On Wed, May 23, 2007, nima sadeghian wrote:
Dear Friends;
hi, is there any Idea about adding custom JPG to browsed content of
Squid users? We need it in special ceremonies or events for informing
users. I searched internet contents but there was no applicable idea.
Squid-3 is the best bet to
On Wed, May 23, 2007, Tek Bahadur Limbu wrote:
I do get back the (old) squid-cache.org homepage from the proxy server
itself. But I get an error from Squid if I telnet from my PC. Is this normal?
Nope.
I've fixed transparent support for FreeBSD IPFW in Squid-3 only last
week. I could be
On Thu, May 24, 2007, Henrik Nordstrom wrote:
i can't implement this if the proyect is dead =S
Dead is a matter of definition. Free software only dies when the last
copy of the source code is erased.
It probably works for what it's designed to do. But quite likely there
is no active
On Fri, May 25, 2007, Laurikainen, Tuukka wrote:
Hi all,
I've been talking with Xavier off-list about this, and thought it might help
someone to see what was the problem.
He used a Squid 3.0 Pre6, and got Zero Sized Reply's when accessing the
Exchange server through rpcohttp. It seems
On Fri, May 25, 2007, Bhupesh Karankar wrote:
Hello All,
I need configuration for provice access on outlook via squid proxy.
i have configure squid proxy for our company, everything is running on,
but whenever client try to access mail via outlook, then they got problem,
they are not able
On Fri, May 25, 2007, varadha tech wrote:
Hello,
I would like to know if any one has tried out running squid caches
as a cache cluster to leverage load balancing support in WCCPv2.
I am currently using a wccp daemon based on squid-2.5.STABLE10 - to
understand the load balancing
You might want to include mean/median/distribution of read/write IO
sizes on SSL connections; you might find 'normal' SSL accesses
(even with AJAXed stuff?) has different access patterns versus command-line
SSL.
Are there any fingerprint bits in the SSL exchange which would tell
you its at least
On Fri, Jun 01, 2007, Pablo Fernandes Yahoo wrote:
Hi,
I would like to know what could i do to have a good cache working with squid
in a ISP. The main purpose is save bandwidth ar the ISP that i work for.
That is a small ISP having about 5.000 customers and we sell speeds from
100Kbps
On Thu, Jun 07, 2007, David Gameau wrote:
We've recently rolled out Squid 2.6STABLE13, from 2.5STABLE12,
and are having an issue with NTLM authentication.
Several applications have stopped authenticating correctly since
this upgrade. They used to do Basic authentication in the past,
but now
On Fri, Jun 08, 2007, RW wrote:
I'm using Squid 2.6.13 locally on a FreeBSD 6.2 Desktop PC with a ufs
store, and I am seeing slow download speeds on TCP_HIT downloads, which
should be instantaneous on localhost. With cache misses I get normal
fluctuating speeds, but with hits I get a steady
On Fri, Jun 08, 2007, RW wrote:
Adrian Chadd wrote:
On Fri, Jun 08, 2007, RW wrote:
I'm using Squid 2.6.13 locally on a FreeBSD 6.2 Desktop PC with a ufs
store, and I am seeing slow download speeds on TCP_HIT downloads, which
should be instantaneous on localhost. With cache misses I
On Fri, Jun 08, 2007, Pablo Garc?a wrote:
Hi, is there any scenario, where I can find this message in the
cache.log for that amount of requests ? What I'm doing wrong ?
squidaio_queue_request: WARNING - Queue congestion
Running as reverse proxy
2 scsi disks with cache_dir configured at
On Fri, Jun 08, 2007, Chris Robertson wrote:
Squid 2.6 can proxy NTLM authentication. There is no way for Squid to
bypass itself. If you don't want to use Squid for accessing a site, you
are going to have to specify that outside of your Squid configuration
(in a proxy.pac or the
On Fri, Jun 08, 2007, RW wrote:
Adrian Chadd wrote:
On Fri, Jun 08, 2007, RW wrote:
This either a bug or a feature, I can't see 20KB/s being a disk access
bottleneck.
Then post the config sans-comments. Ie:
$ cat squid.conf | grep -v ^# | grep -v ^$
Then we can see
Hi everyone,
A couple of Solaris users have been testing my /dev/poll Solaris work
and both have reported performance increases with no issues.
