[squid-users] Building squid | Best Practices?

2015-08-28 Thread Howard Waterfall
Ubuntu 14.04 Squid 3.5.5 Hi - I've successfully installed, configured and run squid 3.5.5 w/o a problem using: sudo apt-get install squid I want to filter by mac address though, so I purged that install and re-built squid with the *--enable-arp-acl* flag. I installed using make install. This

Re: [squid-users] logfileHandleWrite: daemon:/var/logs/access.log: error writing ((32) Broken pipe)

2015-08-28 Thread Howard Waterfall
Sorry, I thought that by copying the subject line of Priya's message thread, I would have continued the thread. Here's the link for context: http://lists.squid-cache.org/pipermail/squid-users/2015-February/002131.html Cheers, Deiter On Fri, Aug 28, 2015 at 8:31 AM, Howard Waterfall wrote: > Ubu

Re: [squid-users] Squid 3.5.7, cache_swap_high, bug or not bug ?

2015-08-28 Thread FredT
Hi Amos, We have applied the patch with the client on the squid in prod a coule of hours ago... We can see now a real aggressive objects cleaning I can confirm a 200 obj/sec is a minimal number with huge traffic, you could fix the value a bit higher (250-300) that would be perfect. Let's see thi

[squid-users] You can use squid on site like facebook or youtube?

2015-08-28 Thread Gabriel Ordoñez
Hello, first of all this it is my first time here. I'm trying to use squid for content sites like facebook, youtube and others, but because these sites use SSL or TLS for the connection to their servers do not have it made. I read everything there is much here about it but I am not very clear yet.

Re: [squid-users] squid: workers on multicore

2015-08-28 Thread Alex Rousskov
On 08/28/2015 09:39 AM, Amos Jeffries wrote: > On 29/08/2015 1:28 a.m., Paul Martin wrote: >> 1) my squid is working with 4 workers (1 to 4). My processor is 8 cores but >> only 4 cores (5 to 8) are used by squid. How make the 8 cores working >> (cpu_affinity_map process_numbers ...)? > In the wa

Re: [squid-users] How to limit upload bandwidth in squid proxy?

2015-08-28 Thread Alex Rousskov
On 08/28/2015 11:06 AM, Jorgeley Junior wrote: > I think the directive: client_request_buffer_max_size do a limit to > upload, but it will stop the request, is that it? In general, it is not possible to limit _bandwidth_ usage by limiting buffer sizes. With enough processing speed, one can [theore

[squid-users] squid tproxy

2015-08-28 Thread Vieri
Hi, [reposting a trimmed-down message] My goal is to allow lan users to access a greater number of sites if they explicitly configure the squid proxy server in their browsers and authenticate. If they don't then traffic to port 80 and 443 will be transparently redirected to a squid proxy serv

Re: [squid-users] How to limit upload bandwidth in squid proxy?

2015-08-28 Thread Jorgeley Junior
I think the directive: client_request_buffer_max_size do a limit to upload, but it will stop the request, is that it? 2015-08-28 14:00 GMT-03:00 Alex Rousskov : > On 08/24/2015 01:20 AM, Amos Jeffries wrote: > > > On 24/08/2015 1:03 p.m., Brandon Elliott wrote: > >> I need a solution that > >> do

Re: [squid-users] How to limit upload bandwidth in squid proxy?

