On Mon, 8 Nov 2004, Tobias Reckhard wrote:
Sure. This is one of a pair of Squids in a DMZ that is queried by three internal Squids. The machines also have a TrendMicro VirusWall installed and have its HTTP scanner configured as a parent type cache_peer.
This configuration is known to cause the problems you describe unless Squid is configured with
server_persisten_connections off
This due to a bug in VirusWall where it enters tunnel mode on certain requests without properly notifying child caches, causing it to send all future requests received on the same TCP connection to the same server.
Regards Henrik