One of the users' reports is here:
http://squidproxy.wordpress.com/2007/06/09/squid-2-devpoll-update/
In summary: 90% CPU drop. :P
If you're running
On Sat, Jun 09, 2007, RW wrote:
Adrian Chadd wrote:
Just humour me and try aufs using libthr :P
I rebuilt and reconfigured squid for aufs, and then deleted and
reinitialized the cache. As I expected, it made no difference.
Thats fine, now we know.
It's very consistent too - I downloaded
208 14976 105252 29280800 524 0 1644 1074 4 2 70
24
0 2208 14592 105296 29302400 376 0 1627 999 3 2 73
23
It doesn't seems so busy, any ideas ?
Best Regards, Pablo
On 6/8/07, Adrian Chadd [EMAIL PROTECTED] wrote:
On Fri, Jun 08
On Mon, Jun 11, 2007, Jan Groenewald wrote:
snip
2007/06/10 22:07:37| aclCheck: checking 'http_access deny CONNECT
!SSL_ports'
2007/06/10 22:07:37| aclMatchAclList: checking CONNECT
2007/06/10 22:07:37| aclMatchAcl: checking 'acl CONNECT method CONNECT'
2007/06/10 22:07:37| aclMatchAclList:
On Fri, Jun 15, 2007, Snow Wolf wrote:
Is there any way to get Squid's cache hit rate without using snmp and mrtg?
Thanks.
Sure, use cachemgr mgr:info and then use grep/sed to extract the relevant
info.
Adrian
On Sun, Jun 17, 2007, Michel Santos wrote:
squid needs about two hours to build a 8GB coss_dir on a clean partition
while it is building the cache_dir the service is practically unusable slow
Nope, not meant to be that bad.
Whats squid -v say, and whats your /etc/libthr.conf say?
Adrian
On Sun, Jun 17, 2007, Andreas Pettersson wrote:
Alexandre Correa wrote:
Hello squid-users !!!
i have one question about caching same file on diferent url !! how
squid act in this situation:
www.xxx.xxx.com/file.exe
www.yyy.yyy.com/file.exe
same file...
squid cache one file ?
On Mon, Jun 18, 2007, [EMAIL PROTECTED] wrote:
Should be possible on (but tricky, and maybe slow) to use a hash/MD5 or
similar on the file binary instead of the URI. Good backup programs do it
so accel configs should be easy.
Problem (maybe the blocker) would be getting it out of the
On Mon, Jun 18, 2007, Michel Santos wrote:
yes I tried it. Even if the aufs threads are running on all CPUs and it
gives a better performance in comparism to ufs, still, diskd runs faster,
specially under load and lots of connections. Response time of squid with
diskd under load is much
On Mon, Jun 18, 2007, Matus UHLAR - fantomas wrote:
See http://devel.squid-cache.org/stale_projects.html, the
Duplicate Storage Avoidance and Duplicate Transfer Detection parts.
It relies on extracting MD5s for the content out. Thats an interesting
idea, but you can't expect remote sites to
On Tue, Jun 19, 2007, Vadim Pushkin wrote:
Many thanks Jakob and Kevin;
I am only looking to inspect each SSL connection for the purposes of
determining if the traffic should be allowed, i.e. non-malicious (not chat,
file-transfer, etc).
Can anyone recommend such a product? Also, I
G'day everyone,
I'd like to post some current internet caching stats for corporate
and ISP forward caching.
I'm interested in traffic throughput, request rate, byte and
hitrate statistics.
(I'm basically looking to build a page or two about this on the
Squid website to counter the current view
On Thu, Jun 21, 2007, andrew thornton wrote:
Hello,
I would like to keep my cache in memory and keep it off of my disks
within my http-accelerator setup. I currently have 2GB of ram. Is
there any way to do this without using ramdisks? I was told to remove
swap from my squid server and to
On Fri, Jun 22, 2007, Andreas Pettersson wrote:
This might be interesting to anyone using squid to do malware filtering.
It needs some kind of integration work before squid can utilize it.
http://code.google.com/apis/safebrowsing/
The Malware Block List is another way to filter web traffic.
