[squid-users] squid: Memory utilization higher than expected since moving from 3.3 to 3.4 and Vary: working

2014-07-07 Thread Martin Sperl
Hi! We have found out that since we moved from squid 3.3 to 3.4.3 (and the corresponding Vary) the memory utilization of squid has increased. It is 10GB right now 9.6G in memory, but we have only configured 4GB for in Memory caching. Here the ps line: squid17695 10.9 61.2 10629864

Re: [squid-users] RockStore Fatal Error

2014-07-07 Thread Nyamul Hassan
On Mon, Jul 7, 2014 at 7:17 AM, Alex Rousskov rouss...@measurement-factory.com wrote: Yes, as you know by now(*), those ideas are documented at the wiki URL I posted earlier. If you can improve wiki documentation so that it is easier to find in cases like yours, please do so. I was looking for

[squid-users] changing access-list in Traffic redirection from L3 switch to squid?

2014-07-07 Thread Mark jensen
I have configure my L3 switch to redirect the HTTP traffic to squid box: from squid-wiki: ! interface Ethernet0 description To Office Ethernet ip address ROUTERIP 255.255.255.0 no ip directed-broadcast no ip mroute-cache ip policy route-map proxy-redir ! access-list 110 deny tcp host

[squid-users] changing access-list in Traffic redirection from L3 switch to squid?

2014-07-07 Thread Mark jensen
I have configure my L3 switch to redirect the HTTP traffic to squid box: from squid-wiki: ! interface Ethernet0 description To Office Ethernet ip address ROUTERIP 255.255.255.0 no ip directed-broadcast no ip mroute-cache ip policy route-map proxy-redir ! access-list 110 deny tcp host

Re: [squid-users] RockStore Fatal Error

2014-07-07 Thread Eliezer Croitoru
Indeed it's moderated due to spam attacks. Eliezer On 07/07/2014 12:42 PM, Nyamul Hassan wrote: I was looking for the sign up in the wiki, but it is being elusive to me. Is sign up moderated? Regards HASSAN

Re: [squid-users] squid: Memory utilization higher than expected since moving from 3.3 to 3.4 and Vary: working

2014-07-07 Thread Carlos Defoe
run free -m in shell and paste the output here On Mon, Jul 7, 2014 at 5:46 AM, Martin Sperl martin.sp...@amdocs.com wrote: Hi! We have found out that since we moved from squid 3.3 to 3.4.3 (and the corresponding Vary) the memory utilization of squid has increased. It is 10GB right now 9.6G

RE: [squid-users] squid: Memory utilization higher than expected since moving from 3.3 to 3.4 and Vary: working

2014-07-07 Thread Martin Sperl
Does not make a difference as the memory footprint is too big (and the system has swapped out pages already because of this), but here: total used free sharedbuffers cached Mem: 15951 15748202 0419 1569 -/+

[squid-users] Detecting proxy server

2014-07-07 Thread Vinay C
Hi All, Is there any way I can detect which Proxy server (Preferably name like Squid, Websense etc) did my http-request passes through (Either at webserver side or at request initiating client side)? Thanks, -Vinay

Re: [squid-users] Detecting proxy server

2014-07-07 Thread Nyamul Hassan
In fully transparent mode like TProxy, it is not possible in any way to detect the presence of a proxy in the middle. Can you explain a bit more about what you want to achieve? Regards HASSAN On Mon, Jul 7, 2014 at 6:58 PM, Vinay C vinayc.ma...@gmail.com wrote: Hi All, Is there any way I

Re: [squid-users] Detecting proxy server

2014-07-07 Thread Cassiano Martin
If you issue: lynx -head -dump http://www.google.com And if the proxy server is set to add headers, you will see it, even if transparent: HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=UTF-8 Location: http://www.google.com.br/?gfe_rd=crei=xJy6U66VDqKk8weLnYGIAw

