid -k shutdown causes crash

Hum, i saw nothing Perhaps shutdown_lifetime i don't use this option Or maybe debug_options, I had problems with high load - Ralf Hildebrandt ralf.hildebra...@charite.de a écrit : * Ralf Hildebrandt ralf.hildebra...@charite.de: * Fred B fredbm...@free.fr: Hi, No problem

Re: [squid-users] squid-3.2.0.13 exception: theGroupBSize 0

Hi, http://bugs.squid-cache.org/show_bug.cgi?id=3383 - Saleh Madi saleh.m...@hadara.ps a écrit : Hi, I have just compiled squid version squid-3.2.0.13. Everything work with the default configuration, until I put workers 2 in the squid.conf. Example: workers 2 cpu_affinity_map

Re: [squid-users] squid-3.2.0.13 exception: theGroupBSize 0

Not now, but i guess that Alex Rousskov working on a fix - Saleh Madi saleh.m...@hadara.ps a écrit : Hi Fred, Is there any fix for this bug? Thanks and Best Regards, Saleh Hi, http://bugs.squid-cache.org/show_bug.cgi?id=3383 - Saleh Madi saleh.m...@hadara.ps a

Re: [squid-users] squid 3.2.0.12 delay_pool

- Amos Jeffries squ...@treenet.co.nz a écrit : On Wed, 12 Oct 2011 17:45:49 +0200, Jean-Philippe Menil wrote: Le 12/10/2011 09:12, Fred B a écrit : Perhaps a link with http://bugs.squid-cache.org/show_bug.cgi?id=3358 Ok, now my delay_pools seems to work with one or multiple workers

Re: [squid-users] squid 3.2.0.12 delay_pool

- Jean-Philippe Menil jean-philippe.me...@univ-nantes.fr a écrit : Le 12/10/2011 06:50, Amos Jeffries a écrit : On 12/10/11 04:49, Jean-Philippe Menil wrote: Hi, i recently compiled squid 3.2.0.12, and it seems that i'm unable to make delay_pool working correctly. My

Re: [squid-users] squid 3.2.0.12 delay_pool

- Jean-Philippe Menil jean-philippe.me...@univ-nantes.fr a écrit : Le 12/10/2011 09:12, Fred B a écrit : Perhaps a link with http://bugs.squid-cache.org/show_bug.cgi?id=3358 Ok, now my delay_pools seems to work with one or multiple workers without problems. Delay_pools are fully

Re: [squid-users] Transparent / Standard mode comparative

- David Touzeau da...@touzeau.eu a écrit : Dear all I would like to know what are the limitations using squid in transparent mode between using squid in standard mode I know there are Transparent mode limitations : No user authentication method. No all HTTPS features. Is

[squid-users] Squid 3.1.16

Hi, Does anyone know the release date for squid 3.1.16 (approximately of course) ? Thanks Fred

Re: [squid-users] Recurrent crashes and warnings: Your cache is running out of filedescriptors

- Leonardo leonardodiserpierodavi...@gmail.com a écrit : Hi all, I'm running a transparent Squid proxy on a Linux Debian 5.0.5, configured as a bridge. The proxy serves a few thousands of users daily. It uses Squirm for URL rewriting, and (since 6 weeks) sarg for generating

[squid-users] RockStore squid 3.2

Hi, Actually i use squid with workers and diskd workers 2 if ${process_number} = 1 cache_dir diskd /cache1 13 128 512 else cache_dir diskd /cache2 13 128 512 endif But i lost cache performance because the caches are not shared How to use (test) the new feature RockStore with

Re: [squid-users] SMP Workers and delay pool

After test it's seems like this, squid use 40 Mbits So if i want 20 i should use delay_parameters 1 1000 (x2 for each workers) Maybe I misconfigured squid but delay_pool simply doesn't want to work. I tried with tc (traffic control) no problem, but with delay_pool the bandwidth