On Sat, Jun 23, 2007, Andreas Pettersson wrote:
I would :)
However Phishtank publishes a full xml file which with some tweaking
could be converted into a plain text list of domains or urls for direct
use with squid.
I, I just haven't done it. :)
I'd offer my time toward this.
-Original Message-
From: Adrian Chadd [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 26, 2007 3:03 AM
To: squid-users@squid-cache.org
Subject: [squid-users] IM blocking in squid?
G'day again everyone,
People keep
On Tue, Jun 26, 2007, Andreas Pettersson wrote:
Adrian Chadd wrote:
People keep asking about how to block IM in Squid; would
anyone like to kick up some ACLs that they use to block IM
ICQ? MSN? Windows Messenger? AOL? Skype? Jabber? IRC? Sametime?
Or http://webmessenger.msn.com/ or http
On Wed, Jun 27, 2007, Matthew Smith wrote:
Hello!
Firstly, thanks for the help on the debug_options and delay pools.
I have a site that is using NTLM authentication (using samba's ntlm
helper). They use a mix of upper and lower case for their usernames in
Active Directory, eg:
On Thu, Jun 28, 2007, D E Radel wrote:
http://www.papercut.biz/kb/Main/ConfiguringSquidProxyToAuthenticateWithActiveDirectory
Also http://wiki.squid-cache.org/ConfigExamples/ has an example for AD
authentication;
there's an AD group helper too which lets you pull out group membership and use
On Fri, Jun 29, 2007, Jegadeesh wrote:
#wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_CANT_ACCESS_DOMAIN_INFO (0xc0da)
Could not check secret
Thats your first port of call. Ignore Squid completely until you
get wbinfo -t returning success.
I'd check
On Thu, Jul 05, 2007, Ming-Ching Tiew wrote:
OK I have fixed the problem. I tweaked a few kernel CONFIGs and
recompile a new kernel, it's now working. So it's not uClibc problem at
all,
but I am unsure which exactly the kernel CONFIGs which fixes the problem.
I will perhaps isolate it later
On Thu, Jul 05, 2007, Alexandre Correa wrote:
i have 1 dedicated server for squid serving about 700 users simultaneous and
80 req/s !!
Smallfry. :)
server is dual opteron dual core and 4gb of ram..
this cache_mem is fine ?
cache_mem 256 MB
or is best decrease ou increase this ?
On Thu, Jul 05, 2007, Adam Parsons wrote:
Hi,
My organisation is about to send out almost 400 SquidNT boxes to different
sites and would like to know the best way of being able to keep a track of
their health (i.e. cache percentages, hit ratios, etc.) What would be the
best way to
Firstly, upgrade from Squid-2.5 to Squid-2.6. If you're on Linux, FreeBSD
(or soon, Solaris) then you'll definitely notice the CPU drop.
I'd check that your DNS is functioning, that your MTU is consistent
everywhere, you're not filtering ICMP. Saying the only thing that
changed is the path it
On Thu, Jul 05, 2007, Anton Melser wrote:
Hi,
I had a look but couldn't see any way to split up a log for different
sites being reverse proxied. Is this possible?
Squid-2.6 introduced the ability to use ACLs and multiple access log
lines to determine which log gets which requests.
Adrian
test 2.
testing, please ignore.
I've knocked up a phishtank plugin for the later versions of Squid
(2.6.STABLE13; latest Squid-3 snapshot) which integrates lookups to
the phishtank database (from www.phishtank.com.)
I plan on extending it to include the Google Safebrowsing database
and whatever other URL-based filtering schemes
On Fri, Jul 06, 2007, Manoj_Rajkarnikar wrote:
On Fri, 6 Jul 2007, Henrik Nordstrom wrote:
tor 2007-07-05 klockan 13:19 +0545 skrev Manoj_Rajkarnikar:
On Tue, 1 Jan 2002, [EMAIL PROTECTED] wrote:
Please do something about it. found worm in a message...
Now the filters have been
Look at urlblacklist.com; and don't be afraid to pay their monthly subscription
amount. It feeds right into dansguardian.
Adrian
On Sun, Jul 08, 2007, Dave wrote:
Hello,
I'm trying to implement porn filtering. I'm trying a variety of setups
to see which will give me the best results.