Re: [squid-users] squid: Memory utilization higher than expected since moving from 3.3 to 3.4 and Vary: working

2014-07-07 Thread Amos Jeffries
On 2014-07-07 20:46, Martin Sperl wrote: Hi! We have found out that since we moved from squid 3.3 to 3.4.3 (and the corresponding Vary) the memory utilization of squid has increased. It is 10GB right now 9.6G in memory, but we have only configured 4GB for in Memory caching. Yes. 4GB for

Re: [squid-users] RockStore Fatal Error

2014-07-07 Thread Alex Rousskov
On 07/07/2014 03:42 AM, Nyamul Hassan wrote: On Mon, Jul 7, 2014 at 7:17 AM, Alex Rousskov rouss...@measurement-factory.com wrote: Yes, as you know by now(*), those ideas are documented at the wiki URL I posted earlier. If you can improve wiki documentation so that it is easier to find in

Re: [squid-users] Detecting proxy server

2014-07-07 Thread Alex Rousskov
On 07/07/2014 06:58 AM, Vinay C wrote: Is there any way I can detect which Proxy server (Preferably name like Squid, Websense etc) did my http-request passes through (Either at webserver side or at request initiating client side)? If the proxy adds a Via header identifying the proxy product

[squid-users] Why squid show IP in access log for transparent proxy?‏

2014-07-07 Thread Nil Nik
Hi, I have setup squid 3.3.9 in transparent mode with ssl_bump none. The access.log shows IP address instead of domain. The access.log looks like this: 1404741370.411 10.10.16.57 TCP_MISS/200 3434 49.200.255.210:443 1404741402.943 10.10.16.57 TCP_MISS/200 3904 115.112.3.4:443 1404741430.695

Re: [squid-users] Why squid show IP in access log for transparent proxy?‏

2014-07-07 Thread Antony Stone
On Monday 07 July 2014 at 17:06:06, Nil Nik wrote: Hi, I have setup squid 3.3.9 in transparent mode with ssl_bump none. The access.log shows IP address instead of domain. The access.log looks like this: 1404741370.411 10.10.16.57 TCP_MISS/200 3434 49.200.255.210:443 Please tell us

Re: [squid-users] Detecting proxy server

2014-07-07 Thread Vinay
Thank you Alex. This is helpful. Sent from my iPhone On 07-Jul-2014, at 8:15 pm, Alex Rousskov rouss...@measurement-factory.com wrote: On 07/07/2014 06:58 AM, Vinay C wrote: Is there any way I can detect which Proxy server (Preferably name like Squid, Websense etc) did my http-request

RE: [squid-users] Why squid show IP in access log for transparent proxy?‏

2014-07-07 Thread Mark jensen
to show the domain name instead of IP: One method would be to make use of this directive in the squid.conf file to get the log file to show FQDNs instead of the IPs: log_fqdn on this is a good link which may help you:

[squid-users] SQUID 3.10 TProxy Issues

2014-07-07 Thread Info OoDoO
Hi, I configured Squid in Tproxy mode and Mangled the request, Now i am able to see my client public address, but i'm unable to see any request on squid access log. seems the request is not forwarded to squid or some thing spoofy.. My iptables rules -A PREROUTING -p tcp -m socket -j DIVERT -A

Re: [squid-users] Why squid show IP in access log for transparent proxy?‏

2014-07-07 Thread Antony Stone
On Monday 07 July 2014 at 19:44:34, Mark jensen wrote: to show the domain name instead of IP: One method would be to make use of this directive in the squid.conf file to get the log file to show FQDNs instead of the IPs: log_fqdn on That's for looking up the hostnames of clients connecting

[squid-users] TPROXY Squid Error.

2014-07-07 Thread collect oodoo
I have configured squid with the options in the below paste .. http://pastebin.com/jFhzd3qj I packets are being forwarded from the cache box to internet and i'm able to see the Client Public address instaed of squid Box Public Address.. the Issue here is the requests are not being forwarded by or

Re: [squid-users] TPROXY Squid Error.