Re: [squid-users] squid 3.2 help misconfiguration: acl manager proto cache_object

/09/22 11:50:05| WARNING: (B) '127.0.0.1' is a subnetwork of (A) '127.0.0.0/8' 2011/09/22 11:50:05| WARNING: because of this '127.0.0.0/8' is ignored to keep splay tree searching predictable 2011/09/22 11:50:05| WARNING: You should probably remove '127.0.0.1' from the ACL named 'localhost

Re: [squid-users] [3.2.0.12] ErrorDetailManager.cc(222) parse: WARNING! invalid error detail name:

tried with 3.2.0.12-20110921-r11341 without success... 2011/09/22 16:20:31 kid1| Adding domain touzeau.com from /etc/resolv.conf 2011/09/22 16:20:31 kid1| Adding nameserver 192.168.1.105 from /etc/resolv.conf 2011/09/22 16:20:31 kid1| Adding nameserver 192.168.1.1 from

Re: [squid-users] SMP Workers and delay pool

After test it's seems like this, squid use 40 Mbits So if i want 20 i should use delay_parameters 1 1000 (x2 for each workers) - fredbm...@free.fr a écrit : Hello, I don't understand on thing about delay pools and smp How i can read this ? The delay pool limit is by kid or for

Re: [squid-users] blacklist to block adults sites

I have used Squidguard very successfully in the past. You take HUGE blocklists that bring Squid's regexes to it's knees (personally tested this), and it just breezes through them It's also very customizable. If you've used IPCop with the Copfilter addon, you've used Squidguard. Also there's some

[squid-users] squid webmin start problem

Hi to all, i had installed squid as part of the webmin package and configured it as proxy. No problem with that, it worked flawlessly. But yesterday i discovered that the proxy is not working anymore. When i tried to start the squid with /etc/init.d/squid start i get just ok and no other

RE: [squid-users] squid webmin start problem

partition /dir or just settings.. On 24/01/2011 15:33, Tom B. wrote: Hi to all, i had installed squid as part of the webmin package and configured it as proxy. No problem with that, it worked flawlessly. But yesterday i discovered that the proxy is not working anymore. When i tried

[squid-users] Re: Reverse proxy to multiple ports on same origin

Having an issue with an inherited install of squid 2.7 running on Windows, acting as a reverse proxy to an IIS box with multiple sites on it. The squid is in our DMZ (pokes for 8085 and 8086 are in place), IIS is internal. The problem I'm seeing is that squid is returning the content on

[squid-users] possible OT: squidGuard, LDAP and FreeBSD ports..

Does anyone know if this combination works? It seems the FreeBSD port (with ldap enabled) does not actually build an ldap enabled squidguard.. Clues appreciated.

Re: [squid-users] Optimized Squids

Optimization tip #3: use fastest disk IO method available. Fedora being a linux that would be AUFS. see tip #3. AUFS makes use of multi-core threads, diskd process is single-threaded even if it runs additional to the Squid main thread. What would it be for FreeBSD?

[squid-users] Squid 3.1 and strange Bad header encountered error

Hi Squid users, I think I need some help to understand a new error with squid. :( I've got several squid boxes, all in 3.0 branch (reverse proxy cache). All is ok. Now, I've tried to upgrade one (and only one boxe) to 3.1 branch (Starting Squid Cache version 3.1.3 for x86_64-pc-linux-gnu...).

Re: [squid-users] Squid 3.1 and strange Bad header encountered error

Le 08/06/2010 11:12, Amos Jeffries a écrit : David B. wrote: Hi Squid users, I think I need some help to understand a new error with squid. :( I've got several squid boxes, all in 3.0 branch (reverse proxy cache). All is ok. Now, I've tried to upgrade one (and only one boxe) to 3.1 branch

[squid-users] connection refused by proxy.. where to start..

