[squid-users] squid+apache+php-fpm How squid could mark DEAD a peer where Apache is alive and php-fpm dead?

2020-06-28 Thread Patrick Chemla
Hi, Thank you all for the great work on Squid. I got last week a bad "issue" where a squid Version 4.0.23 set to send requests to 4 VMs didn't detect a dead peer. On each VM are running Apache as the frontal, and php-fpm as php

Re: [squid-users] domains with accented international characters fail with Invalid URL

2020-05-12 Thread Patrick Chemla
Sorry for this, it seems it is not linked to accented characters. Other not accented domains don't work too. I am checking my configuration. Patrick Le 12/05/2020 à 14:40, Patrick Chemla a écrit : Hi

[squid-users] domains with accented international characters fail with Invalid URL

2020-05-12 Thread Patrick Chemla
Hi, In the past I asked few questions here and got very efficient help, so I try again. I have a french domain using accented letters in the domain name itself  like "aaaébbbéooo.com" knowned as xn--xxx-xxx.fr in DNS and Apache

[squid-users] Multiple SSL certificates on same IP

2018-12-19 Thread Patrick Chemla
Hi all, Thanks for the great work you do/provide with squid. I am using squid for years, I like it very much, and I am now installing a SSL load-balancing unit for about 80 domains/sub-domains. My OS release is Fedora release 29

[squid-users] Redirect input http to https

2018-02-26 Thread Patrick Chemla
Hi all, A lot a very goog people here could help in this: I have a squid 3.5.20 in front of some backends to balance traffic according to where the website is. I have set up certificates on squid for all sites, and backend are actually accepting traffic both http and https. On some

Re: [squid-users] tcp_outgoing_address issue how to deny traffic to other IPs

2018-02-26 Thread Patrick Chemla
Hi Alex, Ivan, I finally found time to change/test the squid config to load balance on outgoing IPs, and thanks you very much it works very good. All traffic is not output according to the rules to the right IPs. Other question I will open a new thread. Many many thanks. Patrick Le

[squid-users] tcp_outgoing_address issue how to deny traffic to other IPs

2018-02-22 Thread Patrick Chemla
Hi, I have googled for days and can't find the right settings to distribut outgoing requests over part on local IPs of my server. This is my conf I built according to what I found on docs and forums: Squid Cache: Version 4.0.17 blablabla blablabla blablabla

Re: [squid-users] Trusted CA Certificate with ssl_bump

2016-11-21 Thread Patrick Chemla
others? Thanks Patrick Le 17/11/2016 à 20:11, Patrick Chemla a écrit : Hi Alex, sorry for disturbing, but it works with https_port 5.39.105.241:443 accel defaultsite=www.sempli.com cert=/etc/squid/ssl/sempli.com.crt key=/etc/squid/ssl/sempli.com.key Many, many, many Thanks

Re: [squid-users] Trusted CA Certificate with ssl_bump

2016-11-17 Thread Patrick Chemla
Hi Alex, sorry for disturbing, but it works with https_port 5.39.105.241:443 accel defaultsite=www.sempli.com cert=/etc/squid/ssl/sempli.com.crt key=/etc/squid/ssl/sempli.com.key Many, many, many Thanks for valuable help. Patrick Le 17/11/2016 à 19:48, Patrick Chemla a écrit

Re: [squid-users] Trusted CA Certificate with ssl_bump

2016-11-17 Thread Patrick Chemla
ACLFilledChecklist destroyed 0x78737acd2520 2016/11/17 18:36:15.609 kid1| 28,4| Checklist.cc(197) ~ACLChecklist: ACLChecklist::~ACLChecklist: destroyed 0x78737acd2520 Thanks for help Patrick Le 16/11/2016 à 20:16, Patrick Chemla a écrit : Many Thanks Alex. I will try in the next hours and le

Re: [squid-users] Trusted CA Certificate with ssl_bump

2016-11-16 Thread Patrick Chemla
Many Thanks Alex. I will try in the next hours and let you if I am successful. Patrick Le 16/11/2016 à 20:04, Alex Crow a écrit : On 16/11/16 17:33, Patrick Chemla wrote: Thanks for your answers, I am not doing anything illegal, I am trying to build a performant platform. I have a big

Re: [squid-users] Trusted CA Certificate with ssl_bump

2016-11-16 Thread Patrick Chemla
a écrit : On 16/11/2016 9:11 p.m., Patrick Chemla wrote: Hi, I have same problem, and I need to use trusted CA certificates, so what is the solution? Not to do illegal bad things that violate your contract with the CA. Any CA which lets you intercept traffic by generating sub-certificates

Re: [squid-users] Groups of peers load-balancing

2016-10-07 Thread Patrick Chemla
Load Balancer is one of the roles Squid is designed for. When you need to converge the LB, routing, and caching tasks Squid is the product for the job. On Oct 6, 2016, at 12:16 AM, Patrick Chemla wrote: Hi, I am using Squid Cache: Version 3.5.20 on 2 Fedora 24 server. I have to set a load

[squid-users] Groups of peers load-balancing

2016-10-06 Thread Patrick Chemla
Hi, I am using Squid Cache: Version 3.5.20 on 2 Fedora 24 server. I have to set a load-balancer for multiple sites, each using different peers, on both servers + cloud instances. Squid is the entry point for all websites. According to the domain, I will have 2 to 5 peers to handle the load.

Re: [squid-users] affinity session load balancing

2015-11-16 Thread Patrick Chemla
at 10:35:39, Patrick Chemla wrote: Hi, I am using squid for years, maybe with basic features, and I have a problem today with an app where I need to manage multiple backends, be sure that a user is always sent to the same one because the app writes on local disk, and I have 80% users coming from

[squid-users] affinity session load balancing

2015-11-16 Thread Patrick Chemla
Hi, I am using squid for years, maybe with basic features, and I have a problem today with an app where I need to manage multiple backends, be sure that a user is always sent to the same one because the app writes on local disk, and I have 80% users coming from same IP. So I need to load

Re: [squid-users] Problem to set up multi-cpu multi-ports squid 3.3.12

2014-07-15 Thread Patrick Chemla
22:03, Eliezer Croitoru a écrit : On 07/14/2014 08:42 PM, Patrick Chemla wrote: Hey Eliezer, Happy to read you. What do you call rock as cache_dir? Squid uses cache_dir to store objects on disk. If you don't know what it is I will refer you to the configuration pages: http://www.squid-cache.org

Re: [squid-users] Re: Problem to set up multi-cpu multi-ports squid 3.3.12

2014-07-15 Thread Patrick Chemla
Thanks for help. The problem is that I can have some external IPs and hundreds ports for each IP on the same box. Up to now, I am using virtual machines for IPs and I route the ip:ports with iptables to the right VM (hundreds ports each). There one squid instance is listening to 128 ports

[squid-users] Problem to set up multi-cpu multi-ports squid 3.3.12

2014-07-14 Thread Patrick Chemla
Hi, I have a multi-ports config of squid running from version 3.1.19 upgraded to 3.3.12. Working like a charm, but the traffic is reaching one cpu limit. I want to use SMP capabilities with SMP workers on my 8 cpus/64G mem Fedora 20 box. I saw in the

Re: [squid-users] Problem to set up multi-cpu multi-ports squid 3.3.12

2014-07-14 Thread Patrick Chemla
06:30 PM, Patrick Chemla wrote: Hi, I have a multi-ports config of squid running from version 3.1.19 upgraded to 3.3.12. Working like a charm, but the traffic is reaching one cpu limit. I want to use SMP capabilities with SMP workers on my 8 cpus/64G mem Fedora 20 box. I saw in the http