Re: [squid-users] squid sibling peers and digest requests

2016-12-28 Thread Ivan Larionov
I'm sure about forwarding because I see requests to http://172.22.15.88:3128/squid-internal-periodic/store_digest in parent logs and my parent returns 502 because we do not allow requests to internal IPs. Logs from the parent: Got request: GET http://172.22.15.88:3128/squid-internal-periodic/store

Re: [squid-users] Squid keep using one parent proxy while I have multiple parent proxies

2016-12-28 Thread Amos Jeffries
On 2016-12-27 16:37, wei wrote: The curl command is: curl -s -i http://showip.net [1] The configuration in squid.conf is: cache_peer 192.168.1.100 parent 3128 weight=5 no-query name=p1 round-robin cache_peer 192.168.1.101 parent 3128 weight=5 no-query name=p2 round-robin cache_peer 192.168.1.1

Re: [squid-users] squid sibling peers and digest requests

2016-12-28 Thread Amos Jeffries
On 2016-12-29 16:03, Ivan Larionov wrote: Hello! I'm trying to setup multiple squids as siblings with a parent which is not even a squid. But I'm getting following message in logs: temporary disabling (Bad Gateway) digest from 172.22.15.88 temporary disabling (Bad Gateway) digest from … Squi

Re: [squid-users] Problem with ssl_crtd

2016-12-28 Thread Amos Jeffries
On 2016-12-29 06:16, Eduardo Carneiro wrote: Hi everyone. I have a strange issue with my squid 3.5.19. When I enable ssl-bump and url_rewrite in order to make dynamic content cache, URL has nothing to do with cachability of dynamic content. If that content is not cachign by default then you p

Re: [squid-users] ACL and outgoing IP

2016-12-28 Thread Amos Jeffries
On 2016-12-28 05:03, qdmetro wrote: Hello, I have an issue with acl and outgoing ip address. I have a squid connected behind a firewall. On the firewall, only the Ip of the squid (192.168.1.1) is allowed to go on Internet. Usually, when a user authenticate itself on the proxy, all the request

Re: [squid-users] squid 4.0.17 accept-encoding.. sending gzip?!

2016-12-28 Thread Amos Jeffries
On 2016-12-28 06:31, Heiler Bemerguy wrote: Hi, refresh_pattern -i \.(jp[eg]{1,2}|pdf|gif|pn[pg]|bmp|tiff|ico|swf|css|js|ad|png)$ 10080 80% 120960 ignore-no-store ignore-reload ignore-must-revalidate ignore-private override-expire store-stale But it shouldn't change the length of the object, th

[squid-users] squid sibling peers and digest requests

2016-12-28 Thread Ivan Larionov
Hello! I'm trying to setup multiple squids as siblings with a parent which is not even a squid. But I'm getting following message in logs: temporary disabling (Bad Gateway) digest from 172.22.15.88 temporary disabling (Bad Gateway) digest from … Squid 3.5.23, compiled with "--enable-cache-diges

Re: [squid-users] Problem with ssl_crtd

2016-12-28 Thread Eliezer Croitoru
Depends on what is causing the issue. What bug report are you writing about? Do you have a specific one that you have seen? Also if you can disable CONNECT requests from url_rewrite it might solve an issue or two. Eliezer Eliezer Croitoru Linux System Administrator Mobile: +972-5-28704261

Re: [squid-users] Problem with ssl_crtd

2016-12-28 Thread Yuri Voinov
Try to upgrade to 3.5.23. It seems like partially fixed bug. 28.12.2016 23:16, Eduardo Carneiro пишет: > Hi everyone. > > I have a strange issue with my squid 3.5.19. When I enable ssl-bump and > url_rewrite in order to make dynamic content cache, I've got, sporadically, > this error in my cache.

[squid-users] Problem with ssl_crtd

2016-12-28 Thread Eduardo Carneiro
Hi everyone. I have a strange issue with my squid 3.5.19. When I enable ssl-bump and url_rewrite in order to make dynamic content cache, I've got, sporadically, this error in my cache.log: /assertion failed: Read.cc:69: "fd_table[conn->fd].halfClosedReader != NULL"/ When the error occur, my squi

[squid-users] SNAT BASED on tos. Anyone tried it?

2016-12-28 Thread Eliezer Croitoru
I was wondering if someone tried to do something like this: Mark the outgoing traffic with a TOS and create a SNAT rule in iptables to change the source ip address? Something like: # iptables -t nat -A POSTROUTING -m tos --tos 0x02 -o eth0 -j SNAT --to 192.168.1.1 ## squid.conf tcp_outgoing_tos 0x

Re: [squid-users] ACL and outgoing IP

2016-12-28 Thread qdmetro
Here the squid.conf : auth_param negotiate program /usr/lib/squid3/squid_kerb_auth -s GSS_C_NO_NAME HTTP/hostname.domain.com auth_param negotiate children 200 auth_param negotiate keep_alive on auth_param basic program /usr/lib/squid3/squid_ldap_auth -b "ou=users,dc=ref,dc=local" -u uid ref.domain