Running a squid box for a large network, about 3k computers; but only about 1/3 are ever on at one time.. Squid Object Cache: Version 2.7.STABLE7 Start Time: Tue, 06 Apr 2010 17:49:52 GMT Current Time: Tue, 04 May 2010 13:16:48 GMT Connection information for squid: Number of

[squid-users] Squid 3 Reverse proxy Invalid response Error

Hi, Recently I've got an error while commenting on a Wordpress post. http://i43.tinypic.com/2guz98x.jpg The squid 3 is configured as a reverse proxy http_port xxx.xxx.xxx.xxx:80 vhost vport accel cache_peer     127.0.0.1  parent 8080 0 originserver default cache_dir ufs /var/spool/squid3 1000

[squid-users] New squid3 error : DiskThreadsDiskFile::openDone: (2) No such file or directory

Hi squids users, I've made somes changes to my squid boxes (new fresh server, more powerful). All seems to be ok, but now i've got some strange errors (from time to time) on cache.log. Exemple : 2010/01/15 18:59:47| DiskThreadsDiskFile::openDone: (2) No such file or directory 2010/01/15 18:59:47|

[squid-users] seemingly stupid question about cache_dir and TCP_HIT

Trying to setup a small local proxy for testing.. 2.7 Stable7 on FreeBSD 32bit here are the mem and cache entries from squid.conf.. # memory options memory_pools off cache_mem 1024 MB maximum_object_size_in_memory 2 MB ## cache options cache deny all cache_dir null /tmp cache_access_log

Re: [squid-users] Squid3 reverse proxy Failed to select source strange errors

Amos Jeffries a écrit : This is quite strange, I think I'm misunderstanding something. I'm using squid as a reverse proxy. I understand. Clients (internet people surfing on my website) should connect to squid boxes to retrieve static content. Squid send the right file or connect

[squid-users] Squid3 reverse proxy Failed to select source strange errors

Hi Squid users, We're using squid3 as a reverse proxy on several boxes and he's working quite well. Squid configuration is quite simple : cache_peer X.X.X.X parent 80 0 no-query originserver no-digest cache_peer Y.Y.Y.Y parent 80 0 no-query originserver no-digest cache_peer_domain X.X.X.X

Re: [squid-users] Squid3 reverse proxy Failed to select source strange errors

Amos Jeffries a écrit : [snip] Exemple : 2009/11/23 08:36:28| Failed to select source for 'http://img43.imageshack.us/img43/416/greysanatomypromotional.jpg' 2009/11/23 08:36:28| always_direct = 0 2009/11/23 08:36:28|never_direct = 0 2009/11/23 08:36:28|timedout = 0 [snip]

Re: [squid-users] Squid3 reverse proxy Failed to select source strange errors

Hi mike, Mike Marchywka a écrit : [snip] Normal website attacks. One of the benefits of using Squid is to prevent these resource wasters getting near the backend processors. Failed to select source is good news. You might also want to occasionally scan the access.log to see if any

Re: [squid-users] Squid3 and lots of FIN_WAIT1

Hi Squid users, [Snip] I have not seen FIN_WAIT1 before, but often see FIN_WAIT like this when Squid is receiving a lot of connections. I think its due to squid using sockets for short times (non-persistent connections) and moving on. The system TCP timeouts are much longer. I think i've

Re: [squid-users] Squid3 and lots of FIN_WAIT1

Amos Jeffries a écrit : Wonderful. Was the timeout a default LVS setting? if so what exact LVS device/software was it so we can document the fix here. Cheers Amos Nop, default LVS timeout is ok, ours were very low. Défault : Timeout (tcp tcpfin udp): 900 120 300 Faultly values : Timeout

Re: [squid-users] Squid3 and lots of FIN_WAIT1

Amos Jeffries a écrit : [snip] Perhaps my load is too high and i need to tune kernel via sysctl, but i can't figure what to do. For now, i've tried several things and i can't solved this issue. You may want to check: * persistent connections is turned on (squid.conf) On by

