Re: [squid-users] Squid 3.5.15-1 is available for Ubuntu 14.04 LTS (online repo ubuntu.diladele.com)

2016-03-09 Thread Rafael Akchurin
Hello Eliezer, Yes I am now trying to build 4.0.7 hope will be able to announce soon. Best regards, Rafael > Op 10 mrt. 2016 om 02:27 heeft Eliezer Croitoru het > volgende geschreven: > > First thanks! > > Will it be possible to add another version of squid to other versions of > ubuntu? >

Re: [squid-users] question about ssl_bump

2016-03-09 Thread Alex Rousskov
On 03/09/2016 08:38 PM, Alex Samad wrote: >>> I am not sure how haveServerName is constructed >> It is up to the Squid admin. > I'm the squid admin. I am presuming maybe wrongly that this is test to > see if squid has worked out a serverName. Yeah. Ideally, haveServerName should match when an

[squid-users] squid crash on restart

2016-03-09 Thread Alex Samad
Hi running rpm -qa squid squid-3.5.14-1.el6.x86_64 doing a restart saw this 2016/03/10 14:36:28 kid1| Squid Cache (Version 3.5.14): Exiting normally. FATAL: Received Segment Violation...dying. 2016/03/10 14:36:28 kid1| storeDirWriteCleanLogs: Starting... in cache.log and message log Mar 10 14

Re: [squid-users] question about ssl_bump

2016-03-09 Thread Alex Samad
On 10 March 2016 at 14:17, Alex Rousskov wrote: >> >> I am not sure how haveServerName is constructed > > It is up to the Squid admin. Thanks for the replay to the other stuff I'm the squid admin. I am presuming maybe wrongly that this is test to see if squid has worked out a serverName. ___

Re: [squid-users] question about ssl_bump

2016-03-09 Thread Alex Rousskov
On 03/09/2016 08:00 PM, Alex Samad wrote: > from http://wiki.squid-cache.org/Features/SslPeekAndSplice > > # Better safe than sorry: > # Terminate all strange connections. > ssl_bump splice serverIsBank > ssl_bump bump haveServerName > ssl_bump peek all > ssl_bump terminate all > > I am not sure

Re: [squid-users] SSL Peek and Splice with SIP over TCP

2016-03-09 Thread Amos Jeffries
On 10/03/2016 2:35 p.m., Eliezer Croitoru wrote: > On 09/03/2016 21:31, Jason Haar wrote: >> Or use socat. I have used it to allow ancient SSLv3-only clients to >> communicate with TLS-only servers. >> >> Jason > > Would it be possible to put haproxy as a SSL termination proxy and pass > the TCP r

[squid-users] question about ssl_bump

2016-03-09 Thread Alex Samad
from http://wiki.squid-cache.org/Features/SslPeekAndSplice # Better safe than sorry: # Terminate all strange connections. ssl_bump splice serverIsBank ssl_bump bump haveServerName ssl_bump peek all ssl_bump terminate all I am not sure how haveServerName is constructed I read this as 1) splice th

Re: [squid-users] intercepting roku traffic

2016-03-09 Thread Brendan Kearney
On 03/09/2016 06:18 AM, Amos Jeffries wrote: On 9/03/2016 4:59 a.m., Brendan Kearney wrote: i have a roku4 device and it constantly has issues causing it to buffer. i want to try intercepting the traffic to see if i can smooth out the rough spots. Squid is unlikely to help with this issue. "B

Re: [squid-users] SSL Peek and Splice with SIP over TCP

2016-03-09 Thread Eliezer Croitoru
On 09/03/2016 21:31, Jason Haar wrote: Or use socat. I have used it to allow ancient SSLv3-only clients to communicate with TLS-only servers. Jason Would it be possible to put haproxy as a SSL termination proxy and pass the TCP request to squid? which will results in a similar situation to s

Re: [squid-users] Squid 3.5.15-1 is available for Ubuntu 14.04 LTS (online repo ubuntu.diladele.com)

2016-03-09 Thread Eliezer Croitoru
First thanks! Will it be possible to add another version of squid to other versions of ubuntu? Eliezer On 10/03/2016 00:00, Rafael Akchurin wrote: Hello all, We have rebuilt the Debian (testing) package for Squid 3.5.15-1 for Ubuntu 14.04 LTS with libecap3. If you need to install the lates

