Re: [squid-users] cache peer proxy-only - is there a middle ground?

2008-02-05 Thread Adrian Chadd
You know, with CPUs as blindingly fast as they are today, it wouldn't surprise me if you couldn't sustain 10,000 + ICP lookups a second with the right amount of coding work. DNS servers are able to push half a million DNS request/replies on current hardware. I'm pretty certain cache lookups can

Re: [squid-users] CentOS 5.1, Squid, PIX WCCP

2008-02-05 Thread Adrian Chadd
On Tue, Feb 05, 2008, Dennis B. Hopp wrote: I can go to other sites fine though. If I configure my browser to use squid as a proxy then the sites load fine, so it's something with wccp or my configuration of it. I don't know where to start to determine what the problem is. tcpdump.

Re: [squid-users] Asking for feedback on new Squid Wiki theme

2008-02-05 Thread Adrian Chadd
On Tue, Feb 05, 2008, Mark Nottingham wrote: Great job! Looks very nice -- except that the background image is distracting, and makes it hard to read text. Yeah, we were playing with how light to make it to be able to keep it there. I like the idea of a watermark, but I agree its still

Re: [squid-users] squid in port 80 , not running

2008-02-05 Thread Adrian Chadd
You need to use http_port 80 and then make sure squid is started as root, with cache_effective_user set in the squid.conf to run as something non-root. A few systems actually run squid itself as a non-root user, and obviously this means you can't bind to port 80. Check the init script. :)

Re: [squid-users] Diskd Message Queues and Shared memory for FreeBSD 6.x

2008-02-06 Thread Adrian Chadd
On Fri, Nov 10, 2006, Adrian Chadd wrote: As I said to someone else a few weeks ago - we could fix diskd but it'd require quite a bit of effort and there's other things higher on the priority list for us to fix. .. and I've got a patch to fix this behaviour, in case people are running diskd

Re: [squid-users] Reverse proxy non-performance benefits

2008-02-06 Thread Adrian Chadd
On Wed, Feb 06, 2008, Paul Cocker wrote: Sorry if we're entering into duh territory here, but quite simply are there non-performance benefits to be gained from a reverse proxy configuration. I'm thinking in terms of security for the most part. Say, a squid reverse proxy sitting in the DMZ in a

Re: [squid-users] squid process uses 99% CPU

2008-02-06 Thread Adrian Chadd
On Wed, Feb 06, 2008, [EMAIL PROTECTED] wrote: I'm using squid version 2.5.STABLE3 on HP Proliant server with Intel 2.8 Ghz CPU + 1 GB RAM. Sometimes it happened squid proces used about 99% cpu and this inefficiency persisted for 10-15 minutes in discotinuous way. Squid uses normally less

Re: [squid-users] squid process uses 99% CPU

2008-02-06 Thread Adrian Chadd
squid-2.5 uses poll and thus chews a lot of CPU under network load. squid-2.6 and later use epoll under linux. Well, I have no idea if 2.4.22 includes epoll, but you can at least try :) Adrian On Wed, Feb 06, 2008, [EMAIL PROTECTED] wrote: Squid Version 2.5.STABLE3 OS: Fedora Core release

Re: [squid-users] squid as HTTP accelerator : Three questions

2008-02-06 Thread Adrian Chadd
Squid starts as root and then becomes another user. It shouldn't pose a security risk - the amount of code running as root is very, very minimal. adrian On Wed, Feb 06, 2008, kk CHN wrote: Hi People ; Thanks for your reply , thanks to Adrain Chadds tips . I edited the init script

Re: [squid-users] CentOS 5.1, Squid, PIX WCCP

2008-02-06 Thread Adrian Chadd
On Wed, Feb 06, 2008, Dennis B. Hopp wrote: 4000 or 4500? Which sup? It's a 4000. Cisco IOS Software, Catalyst 4000 L3 Switch Software (cat4000-I9S-M), Version 12.2(25)EWA6, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2006 by Cisco

Re: [squid-users] upgrade from 2.5 to 2.6 to add NTLM

2008-02-07 Thread Adrian Chadd
There's nothing special to make it work through 2.6. It should just work. Adrian On Thu, Feb 07, 2008, jeff donovan wrote: On Feb 7, 2008, at 1:30 PM, Leonardo Rodrigues Magalh?es wrote: jeff donovan escreveu: okay that sounds promising. Your saying ( i'm doing this so my

Re: [squid-users] Squid Parent: child process 2809 exited due to signal 25

2008-02-07 Thread Adrian Chadd
kill -l Find out what signal 25 is. adrian On Fri, Feb 08, 2008, Indunil Jayasooriya wrote: HI, I get below error. I checked squid mailling list for this. It says to check logs. I checked they are less than 2 GB. But, I always get this when I start or restart squid proxy. these are

