Re: [squid-users] transparent proxy original_dst err

2015-04-28 Thread jaykbvt
Hi Amos, We've got response from Cisco team and they've agreed that destination IP gets changed when request passes through Cisco ISG. They are taking reference for configuration from this doc http://www.cisco.com/c/en/us/td/docs/ios/isg/configuration/guide/15_0s/isg_15_0s_book/isg_l4_redirect.

Re: [squid-users] how to achieve squid to handle 2000 concurrent connections?

2015-04-28 Thread Abdelouahed Haitoute
Hello Amos, > Try adding this to your config file: > workers 2 I’ve added this directive. After a restart I don’t see squid-process listening on the tcp port 3128. Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Prog

Re: [squid-users] Individual delay pools and youtube

2015-04-28 Thread dan
I mentioned last time that we had to x2 all our delay_parameter’s bytes because of a weird bug where squid would apply it at half speed for no reason. It just occurred to me that (obviously) this is why HTTPS downloads are going too fast; because this bug must only affect HTTP traffic. So

Re: [squid-users] sharing a tidbit

2015-04-28 Thread Amos Jeffries
On 29/04/2015 9:18 a.m., Brendan Kearney wrote: > i have 2 squid instances behind HAProxy, balanced using leastconn. each > proxy server has a NFS mount under /etc/squid/acls/ where external acls > are kept. because the NFS mount is common to both instances, i only > need to make an update in one

[squid-users] sharing a tidbit

2015-04-28 Thread Brendan Kearney
i have 2 squid instances behind HAProxy, balanced using leastconn. each proxy server has a NFS mount under /etc/squid/acls/ where external acls are kept. because the NFS mount is common to both instances, i only need to make an update in one place and both proxies will get the update. when i

Re: [squid-users] squid 3.5.3: squid -z => FATAL: memory_cache_shared is on, but no support for atomic operations detected

2015-04-28 Thread Amos Jeffries
On 29/04/2015 2:21 a.m., Paul Martin wrote: > Thank you Amos, > but I got the same problem with squid 3.5.3-20150456-r13812 > > Any other suggestions ? Unless you are cross-building, no. It means your libc does not supply the specific GNU atomics __sync_*() API Squid makes use of. Note that is

Re: [squid-users] Scaling guide?

2015-04-28 Thread Amos Jeffries
On 28/04/2015 6:05 a.m., Balázs Szabados wrote: > Hi Amos, > > I'm running squid on a tp-link tl-wdr4300 router. I've downloaded the MESD > blacklists, and set up deny acl for them, but it seemed to be too much my > router. It took several minutes to start squid, and the whole thing was > unrespon

Re: [squid-users] squid 3.5.3: squid -z => FATAL: memory_cache_shared is on, but no support for atomic operations detected

2015-04-28 Thread Paul Martin
Thank you Amos, but I got the same problem with squid 3.5.3-20150456-r13812 Any other suggestions ? Paul 2015-04-28 16:01 GMT+02:00 Amos Jeffries : > On 29/04/2015 1:25 a.m., Paul Martin wrote: > > Hi Dan, > > > > problem is the same following Michael' idea. > > I tried ./configure > > with C

Re: [squid-users] squid 3.5.3: squid -z => FATAL: memory_cache_shared is on, but no support for atomic operations detected

2015-04-28 Thread Amos Jeffries
On 29/04/2015 1:25 a.m., Paul Martin wrote: > Hi Dan, > > problem is the same following Michael' idea. > I tried ./configure > with CXXFLAGS=-std=c++11 => got many warning > with CXXFLAGS=-std=c++0x => got many warning > with CXXFLAGS=-matomic-model=strict => got many warning (example: > string

Re: [squid-users] squid basic ntlm auth error after upgrade to 3.3.8

2015-04-28 Thread Amos Jeffries
On 28/04/2015 8:46 p.m., Lupick wrote: > I've found probably where is the problem but I don't know how to solve it. > > If I try to connect with a PC outside the domain squid ntlm auth prompt for > username/password. On the password prompt banner I have the proxy ip > address; so the ntlm auth is