Re: [squid-users] clientProcessHit

2016-03-09 Thread Amos Jeffries
On 10/03/2016 7:40 a.m., joe wrote: > look at that firefox and chrome same vary > z > http://platform.instagram.com/en_US/embeds.js > Ah, you said you understood Vary. But this mail indicates that you do not quite understand it well enough. I prune away the extra headers to clarify: Firefox

[squid-users] Squid 3.5.15-1 is available for Ubuntu 14.04 LTS (online repo ubuntu.diladele.com)

2016-03-09 Thread Rafael Akchurin
Hello all, We have rebuilt the Debian (testing) package for Squid 3.5.15-1 for Ubuntu 14.04 LTS with libecap3. If you need to install the latest Squid 3.5 on Ubuntu 14.04 LTS please take a look at online repository at http://ubuntu.diladele.com. To use the repo run the following commands: # a

Re: [squid-users] clientProcessHit

2016-03-09 Thread joe
may be but i dont see in header CF-Cache-Status: HIT blue coat header mmm i i tryed xnxx.com and it dose have that header lol so bluecoat even if the bypass some mobile link still change its header wonder :( -- View this message in context: http://squid-web-proxy-cache.10190

Re: [squid-users] clientProcessHit

2016-03-09 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Man, from that we had to start. It will almost certainly strip User-Agent from Vary to increase its own cache hits. 10.03.16 1:22, joe пишет: > bluecoat where is my bandwidth > coming from -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEc

Re: [squid-users] clientProcessHit

2016-03-09 Thread joe
i bypass my self no cache server to see what happening the only cache i think if its affecting me bluecoat where is my bandwidth coming from chrome == GET /en_US/embeds.js HTTP/1.1 Host: platform.instagram.com Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*

Re: [squid-users] clientProcessHit

2016-03-09 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 But I suggests we are not about client User-Agent. We are about _server_ reply Vary, which does not contain User-Agent for unknown reason. 10.03.16 0:57, joe пишет: > duno probably i use pc windows xp ?? > try on ur pcuse diferent browser a

Re: [squid-users] SSL Peek and Splice with SIP over TCP

2016-03-09 Thread Jason Haar
Or use socat. I have used it to allow ancient SSLv3-only clients to communicate with TLS-only servers. Jason On Thu, Mar 10, 2016 at 12:28 AM, Amos Jeffries wrote: > On 9/03/2016 6:53 p.m., Howard Kranther wrote: > > Hello, I am investigating the use of squid as a client side proxy to > > provi

Re: [squid-users] clientProcessHit

2016-03-09 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 http://i.imgur.com/aQDFt6U.png http://i.imgur.com/655E8KM.png As you can see, Chrome and Edge gives different User-Agent. 10.03.16 0:57, joe пишет: > duno probably i use pc windows xp ?? > try on ur pcuse diferent browser and see the header

Re: [squid-users] clientProcessHit

2016-03-09 Thread joe
duno probably i use pc windows xp ?? try on ur pcuse diferent browser and see the header and let me know pls -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/clientProcessHit-tp4676484p4676567.html Sent from the Squid - Users mailing list archive at Nabb

Re: [squid-users] clientProcessHit

2016-03-09 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 You Vary header does not contain User-Agent. Why? 10.03.16 0:40, joe пишет: > Vary: Accept-Encoding -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQEcBAEBCAAGBQJW4HWdAAoJENNXIZxhPexGStwH/2AbBxtR/vJ/7XRmsAeb2zW9 izEnnYvXk5jFte9SUY9H/pDe5pWV0D

Re: [squid-users] clientProcessHit

2016-03-09 Thread joe
look at that firefox and chrome same vary http://platform.instagram.com/en_US/embeds.js GET /en_US/embeds.js HTTP/1.1 Host: platform.instagram.com User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:43.0) Gecko/20100101 Firefox/43.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0

Re: [squid-users] clientProcessHit

2016-03-09 Thread joe
ok then instagram app betwean android and iphone or soo they have diferent useragent they chare same link example http://platform.instagram.com/en_US/embeds.js so some phone get cached object and the other none not right!! and its same link :( -- View this message in context: http://squ

