[squid-users] Any plan for an SSL bump mode ACL?

2015-08-27 Thread Dan Charlesworth
I’m trying to figure out if there’s a way to avoid those 0 byte “peeked” requests being processed by the rest of our external ACLs etc. by allowing them early on in the transaction. Unfortunately there doesn’t seem to be a way to target just those ones with http_access—the TAG_NONE isn’t an act

Re: [squid-users] peek all step with bump instance of proxy

2015-08-27 Thread Amos Jeffries
On 27/08/2015 10:50 p.m., john jacob wrote: > Hi All, > > I am trying to configure a squid filtering instance which serves both proxy > and intercepted (transparent) connections. Filtering is accomplished by a > Request eCAP adapter which have something like > > if(IsDenied() && RequestMethod=="C

Re: [squid-users] peek all step with bump instance of proxy

2015-08-27 Thread Alex Rousskov
On 08/27/2015 04:50 AM, john jacob wrote: > with the proxy connections I am encountering some > peculiar behavior with scenario 3 (ie when a non bumped https CONNECT is > denied by eCAP). Instead of terminating the connection, it is logged as > TAG_NONE/200 in the access log and getting bumped (a

[squid-users] cpu high 100%

2015-08-27 Thread joe
hi i don't know if someone facing hi cpu after 6 or more hoer my server is xeon quad 2 cpu 2.2geg ubuntu 14 latest i never had problem with v 2.7 on normal use with peek time max cpu get up to 20% no more then up to 40 50 % Squid Object Cache: Version 3.5.6 Build Info: Service Name: squid Start

Re: [squid-users] completely transparent Squid

2015-08-27 Thread Amos Jeffries
On 28/08/2015 9:43 a.m., kuntal_ba...@bnz.co.nz wrote: > Could you please un-subscribe me ? > > Hi Kuntal, You need to begin the process by entering the email you want unsubscribed into the unsubscribe form at the bottom of the listinfo page whose link is here: > __

Re: [squid-users] completely transparent Squid

2015-08-27 Thread Kuntal_Basak
Could you please un-subscribe me ? Cheers, Kuntal Senior Infrastructure Architecture and Design Specialist Infrastructure Architecture and Design Bank of New Zealand DDI: 04-474 6722 Mobile: 021-2408034 ?Success is not final, failure is not fatal: it is the courage to continue that counts.?

Re: [squid-users] Zero Sized Reply

2015-08-27 Thread Eliezer Croitoru
Solve what exactly?? If the site is broken I think that the only solution is for the site admin to fix the issue... Eliezer On 27/08/2015 22:51, Jorgeley Junior wrote: You're the man Amos!!! You're the man!!! Thanks!!! Thanks so so much!!! that's solved the problem, but I'm thinking if it sol

Re: [squid-users] Zero Sized Reply

2015-08-27 Thread Jorgeley Junior
You're the man Amos!!! You're the man!!! Thanks!!! Thanks so so much!!! that's solved the problem, but I'm thinking if it solved just for this domain, so can it happen again with another domains, ok? No way to solve for future errors of this same type? 2015-08-27 16:03 GMT-03:00 Amos Jeffries : >

Re: [squid-users] Zero Sized Reply

2015-08-27 Thread Amos Jeffries
On 28/08/2015 5:49 a.m., Jorgeley Junior wrote: > Amos, thank you so much for attention, but sorry, I didn't understand what > you said. Nevermind. The website code is broken. I have been looking into it from here using those request headers from your log. What I see happening is that the server

[squid-users] Does anyone have a working Juniper SRX with tproxy squid?