On Mon, Jul 09, 2007, Angela Williams wrote:
Hi All Squiders!
I have run many squid boxes over the years but never really worried about any
stats out of them other than cache manager and sarg.
We have just put a new box in to frontend an F5 Link controller which
frontends a few dsl lines.
On Tue, Jul 10, 2007, Henrik Nordstrom wrote:
m??n 2007-07-09 klockan 19:30 +0800 skrev Adrian Chadd:
Hang tight, I'm just putting the finishing touches on a basic MRTG graphing
template which works with Squid-2.6 and Squid-3. I'll put it online once
I figure out why I'm not seeing LRU
On Thu, Jul 12, 2007, John Yatsko, Jr. wrote:
I was running Squid 2.4 for about 5 years. This morning I installed version
2.6 and am now getting this error in my cache.log:
2007/07/12 12:14:06| commSetTcpNoDelay: FD 114: (22) Invalid argument
2007/07/12 12:14:06| commSetTcpNoDelay: FD 141:
On Thu, Jul 12, 2007, Rejaine Monteiro wrote:
Hi guys,
I hope one of you will be able to help!
We are using squid-2.5.STABLE12-18.6 (non-transparent proxy)
Update to squid-2.6stable13 (or stable14 if its out yet) and re-try.
Adrian
On Thu, Jul 12, 2007, Joerg Schuetter wrote:
On Thu, 12 Jul 2007 09:35:06 +0200
Paolo Biancolli [EMAIL PROTECTED] wrote:
Hi all,
I am unable to authenticate to my squid proxies from Java enabled web
sites using the Java Platform standard edition 6 (v1.6.0, which is the
latest
at it.
Adrian
On Fri, Jul 13, 2007, Rejaine Monteiro wrote:
Adrian Chadd escreveu:
Update to squid-2.6stable13 (or stable14 if its out yet) and re-try.
Same problem with squid-2.6stable13 (lasted available version)
*
In a Windows/IE, the windows media box just show connecting
On Fri, Jul 13, 2007, John Yatsko, Jr. wrote:
It didn't appear that it was adding any additional overhead to the box or
lag to users of the proxy, but the cache.log was growing at an alarming
rate.
Doing what I said to the function and recompiling will fix that for you.
It'll run faster as
On Fri, Jul 13, 2007, John Yatsko, Jr. wrote:
Red Hat Linux release 6.0 (Hedwig)
Kernel 2.2.5-15 on an i586
I don't think anyone does Squid development and regression testing on
Linux 2.2.x. Just find the commSetTcpNoDelay() function and do this:
#ifdef TCP_NODELAY
static void
On Fri, Jul 13, 2007, Rejaine Monteiro wrote:
Henrik Nordstrom escreveu:
Seems to work fine for me..
See a POST and a GET request for
http://wmscnnlive.stream.aol.com/live/cnn/cnn_radio logged when stopping
the stream, with the GET running for the duration of the playback.
nothing
Blocking content based on mime types (flv, mp3), URLs and such, along
with random bits like blocking IM through the proxy seems to be a popular
question.
I'm happy to personally donate a Squid t-shirt or mug for anyone who
volunteers and writes some Wiki articles which explain how to do the
On Fri, Jul 13, 2007, Henrik Nordstrom wrote:
fre 2007-07-13 klockan 22:36 +0800 skrev Adrian Chadd:
On Fri, Jul 13, 2007, Rejaine Monteiro wrote:
Henrik Nordstrom escreveu:
Seems to work fine for me..
See a POST and a GET request for
http://wmscnnlive.stream.aol.com/live/cnn
I'd like to extend a big thankyou to those few of you who have donated
to the Squid project thus far.
Donations will go towards the cost of hosting the Squid project email
and website; any left-over money will go towards funding Squid development,
documentation and user resources.
I'd just like
On Sat, Jul 14, 2007, ying lcs wrote:
Hi,
i am trying to test squidclient with this url (has ''):
http://www.google.com/search?hl=enq=testbtnG=Google+Search
I would like to know if I need to put for my url?
I get different results between this:
./squidclient -r
On Mon, Jul 16, 2007, Tek Bahadur Limbu wrote:
[snip stuff about kqueue and EBADF]
Adrian may have answers regarding this messages?