Re: [squid-users] clientProcessHit

2016-03-09 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 10.03.16 0:25, joe пишет: > tks Yuri Voinov > lol i do understand how Vary work but what im trying to understand is > 1 = firefox has matching vary as chrome Chrome and Firefox can't give the same Vary. User-Agent is different. > > 2 = when i us

Re: [squid-users] clientProcessHit

2016-03-09 Thread joe
tks Yuri Voinov lol i do understand how Vary work but what im trying to understand is 1 = firefox has matching vary as chrome 2 = when i use same link on chrome has varyEvaluateMatch: Oops. Not a Vary match & clientProcessHit: Vary object loop! and on firefox non since that link for the instagra

Re: [squid-users] clientProcessHit

2016-03-09 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 http://mark.koli.ch/understanding-the-http-vary-header-and-caching-proxies-squid-etc 09.03.16 23:48, joe пишет: > you ar talking about Vary: Accept-Encoding > on both Firefox and chrome right ?? > > > Amos Jeffries wrote >> On 10/03/2016 2:50 a.

Re: [squid-users] clientProcessHit

2016-03-09 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 https://varvy.com/mobile/vary-user-agent.html 09.03.16 23:48, joe пишет: > you ar talking about Vary: Accept-Encoding > on both Firefox and chrome right ?? > > > Amos Jeffries wrote >> On 10/03/2016 2:50 a.m., joe wrote: >>> what im trying to ex

Re: [squid-users] clientProcessHit

2016-03-09 Thread joe
you ar talking about Vary: Accept-Encoding on both Firefox and chrome right ?? Amos Jeffries wrote > On 10/03/2016 2:50 a.m., joe wrote: >> what im trying to explain is varyEvaluateMatch 90% chrome or download >> manager >> firefox and ie.. no issue even on mobile firefox is no problem c

Re: [squid-users] http host rewrite for origin (reverse proxy)

2016-03-09 Thread Tomas Mozes
On Wed, Mar 9, 2016 at 3:43 PM, Amos Jeffries wrote: > On 10/03/2016 3:29 a.m., Tomas Mozes wrote: > > > > Hello Amos, > > the origin server has multiple virtual hosts configured, so if it does > not > > receive the Host: header by which it is configured (like > storage.example.com), > > it will

Re: [squid-users] http host rewrite for origin (reverse proxy)

2016-03-09 Thread Tomas Mozes
On Wed, Mar 9, 2016 at 3:33 PM, Antony Stone < antony.st...@squid.open.source.it> wrote: > On Wednesday 09 March 2016 at 15:29:48, Tomas Mozes wrote: > > > the origin server has multiple virtual hosts configured, so if it does > not > > receive the Host: header by which it is configured (like > >

Re: [squid-users] http host rewrite for origin (reverse proxy)

2016-03-09 Thread Antony Stone
On Wednesday 09 March 2016 at 15:53:24, Amos Jeffries wrote: > On 10/03/2016 3:33 a.m., Antony Stone wrote: > > > > 2. Have you considered using Apache in reverse-proxy mode instead of > > Squid? It will happily re-write headers for you, and also supports load > > balancing around multiple server

Re: [squid-users] http host rewrite for origin (reverse proxy)

2016-03-09 Thread Amos Jeffries
On 10/03/2016 3:33 a.m., Antony Stone wrote: > On Wednesday 09 March 2016 at 15:29:48, Tomas Mozes wrote: > >> the origin server has multiple virtual hosts configured, so if it does not >> receive the Host: header by which it is configured (like >> storage.example.com), it will emit a 404. >> >> C

Re: [squid-users] http host rewrite for origin (reverse proxy)

2016-03-09 Thread Amos Jeffries
On 10/03/2016 3:29 a.m., Tomas Mozes wrote: > > Hello Amos, > the origin server has multiple virtual hosts configured, so if it does not > receive the Host: header by which it is configured (like storage.example.com), > it will emit a 404. > > Currently, this does the following. The clients reque

Re: [squid-users] http host rewrite for origin (reverse proxy)

2016-03-09 Thread Antony Stone
On Wednesday 09 March 2016 at 15:29:48, Tomas Mozes wrote: > the origin server has multiple virtual hosts configured, so if it does not > receive the Host: header by which it is configured (like > storage.example.com), it will emit a 404. > > Currently, this does the following. The clients reques

