Re: [squid-users] 3.5.4 Can't access Google or Yahoo SSL pages

2015-05-04 Thread Amos Jeffries
On 5/05/2015 4:35 p.m., Jason Haar wrote: > On 04/05/15 20:53, Chris Palmer wrote: >> There has been a change in behaviour in 3.5.4. It now really does >> prefer to contact a site using an ipv6 address rather than a v4. The >> network stack here doesn't permit v6 so the traffic to sites such as >>

Re: [squid-users] SSL MITM with unencrypted parent proxy

2015-05-04 Thread Amos Jeffries
On 5/05/2015 4:08 p.m., Chris Bennett wrote: > Hi there, > > I'm experimenting with WAN acceleration & block caching (wanproxy.org > for those interested). This works great for HTTP: > > client <-> squid1 <-> wanproxy <-> VPN <-> wanproxy <-> squid2 <-> inet > > With SSL, I suspect the data bet

Re: [squid-users] Number of clients accessing cache: 0

2015-05-04 Thread Stakres
Hi Amos, Well, as usual, you found the reason "client_db" was off, now it shows the numbers... Thanks Amos. Bye Fred -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Number-of-clients-accessing-cache-0-tp4671102p4671117.html Sent from the Squid - Users maili

Re: [squid-users] 3.5.4 Can't access Google or Yahoo SSL pages

2015-05-04 Thread Jason Haar
On 04/05/15 20:53, Chris Palmer wrote: > There has been a change in behaviour in 3.5.4. It now really does > prefer to contact a site using an ipv6 address rather than a v4. The > network stack here doesn't permit v6 so the traffic to sites such as > google was failing. Setting the following restor

[squid-users] SSL MITM with unencrypted parent proxy

2015-05-04 Thread Chris Bennett
Hi there, I'm experimenting with WAN acceleration & block caching (wanproxy.org for those interested). This works great for HTTP: client <-> squid1 <-> wanproxy <-> VPN <-> wanproxy <-> squid2 <-> inet With SSL, I suspect the data between squid and squid2 (in a child/parent configuration) will

Re: [squid-users] Regex difficulties

2015-05-04 Thread Amos Jeffries
On 5/05/2015 9:25 a.m., Balázs Szabados wrote: > Hi Amos, > > I tried troubleshooting you've mentioned. I just enabled one file > containing regexes. > I've measured it: > root@OpenWrt:~# wc -c /etc/squid/blacklists/regex_allow > 1636 /etc/squid/blacklists/regex_allow > > Since the whole file is

Re: [squid-users] assertion failed: comm.cc:178: "fd_table[conn->fd].halfClosedReader != NULL"

2015-05-04 Thread Amos Jeffries
On 5/05/2015 10:09 a.m., HackXBack wrote: > but am not ready now to use 3.5.4 > can i use this patch on 3.4 without any problem ? You seem to be manually backporting other patches. This one is no different. Amos ___ squid-users mailing list squid-users

Re: [squid-users] Number of clients accessing cache: 0

2015-05-04 Thread Amos Jeffries
On 5/05/2015 9:29 a.m., Stakres wrote: > Hi All, > Seems the number of connected clients is always 0 (zero) since the 3.5.3... Do you have clientdb disabled? Amos ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.o

Re: [squid-users] Error negotiating SSL connection on FD 12: Success

2015-05-04 Thread Nathan Hoad
You're experiencing http://bugs.squid-cache.org/show_bug.cgi?id=4236 - give the patch on there a try and see if it helps. It should tell you what's really failing. You'll start getting messages like this: Error negotiating SSL connection on FD 439: error:0005:lib(0):func(0):DH lib (5/-1/0) W

Re: [squid-users] vary headers

2015-05-04 Thread Amos Jeffries
On 5/05/2015 6:09 a.m., Hussam Al-Tayeb wrote: > > Ok, thank you. How would I modify that to include > Vary: somethingelse, User-Agent > and Vary: User-Agent, somethingelse? > Thanks again! > The part after the "Vary" is a list of regular expressions. Whitesapace separated, so use '.' where the

Re: [squid-users] Squid crashes with 3.5.1

2015-05-04 Thread Nathan Hoad
These are fixed in 3.5.4. Nathan. On 5 May 2015 at 08:59, Prashanth Prabhu wrote: > Hi folks, > > I am seeing a bunch of Squid crashes after moving recently to 3.5.1. > The stack trace for the various crashes is below, along with info I > have been able to gather for them. This is on a setup whe