Re: [squid-users] Squid Parent: child process 2809 exited due to signal 25

2008-02-07 Thread Adrian Chadd
check the swap.state files in each of your cache dirs. Adrian On Fri, Feb 08, 2008, Indunil Jayasooriya wrote: kill -l Find out what signal 25 is. it says 25) SIGXFSZ I googled it. pls see below url http://en.wikipedia.org/wiki/SIGXFSZ that means Description: File size

Re: [squid-users] Squid Parent: child process 2809 exited due to signal 25

2008-02-07 Thread Adrian Chadd
Run squid inside gdb: gdb squid (gdb) handle SIGPIPE nostop noprint (gdb) run -ND .. and see where it breaks, then do bt (backtrace) to see what it was doing to cause the issue. Adrian On Fri, Feb 08, 2008, Indunil Jayasooriya wrote: On Feb 8, 2008 11:53 AM, Adrian Chadd [EMAIL PROTECTED

Re: [squid-users] The requested URL could not be retrieved: invalid url

2008-02-08 Thread Adrian Chadd
It shouldn't be this difficult. I mean, I setup ransaprent proxies in a matter of minutes these days. Yes, transparent proxying support needs to be compiled in for your architecture. So. To make this quick and painless: * which os * squid version 3.0, ok * squid config, sans comments * ip

Re: [squid-users] The requested URL could not be retrieved: invalid url

2008-02-08 Thread Adrian Chadd
On Fri, Feb 08, 2008, Dave Coventry wrote: I'll try any distro, it's a greenfield machine. I started on Ubuntu, worked through Slackware, among others and am now back with Ubuntu 7.10 Server. Ok. Ubuntu 7.10 is fine. The first thing I did was set up the DHCP server. Ok. Not squid

Re: [squid-users] FTP problem via Sidewinder [SEC=UNCLASSIFIED]

2008-02-08 Thread Adrian Chadd
On Fri, Feb 08, 2008, Holt, Tim wrote: 2008/02/08 10:17:27| ctx: enter level 16: 'ftp://mirror.aarnet.edu.au/pub/videolan/vlc/latest/vlc-0.8.6.tar.gz' 2008/02/08 10:17:27| Unexpected transfer encoding 'identity' Identity transfer encoding? Hm! Can you put this into a squid bugzilla

Re: [squid-users] Internal dns seems to quit

2008-02-08 Thread Adrian Chadd
It shouldn't do! Are you sure you're not hitting swap or something? Adrian On Fri, Feb 08, 2008, Wickham, Larry wrote: We recently deployed squid-2.6.STABLE6-5.el5_1.2 on CentOS. It ran fine for 23 days or so and began to experience time outs while resolving some websites. In the

Re: [squid-users] The requested URL could not be retrieved: invalid url

2008-02-09 Thread Adrian Chadd
On Sat, Feb 09, 2008, Dave Coventry wrote: Thanks Adrian, I have managed to get Squid running. Now I need to configure it to Authenticate the users... Ah, that bits more difficult. ;) What authentication scheme are you after? adrian -- - Xenion - http://www.xenion.com.au/ - VPS Hosting

Re: [squid-users] squid transparent proxy still not working

2008-02-09 Thread Adrian Chadd
Have you followed http://wiki.squid-cache.org/ConfigExamples/ and setup the forwarding, et al, correctly? Just so you know, I can build a proxy from a default debian install by following one of the examples there and transparent proxying just works. Adriank On Sat, Feb 09, 2008, kang ason

Re: [squid-users] Cisco/Linux/WCCP - Different Interface

2008-02-09 Thread Adrian Chadd
Read http://wiki.squid-cache.org/ConfigExamples/ - there's an example Cisco IOS + WCCP + NAT. Adrian On Sat, Feb 09, 2008, Tuc at T-B-O-H.NET wrote: Hi, Trying to follow : http://wiki.squid-cache.org/SquidFaq/InterceptionProxy Cisco is a 2851 : Cisco IOS Software, 2800

Re: [squid-users] NTLM Authentication to a SharePoint Site

2008-02-11 Thread Adrian Chadd
It works fine in 2.6, and it should work fine in 3.0 any week now. In fact, the last time I saw NTLM auth through a proxy broken it was because the admin had Squid - dansguardian - squid, and the squids were doing it right but Dansguardian wasn't.. On Mon, Feb 11, 2008, Troy wrote: I know this

Re: [squid-users] Re: Re: Re: Cache for mp3 and ogg in memory...