Re: [squid-users] clientProcessHit

2016-03-09 Thread Amos Jeffries
On 10/03/2016 2:50 a.m., joe wrote: > what im trying to explain is varyEvaluateMatch 90% chrome or download > manager > firefox and ie.. no issue even on mobile firefox is no problem chrome > has > The "problem" is that when Squid looks up a URL whih has variant(s) in the cache it looks up

Re: [squid-users] http host rewrite for origin (reverse proxy)

2016-03-09 Thread Tomas Mozes
On Wed, Mar 9, 2016 at 11:33 AM, Amos Jeffries wrote: > On 9/03/2016 4:32 a.m., Tomas Mozes wrote: > > Hello, > > I would like to create a file distribution cache with squid. There is an > > origin server that has some fixed limited capacity and I'd like to place > a > > few servers close to clie

Re: [squid-users] clientProcessHit

2016-03-09 Thread joe
what im trying to explain is varyEvaluateMatch 90% chrome or download manager firefox and ie.. no issue even on mobile firefox is no problem chrome has -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/clientProcessHit-tp4676484p4676550.html Sent from th

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-09 Thread Amos Jeffries
On 10/03/2016 2:17 a.m., Heiler Bemerguy wrote: > > Hi Amos, > > Now you can help me on tracking it down.. lol... can you? I don't know > what debug_options (apart of 88,3) I should enable. 88,9 to see what else is happening in and around that. I took a quick look and saw that 88,5 has details a

Re: [squid-users] clientProcessHit

2016-03-09 Thread joe
test on chrom -- 2016/03/09 15:31:14.124 kid1| 45,9| cbdata.cc(299) cbdataInternalAlloc: Allocating 0x9d86ffb8 2016/03/09 15:31:14.124 kid1| 79,3| DiskIO/DiskThreads/DiskThreadsDiskFile.cc(33) DiskThreadsDiskFile: UFSFile::UFSFile: /mnt/cache-a/0F/F5/004FF5D4 2016/03/09 15:3

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-09 Thread Heiler Bemerguy
Hi Amos, Now you can help me on tracking it down.. lol... can you? I don't know what debug_options (apart of 88,3) I should enable. I just know that disabling range_offset will eliminate this issue, because it won't even try to cache range requests. Also, it didn't happen when I was using AUF

Re: [squid-users] Transparent proxying, https and Eduroam

2016-03-09 Thread Amos Jeffries
On 10/03/2016 12:15 a.m., Vito A. Smaldino wrote: > Hi guys, > in my high-school i operate a squid+squidguard box with great satisfaction > and zero problems; actually it is configured as an explicit proxy. > Now i need to change the operation mode to implicit (transparent, > intercept) due to Edur

Re: [squid-users] external_acl_type wont work

2016-03-09 Thread Amos Jeffries
On 10/03/2016 12:20 a.m., Baselsayeh wrote: > what do you mean? > /share/squid/errors/templates/splash.html? Yes, if that is where the error templates are installed. I put "..." to indicate the uncertain / OS-specific part of the path. Amos ___ squid-

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-09 Thread Amos Jeffries
On 9/03/2016 11:38 a.m., Heiler Bemerguy wrote: > > While debugging, found this: > > 2016/03/08 18:22:49.212 kid2| 88,3| client_side_reply.cc(463) cacheHit: > clientCacheHit: > http://au.v4.download.windowsupdate.com/c/msdownload/update/software/uprl/2016/03/windows-kb890830-x64-v5.34_e0074d1fa34

Re: [squid-users] clientProcessHit

2016-03-09 Thread Amos Jeffries
On 9/03/2016 1:02 p.m., joe wrote: > testing http://cdn1.traffichaus.com/scripts/mfloat.js > on diferent browser > - > firefox > 2016/03/09 01:57:15 kid1| varyEvaluateMatch: Oops. Not a Vary match on > second attempt, 'http://cdn1.traffichaus.com/scripts/mfloat.js' > 'accept

Re: [squid-users] external_acl_type wont work

2016-03-09 Thread Baselsayeh
what do you mean? /share/squid/errors/templates/splash.html? or /error/templates/ Amos Jeffries wrote > On 8/03/2016 3:53 a.m., Baselsayeh wrote: >> thanks i've got it working >> now new error: >> Internal Error: Missing Template /etc/squid/splash.html >> and im sure 100% That template is there >