Re: [squid-users] Number of clients accessing cache: 0

2015-05-04 Thread Nathan Hoad
Working just fine for me on 3.5.3 and 3.5.4: [root@box ~]# squidmgr info Squid Object Cache: Version 3.5.3 [snip] Number of clients accessing cache:4187 Number of HTTP requests received:247419 [root@box2 ~]# squidmgr info Squid Object Cache: Version 3.5.4 [snip] Number of cli

[squid-users] Squid crashes with 3.5.1

2015-05-04 Thread Prashanth Prabhu
Hi folks, I am seeing a bunch of Squid crashes after moving recently to 3.5.1. The stack trace for the various crashes is below, along with info I have been able to gather for them. This is on a setup where we have Squid running in conjunction with c-icap (both on the same box).The steps that led

Re: [squid-users] Squid ubuntu build error

2015-05-04 Thread Rafael Akchurin
This is how we rebuild Squid 3 from Ubuntu for SSL bump (taken from http://docs.diladele.com/administrator_guide_4_1/system_configuration/https_filtering/recompile_squid.html) apt-get update && apt-get -y upgrade # install build tools apt-get -y install devscripts build-essential fakeroot libss

Re: [squid-users] Number of clients accessing cache: 0

2015-05-04 Thread HackXBack
root@issa:~# squidclient -h 127.0.0.1 -p 3128 mgr:info |grep "Number of" Sending HTTP request ... done. Number of clients accessing cache: 0 Number of HTTP requests received: 6498250 Number of ICP messages received:0 Number of ICP messages sent:

Re: [squid-users] assertion failed: comm.cc:178: "fd_table[conn->fd].halfClosedReader != NULL"

2015-05-04 Thread HackXBack
but am not ready now to use 3.5.4 can i use this patch on 3.4 without any problem ? Thanks Amos. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/assertion-failed-comm-cc-178-fd-table-conn-fd-halfClosedReader-NULL-tp4670979p4671104.html Sent from the Squid - U

Re: [squid-users] Youtube redirection loop?

2015-05-04 Thread HackXBack
Okay Sir, this is the solution 1st: put this conf in your squid.conf for looping 302 on youtube acl text-html rep_mime_type text/html acl http302 http_status 302 store_miss deny text-html store_miss deny http302 send_hit deny text-html send_hit deny http302 2nd: use this patch: --- src/c

[squid-users] Number of clients accessing cache: 0

2015-05-04 Thread Stakres
Hi All, Seems the number of connected clients is always 0 (zero) since the 3.5.3... We have tested with 10+ differents and simultaneous client ips and the number always shows 0. Latest tested build, the 3.5.4 official, still 0 as clients accessing the cache... Is there something wrong here ? Her

Re: [squid-users] Regex difficulties

2015-05-04 Thread Balázs Szabados
Hi Amos, I tried troubleshooting you've mentioned. I just enabled one file containing regexes. I've measured it: root@OpenWrt:~# wc -c /etc/squid/blacklists/regex_allow 1636 /etc/squid/blacklists/regex_allow Since the whole file is 1636 bytes, I assume ever line of regexes is in must be smaller t

Re: [squid-users] vary headers

2015-05-04 Thread Hussam Al-Tayeb
> Sent: Monday, May 04, 2015 at 9:04 PM > From: "Amos Jeffries" > To: "Hussam Al-Tayeb" > Cc: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] vary headers > > On 5/05/2015 4:38 a.m., Hussam Al-Tayeb wrote: > > > > > >> Sent: Monday, May 04, 2015 at 6:32 PM > >> From: "Amos Jeff

Re: [squid-users] vary headers

2015-05-04 Thread Amos Jeffries
On 5/05/2015 4:38 a.m., Hussam Al-Tayeb wrote: > > >> Sent: Monday, May 04, 2015 at 6:32 PM >> From: "Amos Jeffries" >> To: "Hussam Al-Tayeb" >> Cc: squid-users@lists.squid-cache.org >> Subject: Re: [squid-users] vary headers >> >> On 5/05/2015 3:15 a.m., Hussam Al-Tayeb wrote: >>> >>> Sen

