[squid-users] Define two cache_peer directives with same IP but different ports

2014-07-14 Thread Klaus Reithmaier
Hello, I have two machines with each two squid processes. I want that every process is querying the other three over htcp if it has a specified element in its cache. So this is my setting: | Proxyserver1: IP 192.168.1.1

Re: [squid-users] Define two cache_peer directives with same IP but different ports

2014-07-14 Thread Antony Stone
On Monday 14 July 2014 at 12:21:19, Klaus Reithmaier wrote: Hello, I have two machines with each two squid processes. I want that every process is querying the other three over htcp if it has a specified element in its cache. So this is my setting:

Re: [squid-users] Define two cache_peer directives with same IP but different ports

2014-07-14 Thread Amos Jeffries
On 14/07/2014 10:32 p.m., Antony Stone wrote: On Monday 14 July 2014 at 12:21:19, Klaus Reithmaier wrote: Hello, I have two machines with each two squid processes. I want that every process is querying the other three over htcp if it has a specified element in its cache. So this is my

Re: [squid-users] Define two cache_peer directives with same IP but different ports

2014-07-14 Thread Klaus Reithmaier
-Amos Jeffries squ...@treenet.co.nz schrieb: - An: squid-users@squid-cache.org Von: Amos Jeffries squ...@treenet.co.nz Datum: 14.07.2014 12:39 Betreff: Re: [squid-users] Define two cache_peer directives with same IP but different ports On 14/07/2014 10:32 p.m., Antony Stone wrote:

RE: [squid-users] squid: Memory utilization higher than expected since moving from 3.3 to 3.4 and Vary: working

2014-07-14 Thread Martin Sperl
-20140714 KB-Delta Cnt-20140712Cnt-20140714Cnt-Delta Total 5629096 7494319 1865223 26439770 337042107264440 mem_node2375038 3192370 817332 588017 790374 202357 4K Buffer 1138460 146 361536 284615

[squid-users] 502 Bad Gateway

2014-07-14 Thread ama...@tin.it
Hello I have a problem with - squid-3.3.9 - squid-3.4.5 but NO problem with: - squid-2.7.stable9 - without proxy I have tested with firefox 24.6 and ie explorer 8.0. On browser the error displayed is: The following error was encountered while trying to retrieve the URL:

Re: [squid-users] 502 Bad Gateway

2014-07-14 Thread Eliezer Croitoru
Hey There, We do not have a clue about your setup(you didn't shared any relevant information). What OS are you using? Is it a self compiled version of squid? Is this a reverse or forward proxy? You can use this script: http://www1.ngtech.co.il/squid/basic_data.sh To share relevant

Re: [squid-users] Define two cache_peer directives with same IP but different ports

2014-07-14 Thread Eliezer Croitoru
It's very easy to miss.. I think it can be notified to the user with a simple one liner but I do not know 100% it's right. Eliezer On 07/14/2014 02:08 PM, Klaus Reithmaier wrote: Thanks Amos, exactly what i searched for. Sorry overlooking this in the documentation... Klaus

[squid-users] squid head RPM for the request.

2014-07-14 Thread Eliezer Croitoru
-3.5.0.003-1.el6.x86_64.rpm http://www1.ngtech.co.il/rpm/centos/6/x86_64/head/squid-helpers-3.5.0.003-1.el6.x86_64.rpm It's based on the sources of: http://www.squid-cache.org/Versions/v3/3.HEAD/squid-3.HEAD-20140714-r13496.tar.gz I do hope to release 3.4.6 in the next week but since I have been walking

Re: [squid-users] Re: how can i get the localport in forward proxy mode?

