>Messaggio originale
>Da: projpr...@virgilio.it
>Data: 24-gen-2011
8.34
>A:
>Ogg: R: Re: [squid-users] R: Re: [squid-users]
Squid - ldap auth against active directory 2008 R2
>
>Thanks a lot for your
reply.
>
>this sounds really good...strange that on
>opensuse i don´t have the
same
It's a small peace and most of the answers are not really suppose to there.
the first thing is that your cache is not just cache it's a store house..
it;'s not bad but you can try to change the ufs to aufs..
can get better performance.
what are the specification of the machine?
core i7 ?
>>>TRIED AUFS, but didn't get better performance, while
researching in the web, I read everywhere that AUFS is better than UFS
in terms of performance,but I don't know why I get bad performance with
this.
Processor is Intel(R) Core(TM) i7 CPU 870 @ 2.93GHz
Motherboard is Intel® Desktop
are you kdding me?
500 clients?
if most of the clients are just doing almost nothing just downloading
one page of 2 MB..
how much is your HD I\O ?? in this case?(in speed MBps) ?
so first.. change the UFS to AUFS you dont need to do anything to the
cache it self cause it the same system ju
OK I have kept your suggestion in my mind, but right now I'm not in a position
to buy two HDD's. May be I can afford to buy 15 days later. For the time being,
my prime problem is the loading of two major sites from where my users download
mp3. Those are
www.music.com.bd and www.djmaza.com
On 24/01/2011, at 8:17 PM, Saiful Alam wrote:
>
> OK I have kept your suggestion in my mind, but right now I'm not in a
> position to buy two HDD's. May be I can afford to buy 15 days later. For the
> time being, my prime problem is the loading of two major sites from where my
> users downloa
On 24/01/11 22:02, Saiful Alam wrote:
TRIED AUFS, but didn't get better performance, while
researching in the web, I read everywhere that AUFS is better than
UFS in terms of performance,but I don't know why I get bad
performance with this. Processor is Intel(R) Core(TM) i7 CPU
870 @ 2.93GHz M
On 24/01/11 23:09, Michael Hendrie wrote:
On 24/01/2011, at 8:17 PM, Saiful Alam wrote:
OK I have kept your suggestion in my mind, but right now I'm not in
a position to buy two HDD's. May be I can afford to buy 15 days
later. For the time being, my prime problem is the loading of two
major s
On 24/01/11 13:28, Henrik Nordström wrote:
fre 2011-01-21 klockan 05:45 +1300 skrev Amos Jeffries:
"empty"? No. If they have no content length indicated they have to be
assumed as being infinite length transfers. HTTP specs require this 411
reply message.
Not quite. Requests without an entity
Hi to all,
i had installed squid as part of the webmin package and configured it as
proxy.
No problem with that, it worked flawlessly.
But yesterday i discovered that the proxy is not working anymore.
When i tried to start the squid with "/etc/init.d/squid start" i get just
"ok" and no other
set the squid settting on debug mode all 1 and then try to start it..
after this open the error log file.../cache log file.
it can be because of the cahce partition /dir or just settings..
On 24/01/2011 15:33, Tom B. wrote:
Hi to all,
i had installed squid as part of the webmin package an
ok i did one change to the ownership of the squid/log files and fired:
tomo@hel-test:~$ sudo squid -z
2011/01/24 15:14:54| Creating Swap Directories
tomo@hel-test:/var/log$ sudo squid -NCd1
2011/01/24 15:23:49| Starting Squid Cache version 2.6.STABLE18 for
i386-debian-linux-gnu...
2011/01/24 15:
SOLVED!!!
so happy to use squid!!!
now my isp is using cache that breaks parts of my sites =\ (and they
didnt want me to fix it for them =\)
On 24/01/2011 16:26, Tom B. wrote:
ok i did one change to the ownership of the squid/log files and fired:
tomo@hel-test:~$ sudo squid -z
2011/01/
Hello!
