On 03/04/2012 09:04, Amos Jeffries wrote:
<SNIP>
acl rrs external rrselector
tcp_outgoing_address 10.0.0.1 rrs
tcp_outgoing_address 10.0.0.2 !rrs
but i seems to get this output every time i do a request.
tcp_outgoing_address is a "fast" group ACL check. It can use previously
cached results or schedule lookups, but cannot wait for them to
complete.
If you get that config right your *=0 settings will prevent the
triggered lookups from caching any results, and the new lookup can't be
waited for so there is never any match possible.
just a sec.
i copied the code damn wrong from squid.conf (early hours of the morning)
it is as you say:
external_acl_type rrselector ttl=0 negative_ttl=0 grace=0
children-startup=1 children-max=1 %URI /somedir/script.sh
but what can be done?
means if it's a fast and so.. i will might need to do some early use
of the acl with some caching?
what mean is like run any use of this specific acl rrs on let say
http_access allow rrs dummy_acl_that_will_be_never_matched
Yes exactly so.
NP: the second all hack can be used here: "!all" is
"dummy_acl_that_will_be_never_matched"
so i was thinking about a RR like for more then just 2 outgoing addresses.
well i think that it will be smarter to use a RR based on routing system
and not squid acls and other stuff.
the reasons for that are pretty oblivious.
the routing system is running on ram + compiled code + smp compatible.
so no need to run any commands and to rely on some twisting and annoying
the higher levels of the ip on the 7\5 layers model from 2\3 to 5\7.
i am learning some bgp and other stuff but never had the chance to
actually implement a RR based routing on linux\openBSD\FreeBSD so if
someone will stand and will put here some nice rules to make it
available to all of those users who wants\needs this thing it will be
very nice of him.
i will try to assemble some things on it.
i remember it was based on marking the packages.
Regards,
Eliezer
<SNIP>
--
Eliezer Croitoru
https://www1.ngtech.co.il
IT consulting for Nonprofit organizations
eliezer <at> ngtech.co.il