2014-07-14 Thread Eliezer Croitoru
You are Wrong.. If you authenticate using a regular HTTP page and use a login page it will work for mobile but they Won't gain access throw the proxy until they will login in the splash or another page. It's being used on many WIFI networks and it's very simple to implement. Good Luck,

[squid-users] Problem to set up multi-cpu multi-ports squid 3.3.12

2014-07-14 Thread Patrick Chemla
Hi, I have a multi-ports config of squid running from version 3.1.19 upgraded to 3.3.12. Working like a charm, but the traffic is reaching one cpu limit. I want to use SMP capabilities with SMP workers on my 8 cpus/64G mem Fedora 20 box. I saw in the

Re: [squid-users] Problem to set up multi-cpu multi-ports squid 3.3.12

2014-07-14 Thread Eliezer Croitoru
Hey There, It depends, In a case you are using UFS\AUFS cache_dir you cannot.. use SMP with it. You will need to use rock and only rock as a cache_dir for the time being. You need to run squid -kparse to make sure your settings makes sense for squid. else then that you should look at

Re: [squid-users] Problem to set up multi-cpu multi-ports squid 3.3.12

2014-07-14 Thread Patrick Chemla
Hey Eliezer, Happy to read you. What do you call rock as cache_dir? Here is squid -kparse 2014/07/14 18:13:25| Startup: Initializing Authentication Schemes ... 2014/07/14 18:13:25| Startup: Initialized Authentication Scheme 'basic' 2014/07/14 18:13:25| Startup: Initialized Authentication

[squid-users] Host header forgery policy

2014-07-14 Thread Edwin Marqe
Hi all, After an upgrade of squid3 to version 3.3.8-1ubuntu6, I got the unpleasant surprise of what is called the Host header forgery policy. I've read the documentation of this part, and although I understand the motivation of its implementation, I honestly see not very practical implementing

Re: [squid-users] Host header forgery policy

2014-07-14 Thread Eliezer Croitoru
Hey There, I do not know your setup but if you run: dig domain.com and the results are different from what the client tries to request it seems to be a Host Header Forgery like.. In the case of google, it seems like google instead of pointing to one of your servers points to a local server but

Re: [squid-users] Host header forgery policy

2014-07-14 Thread Edwin Marqe
Hi Eliezer, I understand that, but this is pretty much the point of my e-mail. In my company we don't work with servers installed physically here, instead, we rent servers to a company. We use 2 nameservers for our clients, and the IT company uses others and additionally they don't allow to

Re: [squid-users] Host header forgery policy

2014-07-14 Thread James Lay
On Mon, 2014-07-14 at 19:23 +0100, Edwin Marqe wrote: Hi Eliezer, I understand that, but this is pretty much the point of my e-mail. In my company we don't work with servers installed physically here, instead, we rent servers to a company. We use 2 nameservers for our clients, and the IT

Re: [squid-users] Host header forgery policy

2014-07-14 Thread Eliezer Croitoru
On 07/14/2014 09:23 PM, Edwin Marqe wrote: Hi Eliezer, I understand that, but this is pretty much the point of my e-mail. In my company we don't work with servers installed physically here, instead, we rent servers to a company. We use 2 nameservers for our clients, and the IT company uses

Re: [squid-users] Problem to set up multi-cpu multi-ports squid 3.3.12

2014-07-14 Thread Eliezer Croitoru
On 07/14/2014 08:42 PM, Patrick Chemla wrote: Hey Eliezer, Happy to read you. What do you call rock as cache_dir? Squid uses cache_dir to store objects on disk. If you don't know what it is I will refer you to the configuration pages: http://www.squid-cache.org/Doc/config/cache_dir/ Your

[squid-users] Re: Problem to set up multi-cpu multi-ports squid 3.3.12

2014-07-14 Thread babajaga
Besides SMP, there is still the old fashioned option of multiple instances of squid, in a sandwich config. http://wiki.squid-cache.org/MultipleInstances Besides described port rotation, you can set up 3 squids, for example: one frontend, just doing ACLs and request dispatching (carp), and 2

Re: [squid-users] feature request for sslbump

2014-07-14 Thread Brendan Kearney
On Mon, 2014-07-14 at 15:57 +1200, Jason Haar wrote: Hi there I've started testing sslbump with ssl_bump server-first and have noticed something (squid-3.4.5) If your clients have the Proxy CA cert installed and go to legitimate https websites, then everything works perfectly (excluding

Re: [squid-users] feature request for sslbump

2014-07-14 Thread Lawrence Pingree
Several ssl inspecting firewalls also provide this capability. Sent from my iPhone On Jul 14, 2014, at 6:10 PM, Brendan Kearney bpk...@gmail.com wrote: On Mon, 2014-07-14 at 15:57 +1200, Jason Haar wrote: Hi there I've started testing sslbump with ssl_bump server-first and have noticed