Yup!
[EBADF]The specified descriptor is invalid.
IIRC, its because sometimes (under heavy loads) you'll end up hitting a minor
race condition
On Tue, Jul 17, 2007, Ming-Ching Tiew wrote:
Anyone has experience with level 4 switch ? What is the working
principle of a level 4 in respect to redirecting web traffic to a cache
engine ? Does it do dst IP address rewrite ( iptables DNAT ) or
does it do dst MAC address rewrite (
On Tue, Jul 17, 2007, Ming-Ching Tiew wrote:
I got the word level 4 switch from someone who knows nothing else,
so I have to make guesses too. But I would imagine that it is doing L2
rewrite.
Care to elaborate how the L2 rewrite in Cisco TCAM works ?
I'm not a Cisco engineer. :) They
On Tue, Jul 17, 2007, Paul clayton wrote:
Thanx guys. I have noted, that this error does appear more often as the
server gets busy. It is at this time, that our problems start to appear.
Well, my comment still stands; I'm happy to do the work to fix it but
it won't be done anytime soon unless
On Tue, Jul 17, 2007, Arnaud Loonstra wrote:
Hi,
I've recently started testing a setup using WCCP v2 on Cisco routers
with squid. It's working but not very reliable. I'm experiencing
constant repeating service lost issue's:
*Jul 17 14:18:49.926: %WCCP-1-SERVICELOST: Service web-cache lost
On Thu, Jul 19, 2007, Arnaud Loonstra wrote:
What do you mean drifting. I've just check the clock on the router and
the cache:
cache: Thu Jul 19 10:48:29 CEST 2007
router: *10:39:55.771 CET Thu Jul 19 2007
So they are 10 minutes apart.
I'll sync the cache clock using ntp which I should
On Thu, Jul 19, 2007, Arnaud Loonstra wrote:
It seems it's the other way around. A tcpdump reveals that the Cisco is
not responding:
192.168.0.6 is the router.
hm!
I don't know where the 192.168.0.1 comes from. That's a Cisco switch
doing nothing with WCCP. 172.16.255.6 is the OSPF ID
On Thu, Jul 19, 2007, Sathyan, Arjonan wrote:
Hi all,
Please suggest if a Squid Proxy can act as a SOCKS Proxy?
If yes, kindly let me know how to configure SOCKS Proxy on a Squid Server?
Sure, install a SOCKS proxy on the same box as your Squid proxy.
(Squid's a HTTP server, not a SOCKS
On Fri, Jul 20, 2007, ?? wrote:
Yes, Squid request status in access log is TCP_HIT:NONE.
Squid and apache run on same server, and apache ab command runs on
another server.
Well, that means Squid is hitting apache on the same server for
every request from ab?
Adrian
On Fri, Jul 20, 2007, cwx wrote:
TCP_HIT means a valid copy of the requested object was in the cache.
Apache received less than 30 request.
It should be a TCP_MEM_HIT, shouldn't it?
Part of what makes Squid good in front of apache is being able
to cache the static stuff without tying up apache
On Fri, Jul 20, 2007, Arnaud Loonstra wrote:
I've read on the mailinglist archive of squid not supporting multiple
routers using the wccp (v2) protocol
Squid-2.6 and Squid-3.0 should support multiple routers via WCCPv2.
Adrian
On Mon, Jul 23, 2007, [EMAIL PROTECTED] wrote:
Squid 2.6.stable14
I've got a small dillema. I've written an external Perl helper to return
OK or ERR dependant upon some regular expressions and/or domains
stored in an external Postgresql database.
Pretty simple.
What I've noticed is
On Tue, Jul 24, 2007, Dalibor Dukic wrote:
On Tue, 2007-07-24 at 15:27 +0200, Arnaud Loonstra wrote:
Hi,
I can't seem to find any documentation about setting up squid with
WCCPv2 and multiple cisco routers. So this might be good for the
archives if someone helps me out here.
What is
On Wed, Jul 25, 2007, Arnaud Loonstra wrote:
On Tue, 2007-07-24 at 22:25 +0200, Dalibor Dukic wrote:
On Tue, 2007-07-24 at 15:27 +0200, Arnaud Loonstra wrote:
Hi,
I can't seem to find any documentation about setting up squid with
WCCPv2 and multiple cisco routers. So this might be
On Fri, Jul 27, 2007, rihad wrote:
Is Squid 2.6 too going to eat up to maximum_object_size of memory while
retrieving a new object, before it decides whether to write it to disk?