2015-08-27 Thread Eliezer Croitoru
I am gathering information on different routing options for squid tproxy mode for quite some time. I have a working settings for: - Cisco - Linux - FreeBSD - OpenBSD - Mikrotik The topology I have tested it until now is at: http://ngtech.co.il/squidblocker/topology1.png The Edge router div

Re: [squid-users] Zero Sized Reply

2015-08-27 Thread Amos Jeffries
On 28/08/2015 5:04 a.m., Jorgeley Junior wrote: > more logs: Aha! the first bit. What Squid sent to the server: > 2015/08/27 11:43:31.301 kid1| http.cc(2217) sendRequest: HTTP Server local= > 192.168.25.2:43127 remote=200.98.190.9:80 FD 66 flags=1 > 2015/08/27 11:43:31.301 kid1| http.cc(2218) sen

Re: [squid-users] completely transparent Squid

2015-08-27 Thread Antony Stone
On Thursday 27 Aug 2015 at 17:21, Arkantos wrote: > the community is now wanting a caching server. > > i have zeroed in on CentOS+Squid+Webmin > but we are unable to configure it as a "completely transparent cache" If your community of users wants a caching proxy server, why make it transparent

Re: [squid-users] Zero Sized Reply

2015-08-27 Thread Amos Jeffries
On 28/08/2015 4:25 a.m., Jorgeley Junior wrote: > increasing the log leve i got this: > 2015/08/27 11:43:30.966 kid1| ipcache.cc(501) ipcache_nbgethostbyname: > ipcache_nbgethostbyname: Name 'www.grupoatuall.com.br'. > 2015/08/27 11:43:30.966 kid1| Address.cc(389) lookupHostIP: Given Non-IP ' > www

Re: [squid-users] Zero Sized Reply

2015-08-27 Thread Jorgeley Junior
increasing the log leve i got this: 2015/08/27 11:43:30.966 kid1| ipcache.cc(501) ipcache_nbgethostbyname: ipcache_nbgethostbyname: Name 'www.grupoatuall.com.br'. 2015/08/27 11:43:30.966 kid1| Address.cc(389) lookupHostIP: Given Non-IP ' www.grupoatuall.com.br': Name or service not known 2015/08/27

[squid-users] completely transparent Squid

2015-08-27 Thread Arkantos
hello everybody, my friend and I, happen to run the neighborhood cable and wifi network. Costs are picked up by the users' community, and we get a salary for running around. we have about 35 users we get around 60 mb from the ISP and then we have deployed Inventum Unify Cloud MSC for user manage

Re: [squid-users] Zero Sized Reply

2015-08-27 Thread Amos Jeffries
On 28/08/2015 2:42 a.m., Jorgeley Junior wrote: > Thanks Amos. > my squid is 3.5.6, so i can disconsider the bug, right? Yes I believe so. Amos ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-

Re: [squid-users] Zero Sized Reply

2015-08-27 Thread Jorgeley Junior
Thanks Amos. my squid is 3.5.6, so i can disconsider the bug, right? I'm very lost about this problem, any suggestion will be appreciated 2015-08-27 3:04 GMT-03:00 Amos Jeffries : > On 27/08/2015 7:48 a.m., Jorgeley Junior wrote: > > Hi guys. > > I'm having a weird problem, my squid is doing "ZER

[squid-users] peek all step with bump instance of proxy

2015-08-27 Thread john jacob
Hi All, I am trying to configure a squid filtering instance which serves both proxy and intercepted (transparent) connections. Filtering is accomplished by a Request eCAP adapter which have something like if(IsDenied() && RequestMethod=="CONNECT") { // Gives TAG_NONE/403

[squid-users] High-Availability in Squid

2015-08-27 Thread Imaginovskiy
Hi all, Bit of a strange one but I'm wondering if it's possible to have squid redirect a site to a secondary backend server if the primary is down. Have been looking into this but haven't seen much similar to this. Currently I have my setup along the lines of this; Client -> Squid -> Backend1 b

Re: [squid-users] Squid and compression

2015-08-27 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I agree in general, but there are some considerations. 1. Compressed content is almost always becomes unique. Which leads to a dramatic decrease in the cache hit ratio. 2. Compression actually became a de facto standard on the Internet. 3. Proje