Re: [squid-users] Removing cache credentials

2014-11-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/11/2014 5:26 p.m., Victor Sudakov wrote: > Amos Jeffries wrote: >>> >>> If we speak about Kerberos authentication. On the very first >>> request, the browser receives a "407 Proxy Authentication >>> Required" reply and learns that it is expecte

Re: [squid-users] Removing cache credentials

2014-11-16 Thread Victor Sudakov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Amos Jeffries wrote: > > > > If we speak about Kerberos authentication. On the very first > > request, the browser receives a "407 Proxy Authentication Required" > > reply and learns that it is expected to provide credentials. For a > > certain amount

Re: [squid-users] Centralized Squid - design and implementation

2014-11-16 Thread Marcus Kool
Let me start to say that I am biased since I am the author of ufdbGuard. If you have worked with squidGuard than you will find that ufdbGuard is an excellent replacement since ufdbGuard was forked in 2005 from squidGuard and has since gained many features. And I suggest to apply for a trial lice

Re: [squid-users] Squid 3.4.9 on OpenBSD 5.6 on Sparc64

2014-11-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/11/2014 12:03 p.m., Monah Baki wrote: > Hi all, > > > ./configure '--prefix=/usr/local/squid' '--enable-pf-transparent' > '--enable-follow-x-forwarded-for' '--with-large-files' '--enable-ssl' > '--disable-ipv6' '--enable-esi' '--enable-kill-pa

[squid-users] Squid 3.4.9 on OpenBSD 5.6 on Sparc64

2014-11-16 Thread Monah Baki
Hi all, ./configure '--prefix=/usr/local/squid' '--enable-pf-transparent' '--enable-follow-x-forwarded-for' '--with-large-files' '--enable-ssl' '--disable-ipv6' '--enable-esi' '--enable-kill-parent-hack' '--enable-snmp' '--with-pthreads' '--with-filedescriptors=65535' $ make Making all in co

Re: [squid-users] Centralized Squid - design and implementation

2014-11-16 Thread brendan kearney
Https is no issue. The ssl session will persist to the same proxy for the duration of the session. I have no problems at all. On Nov 16, 2014 3:58 PM, "alberto" wrote: > Ok, thank you very much. I think this is a good solution, maybe with an > active/passive HAProxy with keepalived. > Are you a

Re: [squid-users] Centralized Squid - design and implementation

2014-11-16 Thread alberto
Ok, thank you very much. I think this is a good solution, maybe with an active/passive HAProxy with keepalived. Are you able to serve also https without any problem through HAProxy or only http request? regards, a. On Sun, Nov 16, 2014 at 8:00 PM, brendan kearney wrote: > I use kerberos auth

Re: [squid-users] ssl callout helper

2014-11-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 16/11/2014 2:12 p.m., James Harper wrote: > I've written a little helper to do ssl callouts to determine if > the server is running ssl at all (eg not tunnelling over ssl), and > also to be able to do limited ACL on CN/SAN. The main limitation is >

Re: [squid-users] squid cache Large rock with aufs optimization for bandwidth saving

2014-11-16 Thread Amos Jeffries
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 17/11/2014 1:26 p.m., Ahmed Allzaeem wrote: > Hi Amos , thanks for reply. > > But I think using large rock will let the memory cache size be >32 > ??? am I correct ? > Maybe no, maybe yes. Shared memory is a separate feature to large rock. They

Re: [squid-users] Centralized Squid - design and implementation

2014-11-16 Thread brendan kearney
I use kerberos auth and do not have issues. You have to pay attention to the details with kerberos auth (dns name and principals need to match, specific options set in squid configs), but it is working very well for me On Nov 16, 2014 12:32 PM, "alberto" wrote: > Hi Brendan > > On Sun, Nov 16,

Re: [squid-users] Centralized Squid - design and implementation

2014-11-16 Thread alberto
Hi Brendan On Sun, Nov 16, 2014 at 5:51 PM, Brendan Kearney wrote: > i use HAProxy to load balance based on the least number of connections > Do you use kerberos/AD authentication? Any issues with HAPROXY in front of the squid nodes? Thx, a. ___ squi

[squid-users] Fwd: Centralized Squid - design and implementation

2014-11-16 Thread Kinkie
Forwarding, as it may be useful to others. -- Forwarded message -- From: Kinkie Date: Sun, Nov 16, 2014 at 6:27 PM Subject: Re: [squid-users] Centralized Squid - design and implementation To: alberto On Sun, Nov 16, 2014 at 5:53 PM, alberto wrote: > Hi Kinkie > > On Sun, Nov

Re: [squid-users] Centralized Squid - design and implementation

2014-11-16 Thread Brendan Kearney
On Sun, 2014-11-16 at 17:22 +0100, Kinkie wrote: > On Sun, Nov 16, 2014 at 4:54 PM, alberto wrote: > > Hello everyone, > > first of all thanks to the community of squid for such a great job. > > Hello Alberto, > > [...] > > > I have some questions that I would like to share with you: > > > > 1.

Re: [squid-users] Centralized Squid - design and implementation

2014-11-16 Thread Kinkie
On Sun, Nov 16, 2014 at 4:54 PM, alberto wrote: > Hello everyone, > first of all thanks to the community of squid for such a great job. Hello Alberto, [...] > I have some questions that I would like to share with you: > > 1. I would like to leave the solution we are using now (wpad balancing).

[squid-users] Centralized Squid - design and implementation

2014-11-16 Thread alberto
Hello everyone, first of all thanks to the community of squid for such a great job. I'm writing because I have to revise the current implementation of squid in my company so I would like to share with you some design ideas and possibly have some suggestions from you. The group I work for has six

Re: [squid-users] squid cache Large rock with aufs optimization for bandwidth saving

2014-11-16 Thread Ahmed Allzaeem
Hi Amos , thanks for reply. But I think using large rock will let the memory cache size be >32 ??? am I correct ? I mean although im not using rock store , but I was thinking will have memory size >32Kb So , I keep the aufs size which I assume will help me and will let me break the 32kB limi