2008-02-12 Thread Adrian Chadd
On Mon, Feb 11, 2008, Michelle Konzack wrote: But if I read the logs, they are around 150-180 files which are heared all the time and they have in summary arround 800 MByte. So creating a Ram-Cache of 1 GByte would do wonder... Then you should look at why your operating system disk caching

Re: [squid-users] Mem Cache flush

2008-02-12 Thread Adrian Chadd
client_persistent_connections off server_persistent_connections on persistent_request_timeout 1 minute client_lifetime 60 minutes pconn_timeout 10 seconds Adrian Chadd wrote: On Thu, Jan 31, 2008, Chris Woodfield wrote: Interesting. What sort of size threshold do you see where performance

Re: [squid-users] Chaining Redirectors

2008-02-13 Thread Adrian Chadd
On Wed, Feb 13, 2008, Solomon Asare wrote: Hi All, pls how do you chaing redirectors? Googling gave me wrapzap+zapchain. Are there alternatives? Especially those native to squid. Well, you could just use an external program which threw it at other helpers. Or someone could code up support

Re: [squid-users] Re: Re: Re: Cache for mp3 and ogg in memory...

2008-02-13 Thread Adrian Chadd
On Wed, Feb 13, 2008, Matus UHLAR - fantomas wrote: maybe the data are never fetched from disk, always from remote server and just always stored to the cache (to be never fetched from there). Or maybe the squid memory usage is too big and machine swaps... Bit hard to say without access to

Re: [squid-users] Mem Cache flush

2008-02-13 Thread Adrian Chadd
content is being cached and what isn't being cached. Then you can decide what to look to cache. :) ADrian Adrian Chadd wrote: G'day, A few notes. * Diskd isn't stable, and won't be until I commit my next set of patches to 2.7 and 3.0; use aufs for now. * Caching windows

[squid-users] youtube URL changes

2008-02-13 Thread Adrian Chadd
Youtube have changed their content URLs again; here's a sample youtube URL: 1202912186.003 9796 192.168.1.138 TCP_MISS/200 925739 GET

Re: [squid-users] squid-2.7 and youtube caching

2008-02-13 Thread Adrian Chadd
On Wed, Feb 13, 2008, pokeman wrote: 2.7 where is download Link :) www.squid-cache.org/Versions/v2/2.7/ adrian

Re: [squid-users] Mem Cache flush

2008-02-13 Thread Adrian Chadd
On Wed, Feb 13, 2008, Jacobi, Michael CIV NSWCCD Philadelphia, 3411 wrote: I am very interested in caching Windows updates - How soon will this be available?? Free? When I get time to sort it out. Thing is, much like caching Youtube, the target keeps shifting and I'm not willing to keep these

Re: [squid-users] 64-bit squid source

2008-02-14 Thread Adrian Chadd
On Thu, Feb 14, 2008, J. Peng wrote: I found that 32-bit squid can run max memory of 1.8G. does a 64-bit squid support much larger memory than the limit above? where to get a 64-bit squid source? thanks! Just compile it with a 64 bit compiler. Adrian -- - Xenion -

Re: [squid-users] problem accessing http://www.sytadin.fr through squid

2008-02-14 Thread Adrian Chadd
I'd suggest by starting with tcpdump and see whats going on. It works for me, and I'm behind a Squid. adrian On Thu, Feb 14, 2008, Frank Bonnet wrote: Hello I have a problem with this site : http://www.sytadin.fr when using the squid , if I access directly I have no problem. My squid

Re: [squid-users] Re: re[squid-users] verse proxy headache

2008-02-14 Thread Adrian Chadd
On Fri, Feb 15, 2008, Amos Jeffries wrote: aren't above directives depracated in 2.6? They are. I believe squid commercial support companies though still support 2.5 as required. The visolve poster is one such commercial supporter. I do too; for some reason I've also got a Squid-2.4

Re: [squid-users] 64-bit squid source

2008-02-14 Thread Adrian Chadd
On Thu, Feb 14, 2008, leongmzlist wrote: I use 32bit squid and its currently using 3.8GB of ram. 32bit squid has a 4G limit 32 bit squid has a 2 gig limit. I suggest you check whether its actually 32 bit, and if it is, I'd love to know which platform its on and how it works. :) Adrian --

Re: [squid-users] Re: re[squid-users] verse proxy headache

2008-02-14 Thread Adrian Chadd
On Fri, Feb 15, 2008, Amos Jeffries wrote: I do too; for some reason I've also got a Squid-2.4 customer.. I hope you at least know why they are still down there... Because its heavily customised. :) In fact, I actually have a Squid-2.2 (yes, two point two) customer who is paying to have

Re: [squid-users] Re: Re: Re: Re: Cache for mp3 and ogg in memory...