I am using:
- Slackware Linux Bridge working fine (eth0 = Internet and eth1 = Users)
- Latest 2.6.37 kernel
- Iptables 1.4.9
- Ebtables 2.0.9-2
- Squid 3.1.10
I configured squid.conf with
http_port 3129 tproxy , and it's working:
tcp0 0 0.0.0.0:31290.0.0.0:*
LIST
Hi Amos,
Thank you for your reply.
I am wondering if squid should still be doing this if, as in my
particular case, caching is disabled on the proxy instance.
Based on my observations, it does.
Thank you,
John Craws
On Sat, Jan 22, 2011 at 12:00 AM, Amos Jeffries wrote:
>
>> On Wed, Jan 19,
I am setting up a new exchange server. I have set it up with the CAS
facing the internet but I did not set up an Edge server. I was
considering using SQUID as a proxy for remote access.
When i
setup the Exchange server I used a SSL certificate with the domain
mail.myco.com. Now that I
* Henrik Nordström :
> fre 2011-01-21 klockan 11:31 +0100 skrev Ralf Hildebrandt:
> > > >1294685115.286 0 10.43.120.109 NONE/501 4145 POST
> > > >https://enis.eurotransplant.nl/donor-webservice/dpa?WDSL - HIER_NONE/-
> > > >text/html
> >
> > So, I enabled SSL using --enable-ssl and now I'm
* Max Feil :
> Already did use Wireshark. Here is some more info:
>
> If you look through the traces you'll notice that at some point Squid sends a
> TCP [FIN, ACK] right in the middle of a connection for seemingly no reason.
> (Attempting to close the connection) The server ignores this and sen
Hi Amor,
I have recompiled Squid with the following parameters.
./configure --prefix=/usr/local/squid --enable-async-io=8
--enable-storeio="ufs,aufs,diskd" --enable-removal-policies="lru,heap"
--enable-delay-pools --enable-cache-digests --enable-underscores
--enable-icap-client --enable-follow
>When i
>setup the Exchange server I used a SSL certificate with the domain
>mail.myco.com. Now that I am considering using Squid I was wondering
>how I would set that up since i have already used the domain and if I
>could use a separate SSL Certificate with the same domain name on the
>SQUI
Dear Everyone,
It is now 12AM here (GMT +0600) and very peak time for our ISP. Most of our
users are now online. I took a snapshot from my cachemgr to show you guys.
Squid Object Cache: Version 3.1.10
Start Time:Mon, 24 Jan 2011 13:58:44 GMT
Current Time:Mon, 24 Jan 2011 18:04:49 GMT
Connecti
Hello Folks,
We're currently using squid + DG as a content filtering system and it's
fantastic. The problem lies with a combination of Squid + Safari and the
site facebook.com. Students can currently get around our blocks by
changing the protocol from http to https. The logs show that squid sees
mån 2011-01-24 klockan 18:44 +0100 skrev Ralf Hildebrandt:
> > In the section case Squid and the server did not agree on the SSL
> > protocol.
>
> I wonder what went wrong in that case.
Could be many things unfortunatey. But to be honest it's not worth
investigating in your case. You ended up in
You are saying that I can use the same certificate on two servers by following
the instructions below? Is that legal?
> From: jcas...@activenetwerx.com
> To: squid-users@squid-cache.org
> Date: Mon, 24 Jan 2011 18:06:45 +
> Subject: RE: [squid-use
mån 2011-01-24 klockan 17:46 +1300 skrev Amos Jeffries:
> AFAIK, that proper variant handling was not yet ported to squid-3. Only
> in squid-2 right now.
Correct, but even the basic variant handling is 1->N. The difference is
that the basic mode do not merge equal responses, and each possible
re
sön 2011-01-23 klockan 23:35 -0500 skrev Max Feil:
> If you look through the traces you'll notice that at some point Squid
> sends a TCP [FIN, ACK] right in the middle of a connection for
> seemingly no reason.
>
> From the browser side it seems to be given no notification that the
> connection
mån 2011-01-24 klockan 12:09 -0600 skrev jam...@mail.milton.k12.wi.us:
> the "CONNECT" function and tries to block it but it still passes through.
