Sorry for nagging. We want to use both tproxy and accelerator mode. Mainly
tproxy for internet traffic and accelerator mode for web server. Also we
want to ignore cache control header in the HTTP requests destined for our
webserver (abcexample.com) Does the below configuration work ? or Do we
nee
On 28/02/2016 5:31 p.m., Anonymous cross wrote:
> Hi, Amos,
> We are using forward tproxy . We used to redirect the packets coming from
> client for port 80 to squid proxy server. Squid spoofs the request and
> establishes a connection with Server transparently. Please find the
> configuration bel
Hi, Amos,
We are using forward tproxy . We used to redirect the packets coming from
client for port 80 to squid proxy server. Squid spoofs the request and
establishes a connection with Server transparently. Please find the
configuration below
Client --- > Squid proxy server --- > web Server
Ok can you give me a config example
--
View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-ssl-bump-with-upstream-proxy-tp4676279p4676294.html
Sent from the Squid - Users mailing list archive at Nabble.com.
___
squid
On 28/02/2016 00:03, Yuri Voinov wrote:
Ah, you want icing on that cake too?
Sure :)
My table is open for anyone that wants\needs to grab a bite, just let me
know an hour before so I would be able to make sure that the cake and
drinks will be ready the jokes are on me.
For now I am
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
28.02.16 3:39, Amos Jeffries пишет:
> On 28/02/2016 9:00 a.m., Yuri Voinov wrote:
>>
>> Wow, this is only for major releases?
>>
>
> Yes.
>
>> Does this can work with nightly build?
>>
>
> No. Snapshots are not listed in the date Eliezer is proce
On 28/02/2016 9:00 a.m., Yuri Voinov wrote:
>
> Wow, this is only for major releases?
>
Yes.
> Does this can work with nightly build?
>
No. Snapshots are not listed in the date Eliezer is processing to get
the feed.
Downloading tarballs is also the wrong way to be fetching if you need to
do
On 28/02/2016 7:52 a.m., joe wrote:
> right Asserts is the best choice for critical function im with you
define "critical". It is not always obvious.
> on that in the other hand some function its not critical to have
> asserts just trace() or some other function to notify the cache log
Now yo
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Eliezer,
you don't believe ; Korn and sometimes perl :)
This was a joke, there is simple thing to parse release page and extract
fresh nightly build ;)
28.02.16 2:41, Eliezer Croitoru пишет:
> Hey Yuri,
>
> Currently this specifi
Hey Yuri,
Currently this specific feed is for releases and not auto-generated
releases since I am using it for my builds only.
To generate the link for the latest auto-generated release you can
choose a branch and parse the page for the latest tar.gz\bz2.
Since all these pages are templates it
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Aha, I'm stupid.
Squid can't re-crypted peer connections. You need to splice peered
URL's before tunnel it into your peer.
28.02.16 2:07, Baselsayeh пишет:
> No
> What I need i need is
> Get ssl info from browser - squid - upstream proxy - inter
No
What I need i need is
Get ssl info from browser - squid - upstream proxy - internet
Using cache_peer
With ssl_bump
But for some reason the upstream proxy wont get the https requests
All I want is https -> sslbump -> upstream proxy via CONNECT request
--
View this message in context:
http://s
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
You come in the morning - and Freshly squid dirtied dumps the system
partition and lying in maintenanse :)
28.02.16 1:58, Eliezer Croitoru пишет:
> I have built a JSON feed that displays the latest squid version per branch
> from old to new at th
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
I have an automated build script for squid (written in shell ;)), it
accepts URL/archive name (squid*.tar.gz) to build squid on my platform,
re-build SSL db, set it up, set correct permissions and re-start SMF
service ;)
Just need download URL ;)
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Wow, this is only for major releases?
Does this can work with nightly build?
And, of course, generate download URL to make systems auto-updates via
cron, for example? ;)
28.02.16 1:58, Eliezer Croitoru пишет:
> I have built a JSON feed that disp
I have built a JSON feed that displays the latest squid version per
branch from old to new at the url:
https://ngtech.co.il/ruby/squid/versions.cgi
It is being updated from the www.squid-cache.org periodically and
depends on the squid-cache mirrors update time.