2008-02-14 Thread Adrian Chadd
On Thu, Feb 14, 2008, Michelle Konzack wrote: Am 2008-02-13 10:25:32, schrieb Matus UHLAR - fantomas: by using the same URI? or by different URI each time a song is requested? each of this makes problems with HTTP caching... Yes, it is always the same url... For example: The original

Re: [squid-users] squid-2.7 and youtube caching

2008-02-15 Thread Adrian Chadd
On Thu, Feb 14, 2008, pokeman wrote: can i use in production and its works with caching windowsupdate ? Squid-2.7 snapshots seem quite stable. At some point Henrik or I will get 30 minutes to write up the release notes, which I'd like to try and do before the end of the month. That just

Re: [squid-users] www.cmhc.ca site doesn't load

2008-02-15 Thread Adrian Chadd
Start by using a packet sniffer and see if you can determine why the TCP sessions are hanging. It may be WCCPv2 interception. It depends on how you've set it up to the Cat6k. Adrian On Fri, Feb 15, 2008, Shoebottom, Bryan wrote: Hello, I am having problems getting to www.cmhc.ca through

Re: [squid-users] TCP_HIT and TCP_MEM_HIT

2008-02-15 Thread Adrian Chadd
On Sat, Feb 16, 2008, J. Peng wrote: My squid has 2.0G mem totally, I assign 1.8G to squid's cache buffer,the max object size I set is 128kb, and most of our files' size is less than 32kb. Why I still saw lots of TCP_HIT rather than TCP_MEM_HIT? thanks! so you've set cache_mem at 1.8gig?

Re: [squid-users] TCP_HIT and TCP_MEM_HIT

2008-02-15 Thread Adrian Chadd
On Sat, Feb 16, 2008, J. Peng wrote: yes, cache_mem is 1.8GB. so I thought I should see much more TCP_MEM_HIT than TCP_HIT, but it is not. It depends on your object workload. If you have quite a few large objects going through your cache then it may throw out smaller objects which are hit

Re: [squid-users] www.cmhc.ca site doesn't load

2008-02-16 Thread Adrian Chadd
Computer Operations Fanshawe College Phone: (519) 452-4430 x4904 Fax: (519) 453-3231 [EMAIL PROTECTED] -Original Message- From: Adrian Chadd [mailto:[EMAIL PROTECTED] Sent: Saturday, February 16, 2008 8:13 AM To: Shoebottom, Bryan Cc: Adrian Chadd; squid-users@squid-cache.org

Re: [squid-users] Squid, ISA and Sharepoint

2008-02-17 Thread Adrian Chadd
On Mon, Feb 18, 2008, Dwyer, Simon wrote: I believe they want to authenticate twice but I do not really see the point. They will have to authenticate with the sharepoint no matter what happens. Is it possible to get squid to authenticate a user using Active Directory while reverse proxying?

[squid-users] NTLM authentication testing

2008-02-18 Thread Adrian Chadd
G'day, I've got one customer who is asking for some testing of Squid in a large NTLM environment. The problem, as those who have tried it will have encountered, is that although Squid can keep up with it, the Samba/Winbind stuff plainly just can't. So I'm looking for some tools to let me craft

Re: [squid-users] Squid 3.0 Stable1 with MySql Logging

2008-02-18 Thread Adrian Chadd
On Mon, Feb 18, 2008, Cassiano Martin wrote: Where did you read that? There is some work still being done on it for 3.1. If you want to test contact the developer for it or squid-dev Amos There are third party application that import squid logs to mysql, such as MySar. I also work on

Re: [squid-users] NTLM authentication testing

2008-02-18 Thread Adrian Chadd
On Mon, Feb 18, 2008, Richard Wall wrote: This is something that I'm currently very interested in. I had heard that NTLM auth could significantly reduce Squids throughput but haven't seen any figures. I couldn't tell from your message above whether you / your customer has already tried

Re: [squid-users] Squid 3.0 Stable1 with MySql Logging

2008-02-18 Thread Adrian Chadd
On Mon, Feb 18, 2008, Marcello Romani wrote: Hi, I have some experience in Perl and mysql. I can't guarantee a timely implementation, but I'm interested in this feature and I'm willing to contribute. Could you give me some pointers for where to start ? look for logfile_daemon in

Re: [squid-users] NTLM authentication testing

2008-02-18 Thread Adrian Chadd
On Mon, Feb 18, 2008, Richard Wall wrote: On 2/18/08, Richard Wall [EMAIL PROTECTED] wrote: googling suggests that curl may be able to send NTLM Proxy auth requests. Sorry forgot to include the link: * http://curl.haxx.se/docs/manpage.html#--proxy-ntlm Well, I'll be stuffed:

Re: [squid-users] DNS-based reverse proxy peer selection, 2.5 vs 2.6

2008-02-18 Thread Adrian Chadd
On Tue, Feb 19, 2008, Amos Jeffries wrote: Is there a way to do this in 2.6? Yes, with a little trickery in DNS. You need to use DNS-views so that the public see squid as being an A/ for the domain and squid does not. If squid ever find itself as a source server for any of the domains

Re: [squid-users] NTLM authentication testing

2008-02-19 Thread Adrian Chadd
, Adrian Chadd [EMAIL PROTECTED] wrote: Thats basically right - Squid doesn't handle the NTLM itself, it just passes the blob right through. The helper framework can handle hundreds of requests a second without too much thought; I'd like to spend some time figuring out what Samba is doing

