Re: [squid-users] bandwith restriction
Hi, Is there any update me?It is urgent for me, please guide me to get idea of delay pool. Thanks, Benjamin Fernanind On Sun, Jun 19, 2011 at 6:55 PM, benjamin fernandis benjo11...@gmail.com wrote: Hi Amos, thanks your your response.Please share me any document for delay pool to understand it in exact manner as it works.I tried to find from internet but it is very confusing to me. As per squid document, there are class object in that they are using terms like aggregate , network and individual terms. What does that mean? What is the restore and max terms which used in delay_pool parameters? Please try to solve my doubts with any good practical example. Thanks, Benjamin
Re: [squid-users] bandwith restriction
From: benjamin fernandis benjo11...@gmail.com As per squid document, there are class object in that they are using terms like aggregate , network and individual terms. What does that mean? If I understand the documentation correctly: If IP=a.b.c.d aggregate (for class 1,2,3): *.*.*.* = limit in all cases network (for class 2,3 only): a.b.*.* = limit per network individual (for class 3 only) a.b.c.* = limit per user aggregate network individual... For restore/maximum: See the buckets as real buckets with a max capacity of maximum and that constantly receive water at a speed of restore/s... If a user use all the water, he has to wait for the bucket to get filled again... JD
[squid-users] Squid looking for itself in an array?
I am running squid-3.1.11-1 and it keeps locking up on me. When I then tell squid to restart using the init.d scripts it floods the logs with messages like this: 1308587241.668 24741 10.76.16.15 TCP_MISS/502 74187 GET http://10.76.16.15:8089/array.dll? - DIRECT/10.76.16.15 text/html which the squid machines ip address is 10.76.16.15 I was experiencing this behavior in any release prior to 3.1 and I am still using my config from those prior versions, but I have looked at the default config that comes with the package and I didn't see anything that stood out as the reason it would be doing this. Can anyone give me a clue to what I need to look at? I would like to stay up on these newer versions but I can't get around this error. Brent
Re: [squid-users] Problems compiling 3.1.12.3-RC with ICAP on RHEL
Le lundi 20 juin 2011 12:46:12 Lindsay Hill a écrit : Hi all Is anyone else seeing problems with compiling the 3.1.12.3 RC on RHEL, with --enable-icap-client? It seems that patch 10313 (http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10313.patch ) causes issues. This is the output I'm getting: snip ngs -Wcomments -Werror -D_REENTRANT -m64 -O2 -g -m64 -mtune=generic -c -o Initiate.lo Initiate.cc libtool: compile: g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../src -I../../include -I../../libltdl -I/usr/include/libxml2 -I/usr/include/libxml2 -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -D_REENTRANT -m64 -O2 -g -m64 -mtune=generic -c Initiate.cc -fPIC -DPIC -o .libs/Initiate.o /bin/sh ../../libtool --tag=CXX --mode=compile g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../src -I../../include -I../../libltdl -I/usr/include/libxml2 -I/usr/include/libxml2 -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -D_REENTRANT -m64 -O2 -g -m64 -mtune=generic -c -o Initiator.lo Initiator.cc libtool: compile: g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../src -I../../include -I../../libltdl -I/usr/include/libxml2 -I/usr/include/libxml2 -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -D_REENTRANT -m64 -O2 -g -m64 -mtune=generic -c Initiator.cc -fPIC -DPIC -o .libs/Initiator.o Initiate.cc: In destructor 'virtual Adaptation::AnswerCall::~AnswerCall()': Initiate.cc:41: error: request for member 'message' in '((Adaptation::AnswerCall*)this)-Adaptation::AnswerCall::anonymous.AsyncC allTAdaptation::AnswerDialer::dialer.Adaptation::AnswerDialer::anonymous .UnaryMemFunTAdaptation::Initiator, HttpMsg*::arg1', which is of non-class type 'HttpMsg*' Initiate.cc:41: error: request for member 'message' in '((Adaptation::AnswerCall*)this)-Adaptation::AnswerCall::anonymous.AsyncC allTAdaptation::AnswerDialer::dialer.Adaptation::AnswerDialer::anonymous .UnaryMemFunTAdaptation::Initiator, HttpMsg*::arg1', which is of non-class type 'HttpMsg*' Initiate.cc:42: error: request for member 'message' in '((Adaptation::AnswerCall*)this)-Adaptation::AnswerCall::anonymous.AsyncC allTAdaptation::AnswerDialer::dialer.Adaptation::AnswerDialer::anonymous .UnaryMemFunTAdaptation::Initiator, HttpMsg*::arg1', which is of non-class type 'HttpMsg*' Initiate.cc: In member function 'void Adaptation::Initiate::sendAnswer(HttpMsg*)': Initiate.cc:94: error: 'answer' was not declared in this scope make[4]: *** [Initiate.lo] Error 1 make[4]: *** Waiting for unfinished jobs libtool: compile: g++ -DHAVE_CONFIG_H -I../.. -I../../include -I../../src -I../../include -I../../libltdl -I/usr/include/libxml2 -I/usr/include/libxml2 -Wall -Wpointer-arith -Wwrite-strings -Wcomments -Werror -D_REENTRANT -m64 -O2 -g -m64 -mtune=generic -c Initiator.cc -o Initiator.o /dev/null 21 make[4]: Leaving directory `/usr/src/redhat/BUILD/squid-3.1.12.3/src/adaptation' make[3]: *** [all-recursive] Error 1 make[3]: Leaving directory `/usr/src/redhat/BUILD/squid-3.1.12.3/src/adaptation' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/usr/src/redhat/BUILD/squid-3.1.12.3/src' make[1]: *** [all] Error 2 make[1]: Leaving directory `/usr/src/redhat/BUILD/squid-3.1.12.3/src' make: *** [all-recursive] Error 1 error: Bad exit status from /var/tmp/rpm-tmp.34664 (%build) If I reverse that patch, Squid compiles OK. Thoughts? - Lindsay Similar here http://kenobi.mandriva.com/queue/failure/2010.1/main/testing/20110620204119.dlucio.kenobi.12580/log/squid-3.1.12.3-3mdv2010.2/ usign gcc4.4 and 4.6
Re: [squid-users] Squid looking for itself in an array?
