Re: [squid-users] WARNING: All 20/20 negotiateauthenticator processes are busy.

2017-05-15 Thread Amos Jeffries
On 16/05/17 12:54, Dijxie wrote: On 2017-05-15 20:53, erdosain9 wrote: http_port 192.168.1.215:3128 Hi, My guess is since you've declared it this way (I never did), you should try consequently: squidclient -h 192.168.1.215 -p 3128 mgr:negotiateauthenticator -h stands for host; running squid

Re: [squid-users] Slow server ¿?

2017-05-15 Thread Amos Jeffries
On 16/05/17 06:52, erdosain9 wrote: Hi. Can somebody tell why the squid server it's going slow??? Please define "slow". Amos ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

Re: [squid-users] Experimental YouTube Caching helper\tool and SQUID 3.5.25 + 4.0.19 RPM's RELEASED

2017-05-15 Thread Alex Rousskov
On 05/15/2017 07:04 PM, Eliezer Croitoru wrote: > @Alex, What will encourage you to help with an improved patch to add ICAP > X-StoreID (or else) response header capability A submission of a high-quality patch would encourage me to review it. Unfortunately, I do not have the free cycles necessar

Re: [squid-users] destination ip to splice

2017-05-15 Thread Alex Rousskov
On 05/15/2017 06:40 PM, Eliezer Croitoru wrote: > I tried this with splice but it just doesn't work the requests are still > being bumped. Do you know exactly why they are being bumped? Check the debugging logs if you do not. > From the docs I understand that it should work on the URL destinat

Re: [squid-users] WARNING: All 20/20 negotiateauthenticator processes are busy.

2017-05-15 Thread Eliezer Croitoru
To allow access to the squid manager info pages just add: http_port 127.0.0.1:3128 And then you can use squidclient to get some info and statistics on your squid using the manager interface. I can recommend you to use the next instead of squidclient: curl http://127.0.0.1:3128/ squid-internal-mgr

[squid-users] Experimental YouTube Caching helper\tool and SQUID 3.5.25 + 4.0.19 RPM's RELEASED

2017-05-15 Thread Eliezer Croitoru
Hey List, I have been working a while ago on a tool(ICAP service) that will do the next: - Snatch YouTube main video pages(watch?...) on the fly - Fetch them - Parse them - Find the key to predict the ID of the X.googlevideo.com/Y which will match the YouTube video - Store the key with the correla

Re: [squid-users] WARNING: All 20/20 negotiateauthenticator processes are busy.

2017-05-15 Thread Dijxie
On 2017-05-15 20:53, erdosain9 wrote: http_port 192.168.1.215:3128 Hi, My guess is since you've declared it this way (I never did), you should try consequently: squidclient -h 192.168.1.215 -p 3128 mgr:negotiateauthenticator -h stands for host; running squidclient without this parameter make

Re: [squid-users] destination ip to splice

2017-05-15 Thread Eliezer Croitoru
I tried this with splice but it just doesn't work the requests are still being bumped. From the docs I understand that it should work on the URL destination hostname and not the ip of the destination hostname. So my assumption is that it's not in the tcp socket level but the http hostname url-ho

Re: [squid-users] destination ip to splice

2017-05-15 Thread Alex Rousskov
On 05/15/2017 06:11 PM, Eliezer Croitoru wrote: > I want to [match] all localnet(10.0.0.0/8, 192.168.0.0/16...) How about something like this, adapted from the existing localnet ACL definition in squid.conf.documented? > acl to_localnet dst 0.0.0.1-0.255.255.255 # RFC 1122 "this" network (LAN

[squid-users] destination ip to splice

2017-05-15 Thread Eliezer Croitoru
I have a scenario which I want to disable ssl-bump for specific hosts ip network masks. In this scenario I want to allow all localnet(10.0.0.0/8, 192.168.0.0/16...) https traffic to be spliced. I tried to understand from the acl docs if there is such acl out there but couldn't understand if it exis

Re: [squid-users] Squid to listen to HTTPS

2017-05-15 Thread Alex Rousskov
On 05/15/2017 01:56 PM, avi_h wrote: > I couldn't find any browser add-on that works in order to test this so I had > a tester built just for that. FYI: Modern Curl releases support HTTPS proxies. Some popular browsers support them too (without any add-ons!), but you need PAC files or other trick

Re: [squid-users] Squid to listen to HTTPS

2017-05-15 Thread avi_h
Hi Alex, I figured out the issue was with the browser after consulting with a colleague. I couldn't find any browser add-on that works in order to test this so I had a tester built just for that. With the tester I was able to use the HTTPS proxy with no issues. Thanks for your reply. Regards, Avi

Re: [squid-users] WARNING: All 20/20 negotiateauthenticator processes are busy.

2017-05-15 Thread erdosain9
Hi. this is my config file GRUPOS DE IP acl sin_autenticacion src "/etc/squid/listas/sin_autenticacion.lst" acl red6 src 192.168.6.0/24 ###Kerberos Auth with ActiveDirectory### auth_param negotiate program /lib64/squid/negotiate_kerberos_auth -s HTTP/squid.xxx@xxx.lan auth_param

[squid-users] Slow server ¿?

2017-05-15 Thread erdosain9
Hi. Can somebody tell why the squid server it's going slow??? top - 15:05:21 up 3:52, 1 user, load average: 0,93, 2,15, 10,85 Tasks: 186 total, 1 running, 185 sleeping, 0 stopped, 0 zombie %Cpu(s): 1,7 us, 0,5 sy, 0,0 ni, 97,2 id, 0,7 wa, 0,0 hi, 0,0 si, 0,0 st KiB Mem : 3882708 t

Re: [squid-users] Squid to listen to HTTPS

2017-05-15 Thread Alex Rousskov
On 05/14/2017 03:49 PM, avi_h wrote: > I'm trying to get squid to listen to HTTPS in order to encrypt the traffic > between the proxy and the user. > https_port 3129 cert=/etc/squid/certificate.pem key=/etc/squid/privatekey.pem > However, when I try to connect from the browser using port 3129 I

Re: [squid-users] Cannot access https site

2017-05-15 Thread Alex Rousskov
On 05/15/2017 09:53 AM, Vieri wrote: > My goal is to set up Squid so it can act as a transparent proxy for > local clients browsing the web. It should "deny all" except traffic > to the destination domains included in an ACL file. > http_access deny intercepted !localnet > http_access deny interc

[squid-users] Cannot access https site

2017-05-15 Thread Vieri
Hi, My goal is to set up Squid so it can act as a transparent proxy for local clients browsing the web. It should "deny all" except traffic to the destination domains included in an ACL file. This is my squid config: http_port 3129 tproxy https_port 3130 tproxy ssl-bump generate-host-certifi