2015-08-28 Thread Alex Rousskov
On 08/24/2015 01:20 AM, Amos Jeffries wrote: > On 24/08/2015 1:03 p.m., Brandon Elliott wrote: >> I need a solution that >> doesn't involve using a second authentication just to limit upload >> bandwidth per user. > client_delay_pools was added to meet this need. client_delay_pools limit Squi

[squid-users] %un format code doesn't work for external ssl_bump ACLs

2015-08-28 Thread Steve Hill
Squid 3.5.7 I'm using an external ACL to decide whether to bump traffic during SSL bump step 2. The external ACL needs to know the user's username for requests that have authenticated, but not all requests are authenticated so I can't use %LOGIN and I'm therefore using %un instead. However,

Re: [squid-users] squid: workers on multicore

2015-08-28 Thread Amos Jeffries
On 29/08/2015 1:28 a.m., Paul Martin wrote: > Hello > > I have 2 questions. Could you help me ? > > 1) my squid is working with 4 workers (1 to 4). My processor is 8 cores but > only 4 cores (5 to 8) are used by squid. How make the 8 cores working > (cpu_affinity_map > process_numbers ...)? In t

[squid-users] logfileHandleWrite: daemon:/var/logs/access.log: error writing ((32) Broken pipe)

2015-08-28 Thread Howard Waterfall
Ubuntu 14.04 Squid 3.5.5 Hi - I'm having pretty much exactly the same problem as Priya. I didn't see a resolution so I'm picking up the thread. I've installed and run squid 3.5.5 previously w/o a problem using: sudo apt-get install squid I want to filter by mac address though, so I purged that

Re: [squid-users] 16G Virtual Mem

2015-08-28 Thread Kinkie
Hi, yes, it could be, depending on your configuration. Please see http://wiki.squid-cache.org/SquidFaq/SquidMemory On Fri, Aug 28, 2015 at 4:32 PM, Jorgeley Junior wrote: > Guys, is this really normal??? > > ​ > > -- > > > > ___ > squid-users maili

[squid-users] 16G Virtual Mem

2015-08-28 Thread Jorgeley Junior
Guys, is this really normal??? ​ -- ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] squid: workers on multicore

2015-08-28 Thread Paul Martin
Hello I have 2 questions. Could you help me ? 1) my squid is working with 4 workers (1 to 4). My processor is 8 cores but only 4 cores (5 to 8) are used by squid. How make the 8 cores working (cpu_affinity_map process_numbers ...)? 2) my squidguard blocks some https site but the client does not

Re: [squid-users] Internet Explorer error with SSL bumping

2015-08-28 Thread Oliver Webb
Thanks for your reply Amos. I will explain a bit more of my setup in the hope it clarifies a few of the issues. I have installed the certificate portion of squids key/cert into the trusted root store of all the devices concerned all clients see the "server's" certificate as being signed by squi

Re: [squid-users] Internet Explorer error with SSL bumping

2015-08-28 Thread Amos Jeffries
On 28/08/2015 9:58 p.m., Oliver Webb wrote: > I have transparent SSL bumping working perfectly in Chrome and > Safari (iOS and Windows 7) and Internet Explorer *on Windows Phone*, and by perfectly I mean no certificate warnings of any description for any site everything just behaves normally (apart

Re: [squid-users] Any plan for an SSL bump mode ACL?

2015-08-28 Thread Amos Jeffries
On 28/08/2015 5:27 p.m., Dan Charlesworth wrote: > I’m trying to figure out if there’s a way to avoid those 0 byte > “peeked” requests being processed by the rest of our external ACLs > etc. by allowing them early on in the transaction. > > Unfortunately there doesn’t seem to be a way to target ju

[squid-users] Internet Explorer error with SSL bumping

2015-08-28 Thread Oliver Webb
I have transparent SSL bumping working perfectly in Chrome and Safari (iOS and Windows 7) and Internet Explorer *on Windows Phone*, and by perfectly I mean no certificate warnings of any description for any site everything just behaves normally (apart from the sites certificate being signed by m

Re: [squid-users] completely transparent Squid

2015-08-28 Thread Marko Cupać
On Thu, 27 Aug 2015 09:21:04 -0700 (PDT) Arkantos <221...@gmail.com> wrote: > hello everybody, > > my friend and I, happen to run the neighborhood cable and wifi > network. Costs are picked up by the users' community, and we get a > salary for running around. > > we have about 35 users > > we g