Re: [squid-users] squid 3.5.3: squid -z => FATAL: memory_cache_shared is on, but no support for atomic operations detected

2015-04-28 Thread Paul Martin
Hi Dan, problem is the same following Michael' idea. I tried ./configure with CXXFLAGS=-std=c++11 => got many warning with CXXFLAGS=-std=c++0x => got many warning with CXXFLAGS=-matomic-model=strict => got many warning (example: strings.h present but cannot be compiled) Any solution ? Thank y

Re: [squid-users] squid 3.5.3: squid -z => FATAL: memory_cache_shared is on, but no support for atomic operations detected

2015-04-28 Thread dan
Hi Paul See Michael’s reply to my thread about the same problem, not long ago: http://squid-web-proxy-cache.1019090.n4.nabble.com/Re-assertion-failed-src-ipc-AtomicWord-h-88-Enabled-tp4670597p4670793.html On Tue, Apr 28, 2015 at 8:50 PM, Paul Martin wrote: > Hello, > I am testing squid 3.5

[squid-users] squid 3.5.3: squid -z => FATAL: memory_cache_shared is on, but no support for atomic operations detected

2015-04-28 Thread Paul Martin
Hello, I am testing squid 3.5.3 using not the sample squid.conf (this works) but a squid.conf containing: "cache_dir rock ..." "memory_cache_shared on" I got problems: -- problem 1: squid.conf with memory_cache_shared on #./squid -z result: FATAL: memory_cache_shared is on, but no support for at

Re: [squid-users] FW: Trying to setup Squid as a reverse proxy. Works fine, but when a client does an HTTP POST, Squid claims there's a forwarding error.

2015-04-28 Thread Amos Jeffries
On 28/04/2015 4:10 a.m., Brent Newland wrote: > x-post > http://www.reddit.com/r/sysadmin/comments/340f36/trying_to_setup_squid_as_a_ > reverse_proxy_works/ > > At this point, I've trimmed my Squid config down to: > > http_access allow all > cache_peer 127.0.0.1 parent 8084 0 no-digest no-query o

Re: [squid-users] How are others handling missing intermediate certificates?

2015-04-28 Thread Amos Jeffries
On 28/04/2015 9:08 a.m., Tom Harris wrote: > In SSL bump mode, I find I am hitting sites with incomplete certificate > chains fairly often. When accessed directly, browsers will work it out - > I guess by downloading the missing CA certs. > > I know I can load the intermediate CA certs in my sys

Re: [squid-users] Using Cache Digest in Squid Proxy

2015-04-28 Thread Amos Jeffries
On 28/04/2015 4:42 p.m., Hierony Manurung wrote: > Dear Fellow, > I want to implement Cache Digest in my system. > > I have 3 Squid proxy servers right now. they are : > - Child (172.30.20.200/16) # receive request, and forward it either > to Parent1 or Parent2 > - Parent1 (172.31.20.201/

Re: [squid-users] how to achieve squid to handle 2000 concurrent connections?

2015-04-28 Thread Amos Jeffries
On 28/04/2015 6:41 p.m., Abdelouahed Haitoute wrote: > Hello Amos, > > Thank you for your reply. > >> Consider removing the "cache deny all" when you get this into >> production. > > > We’re expecting all requested files to be unique. So is it still wise to > cache these requested files? Are t

Re: [squid-users] How are others handling missing intermediate certificates?

2015-04-28 Thread Josep Borrell
Hi Tom, Did you saw the thread “ssl_bump peek in squid-3.5.3” from James Lay ? Maybe can help Josep De: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] En nombre de Tom Harris Enviado el: lunes, 27 de abril de 2015 23:09 Para: squid-users@lists.squid-cache.org Asunto: [squid-u

Re: [squid-users] squid basic ntlm auth error after upgrade to 3.3.8

2015-04-28 Thread Lupick
I've found probably where is the problem but I don't know how to solve it. If I try to connect with a PC outside the domain squid ntlm auth prompt for username/password. On the password prompt banner I have the proxy ip address; so the ntlm auth is used. I can put my domain\username + password but