Re: [squid-users] HSTS and MOZILLA_PKIX_ERROR_V1_CERT_USED_AS_CA

2016-08-10 Thread Amos Jeffries
On 11/08/2016 11:44 a.m., erdosain9 wrote: > Thanks!it works!!!but... have this strange behavior in > access.log1470835274.046896 192.168.1.172 NONE/200 0 CONNECT > mail.google.com:443 - HIER_DIRECT/172.217.28.229 -1470835274.569521 > 192.168.1.172 TCP_MISS/204 406 GET https://mail

Re: [squid-users] how can I coplete this squid tutorial?

2016-08-10 Thread Eliezer Croitoru
Hey james, We can try to help you but I couldn't understand your question. The squid.conf file by default contains a limited set of configuration lines since others are bound to the default. You can see the full list of options in the squid.conf.documented. Depends on your OS version you will be

Re: [squid-users] squid 3.3.8 https (Yuri Voinov)

2016-08-10 Thread Eliezer Croitoru
There are couple ways to do so but your speed issues are probably not from access to the domains in the logs: www.youtube.com You will need to "slow" down domains such as: r7---sn-nhpax-ua8s.googlevideo.com You don't need squid for that but you would be able to track the relevant IP addresses t

Re: [squid-users] HSTS and MOZILLA_PKIX_ERROR_V1_CERT_USED_AS_CA

2016-08-10 Thread erdosain9
Thanks!it works!!!but... have this strange behavior in access.log1470835274.046896 192.168.1.172 NONE/200 0 CONNECT mail.google.com:443 - HIER_DIRECT/172.217.28.229 -1470835274.569521 192.168.1.172 TCP_MISS/204 406 GET https://mail.google.com/mail/gxlu? - PINNED/2800:3f0:4002:800::

Re: [squid-users] squid 3.3.8 https (Yuri Voinov)

2016-08-10 Thread erdosain9
Yes, sorry, i break the "thread"... i was talking about this http://squid-web-proxy-cache.1019090.n4.nabble.com/squid-3-3-8-https-td4678795.html i just want to limit youtube, not block youtube... just limit the bandwith. i can do that without https?? i try with dealy pools, but not working with ht

Re: [squid-users] squid 3.3.8 https (Yuri Voinov)

2016-08-10 Thread Eliezer Croitoru
To do what? If you want to implement QOS you can do that pretty easily on the OS level. Since you are using a regular forward proxy you can monitor youtube traffic using some external acl or a logging helper and add new domains IP addresses to an iptables IPSET which will mark these connections

Re: [squid-users] squid refresh_pattern / cache question

2016-08-10 Thread Berkes, David
Thank you very much Amos. Your support and the Squid product works very good for us. It is handling all of our traffic very well and have not had any issues since the change. -Original Message- From: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] On Behalf Of Amos Jeff

Re: [squid-users] Range header is a hit ratio killer

2016-08-10 Thread Eliezer Croitoru
Well it will be different from system to system but one of the main things was not about prefetching. Indeed sometimes prefetching is not possible, but, when you have a situation which parallel requests are causing amplified download by your proxy it means the proxy or the clients have some conf