Re: [squid-users] gzip deflate

2016-03-19 Thread joe
Alex Rousskov wrote > On 03/16/2016 02:21 AM, joe wrote: >> You need to direct messages to the service(s) using adaptation_access >> directives: >> isn't faster if we use gzip library instead that will minimize the >> redirect >> ms..direct decompress > > Virtually everything would be faster if do

Re: [squid-users] Two connections per client

2016-03-19 Thread Amos Jeffries
On 17/03/2016 1:57 a.m., Amos Jeffries wrote: > On 17/03/2016 1:25 a.m., Chris Nighswonger wrote: >> On Wed, Mar 16, 2016 at 1:03 AM, Amos Jeffries wrote: >> >>> On 16/03/2016 12:38 p.m., Chris Nighswonger wrote: Why does netstat show two connections per client connection to Squid: t

Re: [squid-users] Two connections per client

2016-03-19 Thread Amos Jeffries
On 17/03/2016 1:25 a.m., Chris Nighswonger wrote: > On Wed, Mar 16, 2016 at 1:03 AM, Amos Jeffries wrote: > >> On 16/03/2016 12:38 p.m., Chris Nighswonger wrote: >>> Why does netstat show two connections per client connection to Squid: >>> >>> tcp0 0 127.0.0.1:3128 127.0.0.1:

Re: [squid-users] Squid with ICAP filter?

2016-03-19 Thread Alex Rousskov
On 03/17/2016 12:25 PM, Mike Summers wrote: > We have a situation where we need to filter compressed HTTP traffic > through an ICAP service, logging failures (4xx) or passing the original > compressed payload to it's target destination on 2xx. > > Something like this: > > * Incoming compressed

[squid-users] Does reload_into_ims not effective for HTTPS?

2016-03-19 Thread Yuri Voinov
Hi gents, I see strange behaviour for many URL's. Im my setups reload_into_ims is on globally. This time I see: - when I pressed Ctrl+F5 in browsers, for HTTP URLs TCP_REFRESH_UNMODIFIED/200 6447 GET http://icdn.lenta.ru/images/2016/03/17/09/20160317091221731/tabloid_8a08b3a372ff4499c0d95723

Re: [squid-users] Does reload_into_ims not effective for HTTPS?

2016-03-19 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I reload the same url from the same browser, from the same tab, with the same hotkey. So, request header is the same - "Reload with no-cache", yes? So, then squid alter request header to the same IMS request. Right on this point? At the end - why

Re: [squid-users] Does reload_into_ims not effective for HTTPS?

2016-03-19 Thread Amos Jeffries
On 18/03/2016 11:49 p.m., Yuri Voinov wrote: > Hi gents, > > I see strange behaviour for many URL's. > > Im my setups reload_into_ims is on globally. > > This time I see: > > - when I pressed Ctrl+F5 in browsers, for HTTP URLs > > TCP_REFRESH_UNMODIFIED/200 6447 GET > http://icdn.lenta.ru/imag

Re: [squid-users] gzip deflate

2016-03-19 Thread Matus UHLAR - fantomas
On 19.03.16 06:43, joe wrote: right the reason i start this imagine a country like us the E1 2meg real bandwidth cost 350$+ so compression will help reduce the trafic by almost up to 60% insted of buying extra bandwith :( and for the clients side ar wifi that also will help reduce the extra traf

Re: [squid-users] gzip deflate

2016-03-19 Thread Alex Rousskov
On 03/16/2016 02:21 AM, joe wrote: > You need to direct messages to the service(s) using adaptation_access > directives: > isn't faster if we use gzip library instead that will minimize the redirect > ms..direct decompress Virtually everything would be faster if done directly in Squid. The process

[squid-users] Squid quickly crashes with SIGABRT after Update from 3.5.14 to 3.5.15

2016-03-19 Thread Stefan Hölzle
Squid crashes with SIGABRT a few seconds after it starts. This issue occurred after upgrading Squid 3.5.14 to Squid version 3.5.15. cache.log just before the crash: 2016/03/02 10:41:30.389 kid1| 22,3| refresh.cc(343) refreshCheck: Staleness = -1 2016/03/02 10:41:30.389 kid3| 5,5| Write.cc(66) Hand

[squid-users] Fwd: Bandwidth control with delay pool

2016-03-19 Thread Luigi Kurihara
-- Forwarded message - From: Luigi Kurihara Date: qua, 16 de mar de 2016 às 21:56 Subject: Re: [squid-users] Bandwidth control with delay pool To: FredB Good night dear friend Fred, I make it and its works perfect. Thanks for your help. Em ter, 15 de mar de 2016 às 14:33, Fre