I'm considering to increase this value, so it never hurts to ask. Thank you.
Not if it can't cache it.
Adrian
On Fri, Jul 27, 2007, rihad wrote:
And if it _can_ cache it, will Squid 2.6 keep it wholly in memory before
finishing the download?
Only until you've filled the cache_mem amount of object memory - then it'll
start deleting objects from the cache. It can do this for objects which
haven't yet
On Fri, Jul 27, 2007, rihad wrote:
Ok, now I understand that, if you have cache_mem of, say, 300 mb, it's
never a good idea to make maximum_object_size = 64 MB as an average of
10-20 concurrent downloads will surely fill the memory. I hoped Squid
would only keep in memory the buffer (up to
Have you looked at it through tcpdump?
Those sorts of delays could be simple stuff like forward/reverse
DNS..
Adrian
On Fri, Jul 27, 2007, Tory M Blue wrote:
I'm not sure what is going on and have done so much tracing that I've
just probably confused things more then anything else.
i'm
On Fri, Jul 27, 2007, Tory M Blue wrote:
Adiran, I have used straight IP instead of the VIP name with no change
in symptoms, so it's not DNS.
but could something -else- doing the DNS lookup..
I've done tcpdumps and really have a hard time seeing anything that is
questionable.. I am still
On Tue, Jul 31, 2007, Tek Bahadur Limbu wrote:
How do I detect and stop them from operating child proxies.
I would really appreciate your help on this matter.
This issue has been bugging me for some time now!
I think you need to begin by describing the why ..
Adrian
On Tue, Jul 31, 2007, Leonardo Rodrigues Magalh??es wrote:
What i have noticed, on the last 3-4 years, is that the BYTE hit
ratio is getting lower each year. And that's somehow expectable. Several
sites, including those who have stale content, are starting to use site
generator systems,
On Tue, Jul 31, 2007, Brian Kirk wrote:
Red Hat ES release 4 update 4
Squid 2.6 Stable 9
Samba 3.0.23
We from time to time have problems with the ntlm_auth where every
process in the NTLM User Authenticator Stats on the cachemgr.cgi seems
to be hung. We have tried from 30 processes up to
On Wed, Aug 01, 2007, Arnaud Loonstra wrote:
I see, But is the configuration I did correct or not? since I haven't
had the chance of patching squid it'll be good to know if I did it the
right way.
Meh, all of this is making me want to break apart the WCCPv2 code from
Squid and have it run as
On Wed, Aug 01, 2007, Matthew Von Maszewski wrote:
I have a test bed using siege. The test runs 23400 hits against 19
static http items. Squid, delivering all from memory, runs roughly
75% of the throughput of raw Apache or Apache proxy. The siege
client box has plenty of ports so
On Thu, Aug 02, 2007, Bgs wrote:
Is there a way to reset/clear the authentication/IP table without
restarting squid? We use this feature but from time to time we would
need to clear the table (or just a single user) from it, but the proxy
is heavily used and do not want to create those
On Thu, Aug 02, 2007, Mark Vickers wrote:
I have a dozen quad proc boxes for a carp squid farm.
Looks like I have to put 4 processes for squid configured as carp and 4
process for squid configured as caches servers on each server, 8
processes on each.
The config I'm thinking is an F5 load
On Mon, Aug 06, 2007, Indunil Jayasooriya wrote:
Hi,
I am runing squid with nsca_ath feature.
I have configured client browser to use squid proxy server with ip
address and port 3128. All work fine.
Then, I configured SQUID in TRANSPARENT mode. Then, I lost the user
name and password
On Mon, Aug 06, 2007, Ming-Ching Tiew wrote:
Anyone has experience peculiar things with Squid and PPPoE ?
I have a setup where Squid is doing transparent tproxy for PPPoE
and non-PPPoE users, however the experience is that when
squid is serving the cached files for PPPoE users, it's slower
Assuming you're running with diskd/aufs rather than ufs then I think
your numbers are alright. The default caching rules are quite permissive
and result in less caching than what might be possible, but more
correct caching.