Re: [squid-users] parent_proxy kerberos authentication logging

2016-03-09 Thread Amos Jeffries
On 9/03/2016 2:08 a.m., Johnatan wrote: > Hello there, > > I have 2 proxy. > On the first, I perform a Kerberos authentication from my users. > On the parent proxy I want to retrieve the login (username) information. > I don't want to perform a real authentication on the parent proxy so I have > a

Re: [squid-users] SSL Peek and Splice with SIP over TCP

2016-03-09 Thread Amos Jeffries
On 9/03/2016 6:53 p.m., Howard Kranther wrote: > Hello, I am investigating the use of squid as a client side proxy to > provide TLS 1.2 support for a VOIP application using SIP over TCP.The > application would use TCP or TLS 1.0 to communicate with squid, which > would bump either of those to TLS 1

Re: [squid-users] SSL Bump matching Subject Alternative Names

2016-03-09 Thread Amos Jeffries
On 9/03/2016 6:49 a.m., Cohen-Rose, Adam wrote: > > We¹re planning to test how switching to an SMP config affects performance > ‹ will hopefully post our results when we see them. > Thanks. That would be good to see. > > One remaining puzzle: we see the latency creep upwards overnight when the

Re: [squid-users] intercepting roku traffic

2016-03-09 Thread Amos Jeffries
On 9/03/2016 4:59 a.m., Brendan Kearney wrote: > i have a roku4 device and it constantly has issues causing it to > buffer. i want to try intercepting the traffic to see if i can smooth > out the rough spots. Squid is unlikely to help with this issue. "Buffering ..." issues are usually caused by

[squid-users] Transparent proxying, https and Eduroam

2016-03-09 Thread Vito A. Smaldino
Hi guys, in my high-school i operate a squid+squidguard box with great satisfaction and zero problems; actually it is configured as an explicit proxy. Now i need to change the operation mode to implicit (transparent, intercept) due to Eduroam policy. Googling i found docs and examples all refering

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-09 Thread Amos Jeffries
On 9/03/2016 4:26 a.m., Heiler Bemerguy wrote: > > This way it won't cache any "range" downloads as "range_offset_limit 0" > is the default option and it will make squid only download what the > client requested. > > From squid-cache.org: "A size of 0 causes Squid to never fetch more than > the c

Re: [squid-users] http host rewrite for origin (reverse proxy)

2016-03-09 Thread Amos Jeffries
On 9/03/2016 4:32 a.m., Tomas Mozes wrote: > Hello, > I would like to create a file distribution cache with squid. There is an > origin server that has some fixed limited capacity and I'd like to place a > few servers close to clients, in a mesh configuration (reverse proxy). > > http_port 80 acce

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-09 Thread Eliezer Croitoru
On 09/03/2016 10:54, L.P.H. van Belle wrote: No, Aufs : cache_dir aufs /var/spool/squid 9216 16 256 max-size=100663296 Then the cases are different by nature... you have 9GB and he uses 90+++ GB, you are using AUFS which is a FS based and he is using ROCK which is a DB structure. The issues

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-09 Thread L . P . H . van Belle
No, Aufs : cache_dir aufs /var/spool/squid 9216 16 256 max-size=100663296 > -Oorspronkelijk bericht- > Van: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] Namens > Eliezer Croitoru > Verzonden: woensdag 9 maart 2016 9:39 > Aan: squid-users@lists.squid-cache.org > Onder

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-09 Thread Eliezer Croitoru
On 09/03/2016 09:59, L.P.H. van Belle wrote: With the settings i already told you. Today is ms update day and hee.. its caching my windows updates .. so go try them out. Are you using ROCK cache_dir ?? Eliezer ___ squid-users mailing list squid-use

Re: [squid-users] Sudden but sustained high bandwidth usage

2016-03-09 Thread L . P . H . van Belle
With the settings i already told you.  Today is ms update day and hee..  its caching my windows updates ..  so go try them out.   1457510088.427  1 192.168.249.141 TCP_HIT/200 575 HEAD http://au.download.windowsupdate.com/d/msdownload/update/software/secu/2016/02/windows6.1-kb3139852-x64_9