What does access.log report?
REgards
Henrik
i will try now
On 24/01/2011 22:01, Henrik Nordström wrote:
squid -k debug
tis 2011-01-25 klockan 02:01 +1300 skrev Amos Jeffries:
> > But to be honest we do not really need to check that POST/PUT have a
> > request entity. This is mostly a relic from way back when request
> > entities were handled very special.
> >
>
> Can I expect a patch soon then?
Sure. Revision 11
mån 2011-01-24 klockan 10:44 -0500 skrev John Craws:
> Hi Amos,
>
> Thank you for your reply.
>
> I am wondering if squid should still be doing this if, as in my
> particular case, caching is disabled on the proxy instance.
>
> Based on my observations, it does.
It's been discussed from time to
Amos Jeffries wrote:
On 24/01/11 23:09, Michael Hendrie wrote:
On 24/01/2011, at 8:17 PM, Saiful Alam wrote:
OK I have kept your suggestion in my mind, but right now I'm not in
a position to buy two HDD's. May be I can afford to buy 15 days
later. For the time being, my prime problem is th
mån 2011-01-24 klockan 19:52 + skrev smudly Quickhands:
> You are saying that I can use the same certificate on two servers by
> following the instructions below? Is that legal?
Sure. Perfectly fine, and commonly done in many situations.
- reverse proxy setups, like yours
- clustered server
mån 2011-01-24 klockan 18:39 -0200 skrev Marcus Kool:
> I did not find options to configure bind/named to ignore lookups either
> so I would love to see Squid have the new option.
It does.
a) If Squid is built without IPv6 support
b) If the host where Squid runs do not have IPv6 support at
* Henrik Nordström :
> mån 2011-01-24 klockan 18:44 +0100 skrev Ralf Hildebrandt:
>
> > > In the section case Squid and the server did not agree on the SSL
> > > protocol.
> >
> > I wonder what went wrong in that case.
>
> Could be many things unfortunatey. But to be honest it's not worth
> inve
On Mon, 24 Jan 2011 18:56:48 +0100, Ralf Hildebrandt wrote:
> * Max Feil:
>> Already did use Wireshark. Here is some more info:
>>
>> If you look through the traces you'll notice that at some point Squid
>> sends a TCP [FIN, ACK] right in the middle of a connection for
seemingly
>> no reason. (Att
I have an external acl to running some logic. the Acl modify the squid log with
parameter %ea
the acl returns something like this:
ERR message= log=uuid
or
OK message= log=uuid
uuid is a unique key generate by the acl. When I check the access.log file
appears repeated uuid.
I think
On Tue, 25 Jan 2011 05:08:00 +1100, Saiful Alam
wrote:
> Dear Everyone,
> It is now 12AM here (GMT +0600) and very peak time for our ISP. Most of
> our users are now online. I took a snapshot from my cachemgr to show you
> guys.
>
> Squid Object Cache: Version 3.1.10
>
> Start Time:Mon, 24 Jan
On Mon, 24 Jan 2011 17:31:18 -0500 (CST), Luis Enrique Sanchez Arce
wrote:
> I have an external acl to running some logic. the Acl modify the squid
log
> with parameter %ea
>
> the acl returns something like this:
>
> ERR message= log=uuid
>
> or
>
> OK message= log=uuid
>
> uuid is a
On Mon, 24 Jan 2011 23:28:48 +, Amos Jeffries
wrote:
> On Mon, 24 Jan 2011 17:31:18 -0500 (CST), Luis Enrique Sanchez Arce
> wrote:
>> I have an external acl to running some logic. the Acl modify the squid
> log
>> with parameter %ea
>>
>> the acl returns something like this:
>>
>> ERR mess
On Mon, 24 Jan 2011 20:57:08 +0100, Henrik Nordström wrote:
> mån 2011-01-24 klockan 17:46 +1300 skrev Amos Jeffries:
>
>> AFAIK, that proper variant handling was not yet ported to squid-3. Only
>> in squid-2 right now.