Re: [squid-users] NTLM authentication testing

2008-02-19 Thread Adrian Chadd
Oh, and Richard gets a T-shirt, for taking the initiative. :) Adrian

Re: [squid-users] Squid 2.6 hangs after several hours of operation

2008-02-19 Thread Adrian Chadd
* Which version of Squid-2.6 ? * Graph statistics via SNMP, look for any trends (increased RAM/filedescriptor counts, growing CPU usage, etc.) * Run it inside GDB (with the appropriate .gdbinit script) and then when it hangs, ctrl-c into the debugger and see whats going on Adrian On Tue,

Re: [squid-users] Problems accessing www.oracle.com (squid-2.5.STABLE6-3.4E.12/ CentOS 4.3)

2008-02-20 Thread Adrian Chadd
Did you start with tcpdump, to see what the network is doing? Adrian On Wed, Feb 20, 2008, Shaun Mccullagh wrote: Hi, We have been using squid for several years with great success and excellent reliability. I would like to thank all those who have contributed to this cracking app. Up

Re: [squid-users] Squid 3.0 Stable1 with MySql Logging

2008-02-20 Thread Adrian Chadd
On Wed, Feb 20, 2008, Marcello Romani wrote: Ok I found it. I think the comments in the squid.conf file should contain a paragraph like the following: # And priority could be any of: # err, warning, notice, info, debug. # # To log the request via a logfile writing daemon, specify a

Re: [squid-users] www.cmhc.ca site doesn't load

2008-02-20 Thread Adrian Chadd
On Wed, Feb 20, 2008, Shoebottom, Bryan wrote: Adrian, Thank you for the suggestions, the problem is with timestamping and window scaling. When I disable both of these, the site works. Now I am debating whether I should do this or have this single site bypass the cache entirely.

Re: [squid-users] SARG - deny_info problem

2008-02-20 Thread Adrian Chadd
On Wed, Feb 20, 2008, eXtremer wrote: FATAL: failed to find or read error text file. Squid Cache (Version 2.5.STABLE1): Terminated abnormally. Squid-2.5.STABLE1? Are you sure what you're doing is supported? adrian -- - Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid

Re: [squid-users] Squid currently not working.

2008-02-20 Thread Adrian Chadd
Are you running it as root? adrian On Wed, Feb 20, 2008, Steve Billig wrote: I just don't see why it would not be working if I have had no problems before a while back, except for it actually running. Before I had it so that it would work, and actually work on port 81. For some reason it

Re: [squid-users] problem with wccp v2 and cisco

2008-02-21 Thread Adrian Chadd
G'day, * Yes you still need iptables to redirect packets going to arbitrary destinations into Squid running on a port. * Traffic will only flow over the GRE tunnel one way - from the router to the cache. On Thu, Feb 21, 2008, Ritter, Nicholas wrote: I am trying to setup an HTTP-only WCCP

Re: [squid-users] problem with wccp v2 and cisco

2008-02-22 Thread Adrian Chadd
On Fri, Feb 22, 2008, Ritter, Nicholas wrote: Adrian- Thanks for the info. Question is, if I am listening with squid on port 80, do I still need to run iptables? I thought iptables was only needed to do redirect from port 80 to 3128 if squid was not or could not be un on port 80. No. The

Re: [squid-users] RE: Cisco IOS version as suggested by Cisco TAC

2008-02-22 Thread Adrian Chadd
On Fri, Feb 22, 2008, Ritter, Nicholas wrote: Correction, according to testing and Cisco bug toolkit check, 12.4(15)T3 seems to be the better solution. Cisco bug toolkit check? What, there's WCCPv2 bug ids that have been resolved recently? Could you provide details on the bug ids? Thanks,

Re: [squid-users] round robin DNS and the occassional failing IP.

2008-02-23 Thread Adrian Chadd
That sounds plausable. I'm surprised it isn't doing that already. Throw it into a bugzilla report so it isn't forgotten. Adrian On Sun, Feb 24, 2008, Tim Connors wrote: I am having trouble on two machines on two completely different networks, both using squid -- for months now, a reasonably

Re: [squid-users] problem with wccp v2 and cisco

2008-02-23 Thread Adrian Chadd
. -Original Message- From: Adrian Chadd [mailto:[EMAIL PROTECTED] Sent: Friday, February 22, 2008 6:35 PM To: Ritter, Nicholas Cc: squid-users@squid-cache.org Subject: Re: [squid-users] problem with wccp v2 and cisco On Fri, Feb 22, 2008, Ritter, Nicholas wrote: Adrian- Thanks

Re: [squid-users] problem with wccp v2 and cisco

2008-02-25 Thread Adrian Chadd
On Mon, Feb 25, 2008, Manoj_Rajkarnikar wrote: I have much simpler setup working on CentOS x86_64 2.6.23 and cisco 7204VXR IOS version 12.2(46a). squid version 2.6 STABLE17: Which IOS release specifically? Could you throw me a show version ? I'll start a wiki page with known good versions of

Re: [squid-users] Re: why so many MISS?