You've paid for a support contract via Redhat - I suggest talking to
them
On Mon, Aug 06, 2007, Bgs wrote:
Hi,
Thanks for the tip but reconfigure does not help. I will try to get some
time and make a patch for it some day. Until then, service outages... :(
* Would anyone like to donate to the Squid project to see this get done?
* Assuming a donation or two
On Mon, Aug 06, 2007, Neil A. Hillard wrote:
I can't see how it's a shortcoming of the protocol. If the browser
isn't aware that there is a proxy then why would it (why should it) try
to authenticate to one? Tell it that a proxy exists and it's more than
happy to authenticate.
On Mon, Aug 06, 2007, Neil A. Hillard wrote:
The browser knows it is talking to the origin server so will support
basic auth. If you stick an intercepting proxy in the way and then use
basic auth then how do you authenticate to the origin server?
You have to have two headers and then tell
On Mon, Aug 06, 2007, Frank Ruiz wrote:
Greetings,
I am looking for some recommendations on ideal timeout values for a
squid cache serving up many images per second (1000+).
Also, I would like client connections to automatically close after 10
seconds. Anyone happen to know where this is
On Tue, Aug 07, 2007, Frank R wrote:
Any recommendations would be much appreciated:
Problem 40k connections in time wait, and running out of file descriptors.
(8192)
Content many small images.
Connections per second, 3-5k, short lived.
Have you dropped the MSL time in your kernel config?
The place to start is grabbing traces from a running system to find out
where the time is being spent.
You'll probably want to start with vmstat and see whether its chewing 100%
of one CPU, or whether its blocked waiting for disk IO, or a combination
of the two.
Its probably CPU - I'd then run
G'day,
My next question!
What are people using as refresh_patterns for normal ISP forward
caching? I'd like to put up a wiki page with a list of useful
refresh patterns, especially if you've managed to enable caching
of content such as streaming http media/flv, google earth, etc.
Basically,
On Thu, Aug 09, 2007, Amos Jeffries wrote:
Gr8 ..:D.After doing this the cpu utilization has come down to around
3% to 4%. even my Number of clients accessing cache:reached 1567
in no time and was still incerasing but Like Tek Bahadur said i ran
out of file descriptors :(. So i ll
On Thu, Aug 09, 2007, Chad Harrelson wrote:
Hello list,
I am running squid-2.6-STABLE6 with WCCP version 1. My problem is
with access logging. If I configure my browser to manually point to
my squid box, I see log data in /var/log/squid/access.log. However,
if I do not manually configure
On Thu, Aug 09, 2007, Henrik Nordstrom wrote:
On m??n, 2007-08-06 at 18:26 +0800, Adrian Chadd wrote:
Look at how a browser talks directly to an origin server when presenting
(HTTP Basic) authentication credentials, and what a proxy ends up doing
with those.
What about it?
It doesn't
On Thu, Aug 09, 2007, Michel Santos wrote:
the bug, I am curious what others have been using or prefer as their
alternative to diskd and why?
diskd for sure is the fastest specially on SMP machines but there are not
so much people sharing my opinion ...
Just supply real-world numbers
On Fri, Aug 10, 2007, Neil A. Hillard wrote:
It doesn't work reliably? :)
Doesn't it? You'll have to cite specific examples. I can't think of
one problem I've had that's related to basic auth not working as it
should (as long as you don't count configuration faux pas!)
Transparent
http_port 3128 transparent
That should do it.
Adrian
On Fri, Aug 10, 2007, Indunil Jayasooriya wrote:
Hi,
I am running squid as a TRANSEPARENT PROXY WITH SQUID 2.5 on CENTOS 4.5.
Pls see below for squid.con file.
http_port 3128
cache_mem 64 MB
cache_dir ufs /var/spool/squid
On Fri, Aug 10, 2007, Neil A. Hillard wrote:
Hi,
Adrian Chadd wrote:
On Fri, Aug 10, 2007, Neil A. Hillard wrote:
It doesn't work reliably? :)
Doesn't it? You'll have to cite specific examples. I can't think of
one problem I've had that's related to basic auth not working
501 - 600 of 1296 matches
Mail list logo