Re: [squid-users] vary headers

2015-05-04 Thread Hussam Al-Tayeb
> Sent: Monday, May 04, 2015 at 6:32 PM > From: "Amos Jeffries" > To: "Hussam Al-Tayeb" > Cc: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] vary headers > > On 5/05/2015 3:15 a.m., Hussam Al-Tayeb wrote: > > > > > >> Sent: Monday, May 04, 2015 at 12:49 PM > >> From: "Amos Jef

Re: [squid-users] Regex difficulties

2015-05-04 Thread Amos Jeffries
On 4/05/2015 10:02 p.m., Amos Jeffries wrote: > On 4/05/2015 4:49 a.m., Balázs Szabados wrote: >> Hi, >> >> I'm trying to hook up these regex files for url filtering: >> http://www.squidguard.org/Doc/Examples/08.expressionlist >> http://www.squidguard.org/Doc/Examples/09.whiteexpression >> Looking

Re: [squid-users] A lot of open rewriter heplers and are hanging! Squid 3.5

2015-05-04 Thread Amos Jeffries
On 5/05/2015 3:35 a.m., Ulises Nicolini wrote: > Hello Amos and Eliezer, > > Regarding this: > >> My guess is that its been patched to cope with the action code and >> kv-pair syntax. But not concurrency enabled. Which is mandatory on the >> Store-ID interface. > > You are right about the kv-pai

Re: [squid-users] A lot of open rewriter heplers and are hanging! Squid 3.5

2015-05-04 Thread Ulises Nicolini
Hello Amos and Eliezer, Regarding this: > My guess is that its been patched to cope with the action code and > kv-pair syntax. But not concurrency enabled. Which is mandatory on the > Store-ID interface. You are right about the kv-pair syntax patch, that's exactly it. But about concurrency, we

Re: [squid-users] vary headers

2015-05-04 Thread Amos Jeffries
On 5/05/2015 3:15 a.m., Hussam Al-Tayeb wrote: > > >> Sent: Monday, May 04, 2015 at 12:49 PM >> From: "Amos Jeffries" >> To: squid-users@lists.squid-cache.org >> Subject: Re: [squid-users] vary headers >> >> On 4/05/2015 6:54 a.m., Hussam Al-Tayeb wrote: Sent: Sunday, May 03, 2015 at 9:45 P

Re: [squid-users] vary headers

2015-05-04 Thread Hussam Al-Tayeb
> Sent: Monday, May 04, 2015 at 12:49 PM > From: "Amos Jeffries" > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] vary headers > > On 4/05/2015 6:54 a.m., Hussam Al-Tayeb wrote: > >> Sent: Sunday, May 03, 2015 at 9:45 PM > >> From: "Yuri Voinov" > > > >> > >> I understand w

Re: [squid-users] about squid choose sibing

2015-05-04 Thread Amos Jeffries
On 5/05/2015 12:46 a.m., Guang Wei wrote: > sibing, cache digests and NetDB > Squid's network measurement database is designed to measure the proximity of > origin servers. In other words, by querying this database, Squid knows how > close it is to the origin server. > Not quite. NetDB contains

Re: [squid-users] how to achieve squid to handle 2000 concurrent connections?

2015-05-04 Thread Abdelouahed Haitoute
Hello Amos, Could you by the way explain to me what TCP_MISS_ABORTED means in the squid log? Its not clear for me what the source of the problem is: client or (squid)server? Abdelouahed > Op 20 apr. 2015, om 02:58 heeft Amos Jeffries het > volgende geschreven: > > Squid is still responding b

[squid-users] Error negotiating SSL connection on FD 12: Success

2015-05-04 Thread snakeeyes
Hi I created privste & public keys for squid , but it still give me error for negotiating https_port 443 accel key=/root/CA/myCA/private/squid.local.key cert=/root/CA/myCA/certs/squid.local.crt cache.log 2015/05/04 11:59:08 kid1| Error negotiating SSL connection on FD 12: Succes

Re: [squid-users] Squid ubuntu build error

2015-05-04 Thread Amos Jeffries
On 4/05/2015 11:35 a.m., Darren B. wrote: > Hi > > I have struck a small issue in building squid from source (Ubuntu 14.04 > current source packages) FYI: I've tried providing back-ports for Ubuntu a while back. But the churn in dpkg tools themselves this past 2 Debian cyces has been so much tha

Re: [squid-users] how to achieve squid to handle 2000 concurrent connections?

2015-05-04 Thread Amos Jeffries
On 4/05/2015 10:37 p.m., Abdelouahed Haitoute wrote: > Hello Amos, > > Could you by the way explain to me what TCP_MISS_ABORTED means in the squid > log? It means the client request needed Squid to contact a server (cache MISS). The client then disconnected (ABORTED) before the answer could be s

Re: [squid-users] 3.5.4 Can't access Google or Yahoo SSL pages

2015-05-04 Thread Chris Palmer
There has been a change in behaviour in 3.5.4. It now really does prefer to contact a site using an ipv6 address rather than a v4. The network stack here doesn't permit v6 so the traffic to sites such as google was failing. Setting the following restored the previous behaviour: dns_v4_first on

Re: [squid-users] Regex difficulties

2015-05-04 Thread Amos Jeffries
On 4/05/2015 4:49 a.m., Balázs Szabados wrote: > Hi, > > I'm trying to hook up these regex files for url filtering: > http://www.squidguard.org/Doc/Examples/08.expressionlist > http://www.squidguard.org/Doc/Examples/09.whiteexpression > > I've created the ACL, but when I start squid, I get all th

Re: [squid-users] Squid-deb-proxy legacy-tools_0.1_all.deb Size mismatch

2015-05-04 Thread Eric Keller
Thanks for the confirmation. Would it be something to change the behaviour of squid-deb-proxy, matching the master repository Package.gz file for checksum when the cache gets hit and force re cache of the package if it's different? Have a good day -- Eric On Fri, May 1, 2015, 17:46 Amos Jeffries

[squid-users] Youtube redirection loop?

2015-05-04 Thread Yuri Voinov
Hi gents. I made a little research and found one funny problem with Youtube/HTML5 caching. When youtube output video, it starts with similar URL: https://r12---sn-n8v7ln7y.googlevideo.com/videoplayback?c=web&clen=362967&cpn=6UqpMRDeKbePCzao&cver=as3&dur=30.046&expire=1430763762&fexp=900720%2C

Re: [squid-users] 3.5.4 Can't access Google or Yahoo SSL pages

2015-05-04 Thread Amos Jeffries
On 4/05/2015 5:01 a.m., Chris Palmer wrote: > Two other reports of the same problem (accessing some SSL sites) after > upgrading to Squid 3.5.4... > > https://bugs.archlinux.org/task/44811 > > I'm at a bit of a loss to know where to start looking. Do you see a pattern like what was seen in that

Re: [squid-users] vary headers

2015-05-04 Thread Amos Jeffries
On 4/05/2015 6:54 a.m., Hussam Al-Tayeb wrote: >> Sent: Sunday, May 03, 2015 at 9:45 PM >> From: "Yuri Voinov" > >> >> I understand what do your want. But for what? >>> > > because a "wget --server-response http://someurl"; operation that > replies with a "Vary: user-agent" header always result

Re: [squid-users] assertion failed: comm.cc:178: "fd_table[conn->fd].halfClosedReader != NULL"

2015-05-04 Thread Amos Jeffries
On 4/05/2015 1:29 a.m., HackXBack wrote: > i upgrade to 3.4.13 and still using range_offset_limit none > making > assertion failed: comm.cc:178: "fd_table[conn->fd]... > i think you forget to upload the patch ? The experimental bug 3775 patch? That is in the current production release (3.5.4

Re: [squid-users] Squid-deb-proxy legacy-tools_0.1_all.deb Size mismatch

2015-05-04 Thread Amos Jeffries
On 4/05/2015 5:35 p.m., Eric Keller wrote: > Thanks for the confirmation. > > Would it be something to change the behaviour of squid-deb-proxy, matching > the master repository Package.gz file for checksum when the cache gets hit > and force re cache of the package if it's different? I dont think

[squid-users] about squid choose sibing

2015-05-04 Thread Guang Wei
sibing, cache digests and NetDB Squid's network measurement database is designed to measure the proximity of origin servers. In other words, by querying this database, Squid knows how close it is to the origin server. Think about that web server A& parent squid B(located in China), child squid C