The feed can be used in monitor
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
You need just to install into your downstream proxy CA's from your
upstream proxy. :)
28.02.16 1:20, Baselsayeh пишет:
> Hello
> Im trying to get ssl bump to work with an upstream proxy
> The problem is that the upstram proxy only supports CONNECT
Hello
Im trying to get ssl bump to work with an upstream proxy
The problem is that the upstram proxy only supports CONNECT and not ssl
So I tried with squid http and https intercept ports with ssl bump and
genetare host certs is on
But it wont work in ssl (http works fine)
--
View this message i
On 28/02/2016 6:46 a.m., Yuri Voinov wrote:
>
> request_header_accesss cache-control deny all
>
> and
>
> acl specified_clients src 192.168.100.1 192.168.100.2
> request_header_accesss cache-control deny specified_clients
>
All tht directive controls is what Squid *outputs* to server on its o
On 27/02/2016 10:30 p.m., Kevin Giger wrote:
> I have users of my proxy when they add stuff to cart its ok but checkout
> won't work
>
> see the robert is his user name I can't figure out how to keep that logged
> in to not get denied errors.
>
>
> 1456556236.501336 52.25.202.130 TCP_MISS/20
right Asserts is the best choice for critical function im with you on that
in the other hand some function its not critical to have asserts
just trace() or some other function to notify the cache log for warning and
do not halt just keep running
its choice of what function need to have asserts
Hi, I had read some squid wiki about following info.
>> For example you might get faster traffic by moving from
> stunnel+Squid to a Squid with intercept >> Squid with intercept,
>> ssl-bump and "ssl_bump splice all" in the latest Squid-3.5 releases.
My current case is, from china inner Intrane
On 02/27/2016 05:02 AM, joe wrote:
> isn't better to use for kid1| assertion failed: store.cc:1890: "isEmpty()"
> in store.cc line 1890 assert (isEmpty());
> insted replace it with VERIFY (isEmpty());
> assert force the program to halt that's why the restart happen
> and its very bad wen squid
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
request_header_accesss cache-control deny all
and
acl specified_clients src 192.168.100.1 192.168.100.2
request_header_accesss cache-control deny specified_clients
and, finally,
http://wiki.squid-cache.org/
feel free to read fine manuals first
Hi, All,
I want squid to ignore "pragma:no-cache/cache-control:no-cache" header in
HTTP client request. Is there any configuration available in squid to
achieve this?
Also i want to ignore cache control header only for specific URL's? Is
there any way in squid to achieve this?
Regards,
Cross.
___
On 02/26/2016 08:00 PM, joe wrote:
> thank you guys also i got 2 error so fare in my cache,log
> kid1| assertion failed: store.cc:1890: "isEmpty()"
>
> and it look like squid restart after eatch one
> 2016/02/27 04:12:35 kid1| assertion failed: FwdState.cc:447:
> "serverConnection() == conn"
htt
Thanks you very much for your reply. it help me a lot!
I will have a try to `ssl-bump' in recent days.
Although, i still have one question about squid.
if speed is the major reason which can not access twitter in my android,
But, i can access twitter from my laptop firefox (proxy to squid with
l
On 02/27/2016 02:01 AM, Ahmad wrote:
> How much can we store in rock ?
As much as your disk space allows, essentially.
A single cache_dir (of any type) is limited to about 16 million objects
(of any size).
> I already used the rock with 3.5.15 squid and it seems mean object size like
> 35K
T
isn't better to use for kid1| assertion failed: store.cc:1890: "isEmpty()"
in store.cc line 1890 assert (isEmpty());
insted replace it with VERIFY (isEmpty());
assert force the program to halt that's why the restart happen
and its very bad wen squid restart doing huge rebuild it take time to
f
Thanks for your advice, your are a good community :-)
Le 26 févr. 2016 17:57, "Amos Jeffries" a écrit :
> On 26/02/2016 10:43 p.m., Jérôme Seuniac wrote:
> > Thanks for your help.
> >
> > I have change my configuration with your advice.
> >
> > It's works !
> >
> > :-)
> >
>
> Please also run the
I have users of my proxy when they add stuff to cart its ok but checkout
won't work
see the robert is his user name I can't figure out how to keep that logged
in to not get denied errors.
1456556236.501336 52.25.202.130 TCP_MISS/200 7333 POST
http://www.footlocker.com/catalog/miniAddToCart.c
How much can we store in rock ?
I already used the rock with 3.5.15 squid and it seems mean object size like 35K
So im not getting any good things
Can I cache like 10 M object size in rock ?
Can I cache that in memeory ?
Can u just tell me the max object size I can have with the last version
32 matches
Mail list logo