2008-02-25 Thread Adrian Chadd
If you think so then please submit a bugzilla bug. Just be sure to turn on header logging and log the request and reply headers in the access.log . There's not enough in the normal log files to always figure out whats going on. Mime/header logging is very, very helpful when debugging. :)

Re: [squid-users] compatible for both http1.0 and http1.1

2008-02-25 Thread Adrian Chadd
Squid still doesn't support HTTP/1.1 replies to clients. Its not a full HTTP/1.1 proxy. Adrian On Mon, Feb 25, 2008, J. Peng wrote: I need to config squid for reverse-proxy for this destination: 1) if clients are http/1.0 compatible, squid send http/1.0 to original-server and response to

Re: [squid-users] problem with wccp v2 and cisco

2008-02-26 Thread Adrian Chadd
On Mon, Feb 25, 2008, Ritter, Nicholas wrote: Regarding the gre tunnel, does the IP address on the the gre0 interface have to be unique, or can it be the same address, or a dot1q trunked address? I was hoping to use one physical network interface to do the GRE tunnel and the squid daemon.

Re: [squid-users] Re: why so many MISS?

2008-02-26 Thread Adrian Chadd
On Tue, Feb 26, 2008, J. Peng wrote: On Mon, Feb 25, 2008 at 8:19 PM, Adrian Chadd [EMAIL PROTECTED] wrote: If you think so then please submit a bugzilla bug. Just be sure to turn on header logging and log the request and reply headers in the access.log . How to turn on it please

Re: [squid-users] Squid meetup in london

2008-02-27 Thread Adrian Chadd
On Wed, Feb 27, 2008, Mark Nottingham wrote: Is this going to be a semi-regular event? I'd be interested in participating in the future, but need more lead time to arrange travel... .. I'm happy to organise more frequent Squid related meets in Perth (Western Australia) if enough people

Re: [squid-users] Why squid -z

2008-02-27 Thread Adrian Chadd
On Wed, Feb 27, 2008, Matus UHLAR - fantomas wrote: On 27.02.08 10:29, Angela Williams wrote: To me this does not make sense really. I setup a squid server, create the squid cache structure and start squid. I can count the numbers of time I have had to rebuild a fresh cache structure

Re: [squid-users] FTP Thru PROXY CONFIGURATION HELP!!

2008-02-27 Thread Adrian Chadd
Is your ftp client sending requests to squid as HTTP? Squid is a _HTTP_ proxy at the moment. It can gateway _TO_ FTP, but it doesn't speak FTP to the client. Adrian On Wed, Feb 27, 2008, Charbel Maroun wrote: Hello, I've setup squid to solely allow HTTP requests to access the proxy. I

Re: [squid-users] bypass urls - wccp

2008-02-27 Thread Adrian Chadd
There's no way to do that right now - you have to put in IPs in an ACL on the router to bypass. Bypassing isn't actually all that hard, especially if you're running TPROXY. Someone just needs to sit down and code it up. (I'm open to discussions with interested parties if a group of people would

Re: [squid-users] Squid-2, Squid-3, roadmap

2008-02-27 Thread Adrian Chadd
Just so people aren't left wondering why there's been no response - the best way to approach this is being discussed amongst the core developers at the moment. It just co-incides with three of them - Alex, Henrik and Robert- in transit to London. That said, if anyone else has anything to offer on

Re: [squid-users] COSS doesn't work and got Aiee! message.

2008-02-28 Thread Adrian Chadd
Hi, COSS in Squid-3 isn't stable. Please don't use it unless you're interested in forward porting the big changes made in the Squid-2.6 branch. Adrian On Thu, Feb 28, 2008, S.KOBAYASHI wrote: Hi there I'm configuring coss cache file system on my squid. However it doesn't work and I got a

Re: [squid-users] Multi ISP Load Balancing Problem

2008-02-28 Thread Adrian Chadd
.. how hard are you pushing squid under Windows? Adrian On Fri, Feb 29, 2008, Lazuardi Nasution wrote: We are using Squid 2.6STABLE18 for Windows. The performance is so bad. Here is some of weird things on log file, I don't have any idea of them. 2008/02/28 11:17:38| comm_select: select

Re: [squid-users] Authentication Hack

2008-02-29 Thread Adrian Chadd
look at external acl helpers. You may find what you're looking for. Adrian On Fri, Feb 29, 2008, Dave Coventry wrote: I understand that transparent proxy cannot ask the browser for Authentication because the browser is not aware of the existence of the proxy. I can't believe that there

Re: [squid-users] Cache url's with ? question marks

2008-02-29 Thread Adrian Chadd
G'day, Just remove the QUERY ACL and the cache ACL line using QUERY in it. Then turn on header logging (log_mime_hdrs on) and see if the replies to the dynamically generated content is actually giving caching info. Adrian On Fri, Feb 29, 2008, Saul Waizer wrote: -BEGIN PGP SIGNED