2014-07-07 Thread Nyamul Hassan
Can you also pastebin your squid.conf? Regards HASSAN On Tue, Jul 8, 2014 at 12:53 AM, collect oodoo coll...@oodoo.co.in wrote: I have configured squid with the options in the below paste .. http://pastebin.com/jFhzd3qj I packets are being forwarded from the cache box to internet and i'm

Re: [squid-users] TPROXY Squid Error.

2014-07-07 Thread Nyamul Hassan
Hi Ganesh, In your basic data pastebin, seems like the ip rule and ip route rules are missing. Please see if running the following commands helps the situation: * echo 100 squidtproxy /etc/iproute2/rt_tables * ip rule add fwmark 1 lookup 100 * ip route add local default dev lo table 100

Re: [squid-users] TPROXY Squid Error.

2014-07-07 Thread Info OoDoO
Thanks Hassan, Now the request are passing through Squid but Failing with 110 Connection Timed Out Error. When I use transparent Mode its working fine. Any Idea..!! Thanks, Ganesh J Thanks, OodoO Fiber, +91 8940808080 www.oodoo.co.in On Tue, Jul 8, 2014 at 1:16 AM, Nyamul Hassan

Re: [squid-users] TCP_DENIED_RELY 302 for error_map

2014-07-07 Thread SaRaVanAn
Hi Amos, Thanks for your suggestion. Configuration --- Squid version: 3.1.20 acl denied_status_404 http_status 404 deny_info 404:http://example.com/ denied_status_404 http_reply_access deny denied_status_404 1) If i try the above configuration browser is not redirectiong to

Re: [squid-users] TPROXY Squid Error.

2014-07-07 Thread Nyamul Hassan
Did you check the possibility of a routing loop as described in the troubleshooting section of the TProxy wiki page? In fact, can you check that you have covered all the steps mentioned in that section? Regards HASSAN On Tue, Jul 8, 2014 at 2:37 AM, Info OoDoO i...@oodoo.co.in wrote: Thanks

[squid-users] Handling client-side request floods

2014-07-07 Thread Dan Charlesworth
Hey folks So I support a bunch of Squid deployments and every so often I’ll get a call about a poor performance, or very large access logs files etc. Oftentimes as soon as I crack open the access log I see there’s a handful of machines (sometimes just one) practically DoSing the proxy with

[squid-users] Re: access denied

2014-07-07 Thread winetbox
sorry for being out of topic, since my squid configuration is here, and squid's experts are already here, i'd like to ask about my cache config. *. how efficient is my cache config? cache_mem 1024 MB maximum_object_size_in_memory 2048 KB memory_replacement_policy heap LFUDA

RE: [squid-users] Why squid show IP in access log for transparent proxy?‏

2014-07-07 Thread Nil Nik
Thanks for reply! Following is the part of squid.conf log_access deny acl_localhost log_access deny local_mynetwork log_access deny acl_direct_alldomain logformat custom_log %ts.%03tu %a %Ss/%03Hs %st %ru cache_access_log /var/log/squid/access.log custom_log

Re: [squid-users] TCP_DENIED_RELY 302 for error_map

2014-07-07 Thread Amos Jeffries
On 2014-07-08 08:38, SaRaVanAn wrote: Hi Amos, Thanks for your suggestion. Configuration --- Squid version: 3.1.20 acl denied_status_404 http_status 404 deny_info 404:http://example.com/ denied_status_404 http_reply_access deny denied_status_404 1) If i try the above

RE: [squid-users] Why squid show IP in access log for transparent proxy?‏

2014-07-07 Thread Nil Nik
I am NOT looking for client IP or host. I am looking for target server IP. In case of 'ssl_bump none' squid access log shows IP of server instead of domain. log_fqdn on is not useful for me. From: antony.st...@squid.open.source.it To: