Re: [squid-users] FATAL: Unable to open HTTPS Socket

2015-08-25 Thread Amos Jeffries
On 26/08/2015 6:51 a.m., Oliver Webb wrote: > TLDR Skip to -- > > I have squid 3.5.7 installed on linux with the following configure options: > > '--build=arm-linux-gnueabihf' '--prefix=/usr' '--localstatedir=/var' > '--libexecdir=/usr/lib/squid' '--srcdir=.' '--datadir=/usr/share/squid

Re: [squid-users] caching question

2015-08-25 Thread Amos Jeffries
On 26/08/2015 2:10 p.m., Alex Samad wrote: > Hi > > Sorry, answered my own question. > > acl nonCacheURL urlpath_regex .*/x86_64/repodata/repomd.xml$ > cache deny nonCacheURL Almost exactly like that. Just without the ".* at the start of the pattern. All regex patterns are assumed to start and

Re: [squid-users] Client <-> Squid <-> WebServer packet flow

2015-08-25 Thread Amos Jeffries
On 26/08/2015 2:33 p.m., SaRaVanAn wrote: > Hi All, > I have a basic question on Client - web server communication through Squid > using transparent proxy. > In case of transparent proxy Whenever a client tries to access a webpage, > squid spoofs the packet and acts like a web server. In turn Squid

Re: [squid-users] Remove squid cache?

2015-08-25 Thread Amos Jeffries
On 26/08/2015 2:54 p.m., Cindy Yang wrote: > Hi all, > > I hope this is the right place to ask for help. A few weeks ago I > updated my laptop to windows 10. It worked great for a few weeks and > then I noticed that certain websites were not able to load. I paid no > attention to it since I figure

[squid-users] Remove squid cache?

2015-08-25 Thread Cindy Yang
Hi all, I hope this is the right place to ask for help. A few weeks ago I updated my laptop to windows 10. It worked great for a few weeks and then I noticed that certain websites were not able to load. I paid no attention to it since I figured it was my shitty wifi. Well turns out I've somehow

Re: [squid-users] Mac OS X Updates

2015-08-25 Thread Muhammad Panji
Hi, Not squid but if you want to cache mac os x and ios update you can install mac os x server and use caching service provided by mac os x server. You can read more details here : https://help.apple.com/advancedserveradmin/mac/4.0/#/apd74DDE89F-08D2-4E0A-A5CD-155E345EFB83 Thanks. Regards, Panj

[squid-users] Client <-> Squid <-> WebServer packet flow

2015-08-25 Thread SaRaVanAn
Hi All, I have a basic question on Client - web server communication through Squid using transparent proxy. In case of transparent proxy Whenever a client tries to access a webpage, squid spoofs the packet and acts like a web server. In turn Squid initiates a new TCP connection with the web server.

Re: [squid-users] caching question

2015-08-25 Thread Alex Samad
Hi Sorry, answered my own question. acl nonCacheURL urlpath_regex .*/x86_64/repodata/repomd.xml$ cache deny nonCacheURL seems like "" makes it look for a file ? On 26 August 2015 at 11:59, Alex Samad wrote: > Hi > > Sorry add more info > > I have this already in my squid.conf > acl nonCacheDom

Re: [squid-users] caching question

2015-08-25 Thread Alex Samad
Hi Sorry add more info I have this already in my squid.conf acl nonCacheDom dstdomain -i "/etc/squid/lists/nonCacheDom.lst" cache deny nonCacheDom I presume i can add something similiar but with urlpath_regex acl nonCacheURL urlpath_regex ".*/x86_64/repodata/repomd.xml" cache deny nonCacheURL

[squid-users] caching question

2015-08-25 Thread Alex Samad
Hi I want to get squid to not cache urls that terminate like this updates/x86_64/repodata/repomd.xml os/x86_64/repodata/repomd.xml How do I organize that. Having problems with old repmod.xml files making my yum updates fail.. Alex ___ squid-users mai

Re: [squid-users] TCP_MISS/429

2015-08-25 Thread Amos Jeffries
On 26/08/2015 12:30 a.m., T3h vICE wrote: > Thank you Amos for your thoughts. > > I've tried some stuff to filter the error. > When i'm on my squidsever i can wget http://crushftp/index.html . > Trying to download the index.html on my Windowsclient gives me 429-Error > instead. > Has this maybe so

Re: [squid-users] Change url_rewrite_program problem

2015-08-25 Thread Amos Jeffries
On 26/08/2015 1:48 a.m., Hicham Berni wrote: > Hi Eliezer, > > Thanks you for feedback, > > • Squid version installed is2.6.STABLE21 and may be this version not > handling these requests correctly ? This setup is very normal and these are teh simple its. So it should work with your Squid.