Re: [squid-users] Squid3 and lots of FIN_WAIT1

Hi Amos, Amos Jeffries a écrit : On Mon, 16 Nov 2009 16:40:16 +0100, David B. haazel...@gmail.com wrote: [Snip] I have not seen FIN_WAIT1 before, but often see FIN_WAIT like this when Squid is receiving a lot of connections. I think its due to squid using sockets for short times (non

[squid-users] Squid3 and lots of FIN_WAIT1

Hi Squid users, We're using squid as a reverse proxy cache. Server (debian lenny) running squid (from lenny stable / squid/3.0.STABLE8) seems to have some stange behaviour. For example, we've got lots of TIN_WAIT1 TCP Connexions and we can't figure why. :( # netstat -na | wc -l 20065 # netstat

Re: [squid-users] Web Messengers

If you don't want to use squidguard (or another filtering proxy) in addition to squid, you can use some of it's blacklists and load it directly on squid with an url_regex, as long as you don't filter much. I remember that some of the free blacklists had a chat category, so you may want to use one

[squid-users] sqstat, cachemgr and chained proxies

Hi. I have a problem. I have a machine with squid serving a LAN, but it also uses HAVP for antivirus filtering. HAVP is the one that receives the requests in the first place, then forwards them to squid. After that, sarg makes nice reports. Of course, i ran into the

[squid-users] Advantages of squid?

Hi, I'm brand new to squid and have been doing research into it and how i might leverage its power for my application, but am having a lot of difficulty in seeing how it might advantage my setup. I design java applications that run on tomcat servers. Currently our java apps are running on

[squid-users] Re: Advantages of squid?

Amos Jeffries squ...@treenet.co.nz wrote in message news:499751ad.5030...@treenet.co.nz... Eric B. wrote: I've found a noticable speed increase (50%) in all sites when I placed a squid box in front of the web servers. But your experience may vary. Wow - that's amazing. I guess I'm a little

Re: [squid-users] Mid-size Schools that use Squid

On 2/4/09 4:40 PM, Mickey Walker wrote: I am interested in talking with Tech Support individuals that have implemented Squid in mid-sized school districts. I would like to know what kinds of problems they had with the implementation and the performance improvements they received. I am trying

[squid-users] FreeBSD 7/zfs recommendations

Hello all, Playing w/ zfs on an i386 and amd64 machines. Wondering if anyone has any recommendations they would make for FreeBSD 7 and squid 2.4 (or would 3 be better?) Looking for aufs vs diskd vs coss. diskd seems faster on a GENERIC kernel, but after the recommended kernel entries are

Re: [squid-users] When worlds collide

On s=C3=B6n, 2008-07-13 at 10:46 -0400, Tuc at T-B-O-H.NET wrote: Thanks for the reply. It turns out, oddly, that the IP that the system is sending them to doesn't seem to be contactable either. Interest= ingly, its generating those 0 0 (return code/bytes) I was seeing recently. So

Re: [squid-users] When worlds collide

Tuc at T-B-O-H.NET wrote: Hi, Running into a problem, not sure if or how to handle it. User running windows has an entry in their (Windows equiv of /etc/hosts) that says : 192.168.3.10SNEAKY.EXAMPLE.COM For the rest of the world, SNEAKY.EXAMPLE.COM

Re: [squid-users] When worlds collide

/nsswitch.conf has hosts:files dns? That way, Squid sees it the same way, which is what it looks like Tuc is trying to do. Paul On Jul 12, 2008, at 8:55 PM, Amos Jeffries wrote: Tuc at T-B-O-H.NET wrote: Hi, Running into a problem, not sure if or how to handle it. User

[squid-users] When worlds collide

Hi, Running into a problem, not sure if or how to handle it. User running windows has an entry in their (Windows equiv of /etc/hosts) that says : 192.168.3.10SNEAKY.EXAMPLE.COM For the rest of the world, SNEAKY.EXAMPLE.COM doesn't exist (NXDOMAIN).

  1   2   3   >