Re: [squid-users] Squid-2, Squid-3, roadmap

2008-02-29 Thread Adrian Chadd
(I'm going to try and raise these during the London meeting if I can get in with Skype or something similar.) On Thu, Feb 28, 2008, Robert Collins wrote: Folk will scratch their own itches - thats open source for you. I know I'd really prefer it if features being added are *primarily* added to

Re: [squid-users] Fix for Windows media player and NTLM auth pop ups

2008-03-01 Thread Adrian Chadd
Could you please wrap this up and dump it into the Squid bugzilla? Thanks, Adrian On Thu, Feb 28, 2008, Plant, Dean wrote: I have seen this problem asked about in the archives but was not sure if a fix was ever given. If it has I apologise for the noise. I had been having problems with

Re: [squid-users] FATAL: comm_select_init: epoll_create...

2008-03-02 Thread Adrian Chadd
Upgrade from source. http://www.squid-cache.org/Versions/v3/3.0/ Adrian On Sun, Mar 02, 2008, ale1971 wrote: I am sorry but I am a beginner... How can I upgrade to 3.0.STABLE1? With apt-get install squid3 i get Version 3.0.PRE5 My sources.list: deb

Re: [squid-users] FATAL: comm_select_init: epoll_create...

2008-03-02 Thread Adrian Chadd
On Sun, Mar 02, 2008, ale1971 wrote: My OS is Debian Kernel version 2.4STABLE5. Whats uname -a say? Adrian -- - Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support - - $25/pm entry-level VPSes w/ capped bandwidth charges available in WA -

Re: [squid-users] Part of Page Loading Slowly

2008-03-03 Thread Adrian Chadd
Hm, try disabling pmtu, timestampsand window scaling on your squid server? Adrian On Mon, Mar 03, 2008, Cody Jarrett wrote: I'm having an issue with a new squid install. Squid has always worked fine, but I moved squid to a new server and am having issues. My squid config allows access

Re: [squid-users] Part of Page Loading Slowly

2008-03-03 Thread Adrian Chadd
On Mon, Mar 03, 2008, Matt wrote: Hm, try disabling pmtu, timestampsand window scaling on your squid server? What is PMTU and what does it do? Path MTU discovery. Use google! Adrian -- - Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support - - $25/pm entry-level

Re: [squid-users] Part of Page Loading Slowly

2008-03-03 Thread Adrian Chadd
On Mon, Mar 03, 2008, Matt wrote: Hm, try disabling pmtu, timestampsand window scaling on your squid server? What is PMTU and what does it do? Think I found it. # httpd_accel_no_pmtu_disc off If this is turned off how does it determine MTU? It doesn't - intermediaries

Re: [squid-users] Part of Page Loading Slowly

2008-03-03 Thread Adrian Chadd
On Mon, Mar 03, 2008, Matt wrote: Is there an easy way to just tell linux or squid there is a 1492 MTU on its interfaces? Sure, bu ton ethernet you have to change the MTU on -all- interfaces on that network. Or, you just use host/net routes to say the mss for this route destination is $FOO.

Re: [squid-users] Part of Page Loading Slowly

2008-03-03 Thread Adrian Chadd
On Tue, Mar 04, 2008, Dodd, Tony wrote: -Original Message- From: Matt [mailto:[EMAIL PROTECTED] Is there an easy way to just tell linux or squid there is a 1492 MTU on its interfaces? Matt Add an mtu configuration line to the network interface config file? Don't do that;

Re: [squid-users] Squid-2, Squid-3, roadmap

2008-03-04 Thread Adrian Chadd
Hi everyone, I'm quite disappointed in the lack of feedback from the community over this. Its hard to figure out what people want if noone speaks up, so this is your time to speak up. Adrian On Wed, Feb 27, 2008, Mark Nottingham wrote: Hello Squid folk, I maintain Yahoo!'s internal

Re: [squid-users] Youtube video cache

2008-03-04 Thread Adrian Chadd
On Mon, Mar 03, 2008, Cassiano Martin wrote: Hi all! Did someone had success caching youtube videos? I tried it but it didnt worked for me. I followed all Adrian's steps, but no success at all. The trouble is that its a moving target and I'm having to try and keep things updated. I'm

Re: [squid-users] RELEASE/304 messages in store.log

2008-03-04 Thread Adrian Chadd
Check to see if the object is actually in cache. I bet that the RELEASE line you're seeing is the temporary store entry that was created purely to return the 304 message. Adrian On Tue, Mar 04, 2008, Chris Woodfield wrote: Hi, We recently added the reload-into-ims directive to our squid

