Re: [squid-users] tuning squid memory (aka avoiding the reaper)

2017-09-28 Thread Amos Jeffries
On 29/09/17 12:35, Aaron Turner wrote: Ok, i'll work on that. One other thing, is that if I let it run long enough, squid will crash with errors like the following: FATAL: Received Bus Error...dying. 2017/09/28 23:28:09 kid4| Closing HTTP port 10.93.3.4:3128 2017/09/28 23:28:09 kid4| Closing HT

Re: [squid-users] Squid on Linux being detected as proxy, but not on Windows

2017-09-28 Thread Eliezer Croitoru
Hey, Try to fetch the next url: https://whoer.net/ports and see what are the results. If it states some port as "open" you will need to block access in the tcp level ie send a RESET or DROP packets to the ports which you don't want the world to see as open. Else then this try to peek at the nex

[squid-users] Squid on Linux being detected as proxy, but not on Windows

2017-09-28 Thread xpro6000
I have also posted about this on stackexchange but never got a working answer. I think here is a better place as it's dedicated to Squid https://unix.stackexchange.com/questions/392849/squid-on-linux-being-detected-as-proxy-but-not-on-windows Here is the problem I am facing I have added the foll

Re: [squid-users] cache hit rate isn't what I'd expect

2017-09-28 Thread Aaron Turner
Here ya go 26/Sep/2017:20:10:27137 10.93.3.47 TCP_HIT/200 11265 GET https://static.licdn.com/sc/h/ddzuq7qeny6qn0ysh3hj6pzmr - HIER_NONE/- 26/Sep/2017:20:10:33 46 10.93.3.47 TCP_MISS/200 11259 GET https://static.licdn.com/sc/h/ddzuq7qeny6qn0ysh3hj6pzmr - HIER_DIRECT/192.229.163.180 26/Sep/2

Re: [squid-users] tuning squid memory (aka avoiding the reaper)

2017-09-28 Thread Aaron Turner
Ok, i'll work on that. One other thing, is that if I let it run long enough, squid will crash with errors like the following: FATAL: Received Bus Error...dying. 2017/09/28 23:28:09 kid4| Closing HTTP port 10.93.3.4:3128 2017/09/28 23:28:09 kid4| Closing HTTP port 127.0.0.1:3128 2017/09/28 23:28:0

Re: [squid-users] cache hit rate isn't what I'd expect

2017-09-28 Thread Amos Jeffries
On 29/09/17 11:29, Aaron Turner wrote: So this grep through my access logs for this single URL does a good job illustrating a rather interesting problem: $ grep -h 'https://static.licdn.com/sc/h/ddzuq7qeny6qn0ysh3hj6pzmr text/css ip_index=0,client=m0078269' access.*.log | sort ... > At first

Re: [squid-users] tuning squid memory (aka avoiding the reaper)

2017-09-28 Thread Amos Jeffries
On 29/09/17 09:19, Aaron Turner wrote: Ok, so did some research and what I'm finding is that: If I set sslflags=NO_DEFAULT_CA for http_port and disable both mem and disk cache then memory is very stable. It goes up for a little bit and then pretty much stabilizes (it actually goes up and down a

[squid-users] cache hit rate isn't what I'd expect

2017-09-28 Thread Aaron Turner
So this grep through my access logs for this single URL does a good job illustrating a rather interesting problem: $ grep -h 'https://static.licdn.com/sc/h/ddzuq7qeny6qn0ysh3hj6pzmr text/css ip_index=0,client=m0078269' access.*.log | sort 26/Sep/2017:20:10:27 TCP_HIT/200 https://static.licdn.com

Re: [squid-users] tuning squid memory (aka avoiding the reaper)

2017-09-28 Thread Aaron Turner
Ok, so did some research and what I'm finding is that: If I set sslflags=NO_DEFAULT_CA for http_port and disable both mem and disk cache then memory is very stable. It goes up for a little bit and then pretty much stabilizes (it actually goes up and down a little, but doesn't seem to be growing o

Re: [squid-users] TCP_REFRESH_IGNORED/200 ???

2017-09-28 Thread Alex Rousskov
On 09/28/2017 10:40 AM, EdouardM wrote: > what's this Squid code "TCP_REFRESH_IGNORED" ? This recently added result code indicates that Squid tried to refresh the previously cached response A, but got a response B that was older than A (as determined by the Date header field). Squid ignored respo

[squid-users] TCP_REFRESH_IGNORED/200 ???

2017-09-28 Thread EdouardM
Hi All, what's this Squid code "TCP_REFRESH_IGNORED" ? we checked the page https://wiki.squid-cache.org/SquidFaq/SquidLogs and it's not mentioned. any idea ? best regards. -- Sent from: http://squid-web-proxy-cache.1019090.n4.nabble.com/Squid-Users-f1019091.html _

Re: [squid-users] ipv6 acl access not working properly

2017-09-28 Thread Alex Rousskov
On 09/28/2017 10:10 AM, anwesh tiwari wrote: > Ipv6 acl is not working as expected, if the ipv6 address of domain is > unrouteable and it fallbacks to ipv4 even when its denied. > > Details : > What I am trying to achieve : I want to disable all IPv4 domain access from > proxy and disable all i

[squid-users] ipv6 acl access not working properly

2017-09-28 Thread anwesh tiwari
Ipv6 acl is not working as expected, if the ipv6 address of domain is unrouteable and it fallbacks to ipv4 even when its denied. Details : What I am trying to achieve : I want to disable all IPv4 domain access from proxy and disable all ipv4 connections. Here is my directives just before http_

Re: [squid-users] leakfinder

2017-09-28 Thread Amos Jeffries
On 28/09/17 22:31, Vieri wrote: Hi, I enabled leakfinder in squid's configure script. However, the following does not show anything: # squidclient mgr: | grep leaks Also, the config script says: --enable-leakfinder Enable Leak Finding code. Enabling this alone does nothing; you also have t

[squid-users] leakfinder

2017-09-28 Thread Vieri
Hi, I enabled leakfinder in squid's configure script. However, the following does not show anything: # squidclient mgr: | grep leaks Also, the config script says: --enable-leakfinder Enable Leak Finding code. Enabling this alone does nothing; you also have to modify the source code to use th

Re: [squid-users] make large amount of IPv6 IPs for use?

2017-09-28 Thread Eliezer Croitoru
Do you really need squid for that? What is your ultimate goal of using squid? - Content Caching - Content Filtering - Applying traffic ACL's - NAT - Other?? If you don't need caching in the picture then you are using the wrong tool.. When we will have an answer to what you want to achieve we might