Re: [squid-users] Squid quickly crashes with SIGABRT after Update from 3.5.14 to 3.5.15

2016-03-19 Thread Stefan Hölzle
It seems that the issue is gone in the latest 3.5 revision (http://bazaar.launchpad.net/~squid/squid/3.5/revision/14002). On 17.03.2016 10:59, Amos Jeffries wrote: > On 17/03/2016 10:28 p.m., Stefan Hölzle wrote: >> Squid crashes with SIGABRT a few seconds after it starts. >> This issue occurred a

Re: [squid-users] gzip deflate

2016-03-19 Thread joe
right the reason i start this imagine a country like us the E1 2meg real bandwidth cost 350$+ so compression will help reduce the trafic by almost up to 60% insted of buying extra bandwith :( and for the clients side ar wifi that also will help reduce the extra trafic tks any future testing pleas

Re: [squid-users] caching js/css references with parameters, possible squid bug

2016-03-19 Thread Waitman Gobble
On 2016-03-18 01:00, Amos Jeffries wrote: On 18/03/2016 3:46 a.m., Waitman Gobble wrote: When a script reference on an HTML page includes a parameter, the script does not appear to be cached when using squid in accel mode (https). For example, jquery.js does not appear to be cached in th

Re: [squid-users] not caching

2016-03-19 Thread joe
that another video same site same refresh that cached HTTP/1.1 200 OK Cache-Control: public

[squid-users] Absurd results from the "icap::>st" log code

2016-03-19 Thread Austin Platt
Hello, I'm using squid 3.2.11 with an icap server and I am currently logging icap requests with the following format: logformat icap_squid {\ "type": "icap", \ "client_ip": "%>a", \ "timestamp": "%ts", \ "request_method": "%rm", \ "request_url": "%>ru", \ "icap_server_nam

Re: [squid-users] access from same ID and different IP addresses.

2016-03-19 Thread asakura
Thank you Amos, I will consider squid version up of squid. By the way, the UserID and IP segment of problem is not currently used. They are scheduled to be used again in May 2016. It will report if there is any good news. Regards, Kazuhiro From: Amos Jeffries Subject: Re: [squid-users] acce

Re: [squid-users] Two connections per client

2016-03-19 Thread Amos Jeffries
On 17/03/2016 4:56 a.m., Chris Nighswonger wrote: > On Wed, Mar 16, 2016 at 10:44 AM, Amos Jeffries > wrote: > >> On 17/03/2016 3:03 a.m., Chris Nighswonger wrote: >>> On Wed, Mar 16, 2016 at 9:07 AM, Amos Jeffries >> wrote: >>> On 17/03/2016 1:57 a.m., Amos Jeffries wrote: > On 17/03/2

Re: [squid-users] Does reload_into_ims not effective for HTTPS?

2016-03-19 Thread Yuri Voinov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Well, here is it: WARC/1.0 WARC-Type: warcinfo Content-Type: application/warc-fields WARC-Date: 2016-03-19T10:45:25Z WARC-Record-ID: WARC-Filename: https_cache.warc.gz WARC-Block-Digest: sha1:WAA7TQMGFUA4EUBD4KMKFKVY7YTVRSXM Content-Length: 316

[squid-users] caching js/css references with parameters, possible squid bug

2016-03-19 Thread Waitman Gobble
When a script reference on an HTML page includes a parameter, the script does not appear to be cached when using squid in accel mode (https). For example, src='/wp-includes/js/jquery/jquery.js?ver=1.1.13'> jquery.js does not appear to be cached in that case, each page request hits the o

[squid-users] Squid with ICAP filter?

We have a situation where we need to filter compressed HTTP traffic through an ICAP service, logging failures (4xx) or passing the original compressed payload to it's target destination on 2xx. Something like this: - Incoming compressed HTTP - Decompress and forward to ICAP service - Log

Re: [squid-users] Two connections per client

On Wed, Mar 16, 2016 at 1:03 AM, Amos Jeffries wrote: > On 16/03/2016 12:38 p.m., Chris Nighswonger wrote: > > Why does netstat show two connections per client connection to Squid: > > > > tcp0 0 127.0.0.1:3128 127.0.0.1:34167 > > ESTABLISHED > > tcp0 0 127.0.0.

Re: [squid-users] Two connections per client

On Wed, Mar 16, 2016 at 10:44 AM, Amos Jeffries wrote: > On 17/03/2016 3:03 a.m., Chris Nighswonger wrote: > > On Wed, Mar 16, 2016 at 9:07 AM, Amos Jeffries > wrote: > > > >> On 17/03/2016 1:57 a.m., Amos Jeffries wrote: > >>> On 17/03/2016 1:25 a.m., Chris Nighswonger wrote: > On Wed, Mar

Re: [squid-users] not caching

On 17/03/2016 12:07 a.m., joe wrote: > that another video same site same refresh that cached > > HTTP/1.1 200 OK > Cache-Control: public public the other have double public, public > Content-Length: 18902993 > Content-Type: video/x-flv > Expir

Re: [squid-users] Squid with ICAP filter?