Re: [squid-users] Squid on FreeBSD poor performance

2008-03-04 Thread Adrian Chadd
Firstly, drop cache_mem way way down to something like 128 or 256meg. It doesn't need to be that big and that can't allocate! is FreeBSD saying no! to memory allocations after your process grows past a certain size. 200 req/sec shouldn't be making it cry, 800 req/sec should be. I do think you've

Re: [squid-users] Authentication Hack

2008-03-05 Thread Adrian Chadd
Uhm, try: #!/usr/bin/perl -w use strict; # (because you should!) $| = 1; while () { chomp; my ($ip) = $_; # XXX should verify IP is an IP and not something nasty! ... } The question then is how to query a cgi from a helper. I'd try the LWP stuff in Perl to talk

Re: [squid-users] Need help

2008-03-05 Thread Adrian Chadd
There's no (one) piece of software that does this yet. A combination of various bits of free software can do all of this. Adrian On Wed, Mar 05, 2008, piyush joshi wrote: Dear All, Can anyone suggest me any free software to monitor squid which will show all information like

Re: [squid-users] Authentication Hack

2008-03-05 Thread Adrian Chadd
On Wed, Mar 05, 2008, Dave Coventry wrote: The question then is how to query a cgi from a helper. I'd try the LWP stuff in Perl to talk to a cgi-bin ; what you've doen there is try to read a file, not call a cgi-bin. :) My understanding is that Squid checks the helper to carry

Re: [squid-users] port problem (I guess)

2008-03-05 Thread Adrian Chadd
Can you please do a tcpdump of the request from the client andsee if its really asking for a port -1? Thanks, Adrian On Wed, Mar 05, 2008, Mario Salazar Ba?os wrote: I have this line in access.log: TCP_DENIED/400 1667 POST

Re: [squid-users] Squid-2, Squid-3, roadmap

2008-03-05 Thread Adrian Chadd
On Thu, Mar 06, 2008, Amos Jeffries wrote: 3.1 is about making up that failure plus some. Is seamless IPv6, SSL control, and weighted round-robin not enough of a killer app for you? The trouble is Amos, I'm reasonably confident I can get sponsorship for porting enough of those to Squid-2 for

Re: [squid-users] port problem (I guess)

2008-03-05 Thread Adrian Chadd
On Wed, Mar 05, 2008, Mario Salazar Ba?os wrote: The reply for POST http://idse.imss.gob.mx:-1/imss/servlet/gob.imss.idse.afilia.modelos.ModeloAfiliaMovimientos is ALLOWED, because it matched 'all' In my squid.conf I have an acl with all .gob.mx domain and http_access allow to this

Re: [squid-users] centralized storage for squid

2008-03-05 Thread Adrian Chadd
On Thu, Mar 06, 2008, Siu Kin LAM wrote: Dear all At this moment, I have several squid servers for http caching. Many duplicated objects have been found in different servers. I would minimize to data storage by installing a large centralized storage and the squid servers mount to the

Re: [squid-users] Squid-2, Squid-3, roadmap

2008-03-06 Thread Adrian Chadd
On Wed, Mar 05, 2008, Michael Puckett wrote: Mark Nottingham wrote: A killer app for -3 would be multi-core support (and the perf advantages that it would bring), or something else that the re-architecture makes possible that isn't easy in -2. AIUI, though, that isn't the case; i.e., -3

Re: [squid-users] Squid-2, Squid-3, roadmap

2008-03-06 Thread Adrian Chadd
code base? -C On Mar 6, 2008, at 4:17 AM, Adrian Chadd wrote: On Wed, Mar 05, 2008, Michael Puckett wrote: Mark Nottingham wrote: A killer app for -3 would be multi-core support (and the perf advantages that it would bring), or something else that the re-architecture makes possible

Re: [squid-users] Squid-2, Squid-3, roadmap

2008-03-06 Thread Adrian Chadd
On Fri, Mar 07, 2008, Mark Nottingham wrote: Ideally, you'd avoid locking as much as possible; e.g., have a pool of threads for disk access (as now with aufs), a pool for header parsing, a pool for forward requests, and so on. I don't think it's a good idea at all to re-architect squid

Re: [squid-users] Re?G Re: [squid-users] centralized storage for squid

2008-03-06 Thread Adrian Chadd
On Fri, Mar 07, 2008, Siu Kin LAM wrote: Actually, it is my case. The URL-hash is helpful to reduce the duplicated objects. However, once adding/removing squid server, load balancer needs to re-calculate the hash of URL which cause lot of TCP_MISS in squid server at the inital stage. Do

Re: [squid-users] RELEASE/304 messages in store.log

2008-03-06 Thread Adrian Chadd
On Wed, Mar 05, 2008, Chris Woodfield wrote: You are correct, this appears to be what is happening. This breaks my initial assumptions about store.log entries, however - instead of only logging objects either stored or removed from cache, it's logging the disposition of each incoming

<    1   2   3   4   5   6   7   8   9   10   >