[squid-users] FATAL: Unable to open HTTPS Socket

2015-08-25 Thread Oliver Webb
TLDR Skip to -- I have squid 3.5.7 installed on linux with the following configure options:  '--build=arm-linux-gnueabihf' '--prefix=/usr' '--localstatedir=/var' '--libexecdir=/usr/lib/squid' '--srcdir=.' '--datadir=/usr/share/squid' '--sysconfdir=/etc/squid' '--with-default-user=proxy'

Re: [squid-users] Squid HIT ratio

2015-08-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 http://i.imgur.com/3jwftYC.png Bytes ratio is a less, of course. But not so dramatically. YT seems not cacheable now. I made some research and AFAIK we can't cache YT now without VERY special store-ID rewriter. Also, of course, I use SSL-bump. S

Re: [squid-users] Squid HIT ratio

2015-08-25 Thread FredB
> -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Fred, > > look ;) > > http://i.imgur.com/UBu13g0.png > > Store-ID rulez! :) Yes very interesting, can you share your bytes ratio please ? I will take a look to increase my cache as I discussed with Amos but I can't touch the SSL part

[squid-users] Squid HIT ratio

2015-08-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Fred, look ;) http://i.imgur.com/UBu13g0.png Store-ID rulez! :) -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJV3LEfAAoJENNXIZxhPexGvhAH/2XZARm3G1ZA73ikAZAGo5h3 /EYrU+ZdZc0E4GxLhO8a49jD8gSQ4H/Wc8MMkbXT/+Dflhcpy70N0CQ8M8IBAL54 t

Re: [squid-users] SquidBlocker stable release 0.3.10 RPM

2015-08-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I'll be interested in test redirector on my platform (this is Solaris), this is why I asked about sources I have databases. :) Need only code. 25.08.15 22:31, Eliezer Croitoru пишет: > On 25/08/2015 18:14, Yuri Voinov wrote: >> Eliezer, >> >>

Re: [squid-users] SquidBlocker stable release 0.3.10 RPM

2015-08-25 Thread Eliezer Croitoru
On 25/08/2015 18:14, Yuri Voinov wrote: Eliezer, how to take a look on sources? The sources are not publicly available for now. It is however written in GoLang and the algorithms are described in the software page. It should not be very hard to write a similar application just by understandi

Re: [squid-users] SquidBlocker stable release 0.3.10 RPM

2015-08-25 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Eliezer, how to take a look on sources? 25.08.15 20:25, Eliezer Croitoru пишет: > I am pleased to publicly release the first version of SquidBlocker which > considered by me stable enough for production use. > > SquidBlocker can replace squidgua

[squid-users] SquidBlocker stable release 0.3.10 RPM

2015-08-25 Thread Eliezer Croitoru
I am pleased to publicly release the first version of SquidBlocker which considered by me stable enough for production use. SquidBlocker can replace squidguard blacklist functionality but with a whole another concept of blacklisting in it. The two main things I considered are fast updates and

Re: [squid-users] Change url_rewrite_program problem

2015-08-25 Thread Hicham Berni
Hi Eliezer, Thanks you for feedback, • Squid version installed is2.6.STABLE21 and may be this version not handling these requests correctly ? setting for cache peer : http_port 80 accel defaultsite=add.ptr.lu vhost https_port 443 cert=/root/add.ptr.lu.pem key=/root/add.ptr.lu.key accel def

Re: [squid-users] TCP_MISS/429

2015-08-25 Thread T3h vICE
Thank you Amos for your thoughts. I've tried some stuff to filter the error. When i'm on my squidsever i can wget http://crushftp/index.html . Trying to download the index.html on my Windowsclient gives me 429-Error instead. Has this maybe something to do with proxy transparency? -- View this m