On Mon, 20 Jun 2011 11:32:27 -0500, Brent Norris wrote: I am running squid-3.1.11-1 and it keeps locking up on me. When I then tell squid to restart using the init.d scripts it floods the logs with messages like this: 1308587241.668 24741 10.76.16.15 TCP_MISS/502 74187 GET http://10.76.16.15:8089/array.dll? - DIRECT/10.76.16.15 text/html which the squid machines ip address is 10.76.16.15 I was experiencing this behavior in any release prior to 3.1 and I am still using my config from those prior versions, but I have looked at the default config that comes with the package and I didn't see anything that stood out as the reason it would be doing this. Can anyone give me a clue to what I need to look at? I would like to stay up on these newer versions but I can't get around this error. Brent Malware causing forwarding loops. access.log entries only occur *after* the completion of a request. This vulnerability is a side effect of removing the HTTP protocol Via: header. You can catch such requests early by erasing the via or x_forwarded_for from your 3.1 config. The defaults are to use loop protection. If this is an interception proxy make sure you also have firewall protection preventing visitors from directly connecting to the squid listening NAT/intercept port. Or, you can use the deny to_localhost security access control next to your deny !Safe_ports one. You may need to add the Squid box public IP to the list of prohibited localhost IPs. Amos
[squid-users] Re: Read error Squid v2.6.stable21 www.microsofthup.com
Hi Can you post this so I can get some feedback on whether people are experiencing issues accessing the site via squid? thanks The setup is UserSquid--http://www.microsofthup.com The error is ++ ERROR The requested URL could not be retrieved While trying to retrieve the URL: http://www.microsofthup.com/hupus/chooser.aspx? The following error was encountered: Read Error The system returned: (104) Connection reset by peer An error condition occurred while reading data from the network. Please retry your request. Your cache administrator is root. Generated Fri, 17 Jun 2011 00:03:18 GMT by proxy.fqdn.com (squid/2.6.STABLE21) ++ in the access.log I see the site is load balanced
Re: [squid-users] Problems compiling 3.1.12.3-RC with ICAP on RHEL
On 06/21/2011 09:05 AM, Luis Daniel Lucio Quiroz wrote: Le lundi 20 juin 2011 12:46:12 Lindsay Hill a écrit : Hi all Is anyone else seeing problems with compiling the 3.1.12.3 RC on RHEL, with --enable-icap-client? It seems that patch 10313 (http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-10313.patch ) causes issues. snip Similar here http://kenobi.mandriva.com/queue/failure/2010.1/main/testing/20110620204119.dlucio.kenobi.12580/log/squid-3.1.12.3-3mdv2010.2/ usign gcc4.4 and 4.6 More comments on this here: http://bugs.squid-cache.org/show_bug.cgi?id=3153
[squid-users] squid is modifying Host header
Hi all, I'm running squid/2.6.STABLE21 behind an SSL offload appliance on port 8443 as an application accelerator. squid.conf: http_port 10.67.124.57:80 accel vhost protocol=http http_port 10.67.124.57:8443 accel vhost protocol=http cache_peer 127.0.0.1 Parent 80 0 no-query no-digest default login=PASS originserver It's rewriting the Host header of requests and adding the port number to the URL, eg. Host: myvhostname.com:8443. This is breaking the app behind it. Note, url_rewrite_host_header is set to off. Any ideas what's causing this behaviour? It's only happening in our QA env and is working fine in PROD with an identical squid version and config. Regards, Sean. This e-mail is confidential. If you are not the intended recipient you must not disclose or use the information contained within. If you have received it in error please return it to the sender via reply e-mail and delete any record of it from your system. The information contained within is not the opinion of Edith Cowan University in general and the University accepts no liability for the accuracy of the information provided. CRICOS IPC 00279B