Hey Mike, What do you mean by black box to us? who is us? Eliezer On 17/03/2016 21:52, Mike Summers wrote: Thanks Alex. You are correct, the message bodies are compressed (gzip). For reasons unknown the ICAP service can't or won't deal with compressed data. Also correct, the ICAP service is a

Re: [squid-users] access from same ID and different IP addresses.

On 16/03/2016 5:06 p.m., asak...@ioc.dnp.co.jp wrote: > Hello, > > Recently, in our environment, CPU load on the squid proxy server > is happening trouble to become a 100%. > > example > PID USER PR NI VIRT RES SHR S %CPU %MEMTIME+ COMMAND > 29767 squid 20 0 1430m 1.3g 533

Re: [squid-users] Absurd results from the "icap::>st" log code

On 19/03/2016 12:23 a.m., Austin Platt wrote: > Hello, > > I'm using squid 3.2.11 with an icap server and I am currently logging icap > requests with the following format: > logformat icap_squid {\ > "type": "icap", \ > "client_ip": "%>a", \ > "timestamp": "%ts", \ > "request_met

Re: [squid-users] Squid not allowing SSL handshake

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I've just tested on two squid's setup: http://i.imgur.com/lL3c5XY.png It works like sharm. 17.03.16 22:23, Nick Walke пишет: > We have a squid.conf like this: > https://gist.github.com/nwalke/55fea584352016149180 > > And we configure squid like

Re: [squid-users] Squid quickly crashes with SIGABRT after Update from 3.5.14 to 3.5.15

On 17/03/2016 10:28 p.m., Stefan Hölzle wrote: > Squid crashes with SIGABRT a few seconds after it starts. > This issue occurred after upgrading Squid 3.5.14 to Squid version 3.5.15. Does the problem remain in the latest 3.5 snapshot code? Amos ___ sq

Re: [squid-users] Two connections per client

>>> On Thu, Mar 17, 2016 at 4:50 AM, Amos Jeffries wrote: If its not Squid then something is playing around with the Squid port. Best know what it is even if thats okay. >>> I ran a pcap on the lo if and squid's port. While running it, I opened a browser and accessed foxnews.com thr

Re: [squid-users] Squid with ICAP filter?

Thanks Alex. You are correct, the message bodies are compressed (gzip). For reasons unknown the ICAP service can't or won't deal with compressed data. Also correct, the ICAP service is a black box for us. Much thanks for the response, it gives us a place to start. --Mike On Thu, Mar 17, 2016 a

Re: [squid-users] caching js/css references with parameters, possible squid bug

On 18/03/2016 3:46 a.m., Waitman Gobble wrote: > > When a script reference on an HTML page includes a parameter, the script > does not appear to be cached when using squid in accel mode (https). > > For example, > src='/wp-includes/js/jquery/jquery.js?ver=1.1.13'> > > jquery.js does not appear

Re: [squid-users] not caching

On 16/03/2016 11:52 p.m., joe wrote: > is this cachable > The headers say it _might_ be. Response headers are not the whole story though. Request headers matter. As do *all* of your refresh_pattern lines. > > HTTP/1.1 200 OK > Accept-Ranges: bytes > Content-Type: video/x-flv > Server: nginx

Re: [squid-users] Does reload_into_ims not effective for HTTPS?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 18.03.16 19:42, Amos Jeffries пишет: > On 18/03/2016 11:49 p.m., Yuri Voinov wrote: >> Hi gents, >> >> I see strange behaviour for many URL's. >> >> Im my setups reload_into_ims is on globally. >> >> This time I see: >> >> - when I pressed Ctrl+F

[squid-users] Squid not allowing SSL handshake

We have a squid.conf like this: https://gist.github.com/nwalke/55fea584352016149180 And we configure squid like this: https://gist.github.com/nwalke/a9fea476cf7b3326ef14 When I try to do curl https://api.twilio.com I get a response from Twilio. When I do openssl s_client -connect api.twilio.com:4

Re: [squid-users] TCP_REFRESH_UNMODIFIED_ABORTED

On 18/03/2016 7:45 a.m., Heiler Bemerguy wrote: > > Shouldn't this be something like HIT_ABORTED? There's no header asking > if it's modified or to refresh/reload.. (but I really aborted it) > The request contains "Cache-Control: no-cache". -> it should actually be a MISS. The response also co