>
> Correct, but even the basic variant handling is 1->N. The difference is
On 1/21/11 7:57 PM, "Amos Jeffries" wrote:
> That config is:
>http_port 80 accel defaultsite=yum-slave-01
>cache_peer 1.1.1.1 parent 80 0 no-query round-robin name=yum1
> forcedomain=yum-slave-01
>cache_peer 2.2.2.2 parent 80 0 no-query round-robin name=yum2
> forcedomain=yum-slave-02
On Mon, 24 Jan 2011 16:14:35 -0800, Tiz wrote:
> On 1/21/11 7:57 PM, "Amos Jeffries" wrote:
>
>> That config is:
>>http_port 80 accel defaultsite=yum-slave-01
>>cache_peer 1.1.1.1 parent 80 0 no-query round-robin name=yum1
>> forcedomain=yum-slave-01
>>cache_peer 2.2.2.2 parent 80 0 no
On Mon, 24 Jan 2011 13:30:05 -0200, Agua Emagrece
wrote:
> Hello!
>
> I am using:
>
> - Slackware Linux Bridge working fine (eth0 = Internet and eth1 = Users)
> - Latest 2.6.37 kernel
> - Iptables 1.4.9
> - Ebtables 2.0.9-2
> - Squid 3.1.10
>
The config you have looks fine. There are just a fe
Hello, Amos, how are you?
I just did a test downgrading my kernel to 2.6.30 (downloaded from
ftp.kernel.org), using the same kernel .config of the 2.6.37 I was
using, and all the same iptables/ebtables/sysctl configuration. TPROXY
just began to work perfectly. If I switch again to 2.6.37, everythi
On Tue, 25 Jan 2011 00:24:43 -0200, Agua Emagrece
wrote:
> Hello, Amos, how are you?
>
> I just did a test downgrading my kernel to 2.6.30 (downloaded from
> ftp.kernel.org), using the same kernel .config of the 2.6.37 I was
> using, and all the same iptables/ebtables/sysctl configuration. TPROXY
Both from ftp.kernel.org and using exactly the same .config file.
I'll try to get the time to test 2.6.32 to 2.6.36.
Thanks!
On Tue, Jan 25, 2011 at 12:36 AM, Amos Jeffries wrote:
> On Tue, 25 Jan 2011 00:24:43 -0200, Agua Emagrece
> wrote:
>> Hello, Amos, how are you?
>>
>> I just did a test d
Hi there,
since I upgraded to 3.1 (both .6 .9 and .10) have such problem.
After I issue "squid3 -k shutdown", the squid will exit but the
process won't stop after it clams "exit normally"
The process will still use 100% cpu and network connections are not
closed due to output of "netstat"
root@
As advised earlier, I have disabled ipv6 support while recompiling squid, but
the problem still exist. Do you want me to disable ipv6 in the OS and try again?
Regards,
Saiful
> Date: Mon, 24 Jan 2011 18:39:42 -0200
> From: marcus.k...@urlfilterdb.com
> T
On 25/01/11 17:19, Luis Enrique Sanchez Arce wrote:
hello,
I put the variable grace = 0 but the problem persist.
This is my program
-
#!/usr/bin/env perl
use UUID::Random;
$| = 1;
while ($in_squid =) {
$uuid = UUID::Random::generate;
Hi all,
Some of our users could not access Internet during business hours.
...
acl wtime time 08:00-12:00
acl wtime time 14:00-18:00
http_access allow blocked_user !wtime
http_access deny all
This works, except some download which were launched for e.g at 13:50 and still
remaining alive and acti
On 24/01/2011, at 11:03 PM, Amos Jeffries wrote:
> On 24/01/11 23:09, Michael Hendrie wrote:
>>
>> On 24/01/2011, at 8:17 PM, Saiful Alam wrote:
>>
>>
>> I had issues with some random sites being "slow" with 3.1.10 and
>> tracked it down to squid trying to get records for the problem
>
51 matches
Mail list logo
