Re: [squid-users] Performance

2018-01-11 Thread Alex Rousskov
On 01/11/2018 10:14 AM, Snyder, Brian wrote: > I apologise for asking another squid performance question, There is nothing wrong with that! It is often very difficult to solve performance problems on the mailing list, but that does not imply folks should not ask performance questions. > over t

[squid-users] Performance

2018-01-11 Thread Snyder, Brian
Hello All, I apologise for asking another squid performance question, but I have been banging my head against the wall for the better part of three months. Squid is installed and working. However, over time it slows down significantly. I have tried everything from turning off caching to trying

Re: [squid-users] Squid and SSL Bump

2018-01-11 Thread Amos Jeffries
On 12/01/18 03:24, Yoinier Hernandez Nieves wrote: El 11/01/2018, a las 12:46 a.m., Amos Jeffries escribió: On 11/01/18 09:33, Yoinier Hernandez Nieves wrote: I try connect direct to the proxy, and this is the result 1515616366.189 1359 aaa.aaa.aaa.aaa TAG_NONE/200 0 CONNECT www.ssllabs.com

Re: [squid-users] Squid and SSL Bump

2018-01-11 Thread Yoinier Hernandez Nieves
> El 11/01/2018, a las 12:46 a.m., Amos Jeffries > escribió: > > On 11/01/18 09:33, Yoinier Hernandez Nieves wrote: >> I try connect direct to the proxy, and this is the result >> 1515616366.189 1359 aaa.aaa.aaa.aaa TAG_NONE/200 0 CONNECT >> www.ssllabs.com:443 y

Re: [squid-users] Squid and SSL Bump

2018-01-11 Thread Yoinier Hernandez Nieves
> El 11/01/2018, a las 12:46 a.m., Amos Jeffries > escribió: > > On 11/01/18 09:33, Yoinier Hernandez Nieves wrote: >> I try connect direct to the proxy, and this is the result >> 1515616366.189 1359 aaa.aaa.aaa.aaa TAG_NONE/200 0 CONNECT >> www.ssllabs.com:443 y

Re: [squid-users] want ignore if the ips added to the interface and force running it

2018-01-11 Thread --Ahmad--
Guys you were great , thanks for all your replies . you help me so much cheers > On Jan 11, 2018, at 2:37 PM, Amos Jeffries wrote: > > On 12/01/18 01:08, Antony Stone wrote: >> On Thursday 11 January 2018 at 13:02:43, Matus UHLAR - fantomas wrote: > On 11/01/18 21:50, --Ahmad-- wrote: >>

Re: [squid-users] want ignore if the ips added to the interface and force running it

2018-01-11 Thread Amos Jeffries
On 12/01/18 01:08, Antony Stone wrote: On Thursday 11 January 2018 at 13:02:43, Matus UHLAR - fantomas wrote: On 11/01/18 21:50, --Ahmad-- wrote: must the ip be attached on os interface so that squid use it as outgoing address ? can squid use outgoing address that not being attached to the int

Re: [squid-users] How to block a https website with squid 3.5.3

2018-01-11 Thread Amos Jeffries
On 11/01/18 23:39, minh hưng đỗ hoàng wrote: Dear all, i using squid as a transparent proxy. But i can't deny a https website like https://remitano.com The first step is to upgrade your Squid. TLS hijacking is a very volatile area and things are changing often 3.5.3 is a very old Squid rele

Re: [squid-users] want ignore if the ips added to the interface and force running it

2018-01-11 Thread Antony Stone
On Thursday 11 January 2018 at 13:02:43, Matus UHLAR - fantomas wrote: > >> On 11/01/18 21:50, --Ahmad-- wrote: > >>> must the ip be attached on os interface so that squid use it as > >>> outgoing address ? can squid use outgoing address that not being > >>> attached to the interface ? > >> > >>

Re: [squid-users] want ignore if the ips added to the interface and force running it

2018-01-11 Thread Matus UHLAR - fantomas
On 11/01/18 21:50, --Ahmad-- wrote: must the ip be attached on os interface so that squid use it as outgoing address ? can squid use outgoing address that not being attached to the interface ? On Jan 11, 2018, at 12:07 PM, Amos Jeffries wrote: No it cannot. On 11.01.18 12:22, --Ahmad-- wro

[squid-users] How to block a https website with squid 3.5.3

2018-01-11 Thread minh hưng đỗ hoàng
Dear all, i using squid as a transparent proxy. But i can't deny a https website like https://remitano.com My squid is compiled on ubuntu14 with this configure option Squid Cache: Version 3.5.3 Service Name: squid configure options: '--prefix=/usr' '--includedir=/usr/include' '--infodir=/usr/shar

Re: [squid-users] want ignore if the ips added to the interface and force running it

2018-01-11 Thread --Ahmad--
is this squid limitation ? or kernel limitation ? > On Jan 11, 2018, at 12:07 PM, Amos Jeffries wrote: > > On 11/01/18 21:50, --Ahmad-- wrote: >> must the ip be attached on os interface so that squid use it as outgoing >> address ? >> can squid use outgoing address that not being attached t

Re: [squid-users] want ignore if the ips added to the interface and force running it

2018-01-11 Thread Amos Jeffries
On 11/01/18 21:50, --Ahmad-- wrote: must the ip be attached on os interface so that squid use it as outgoing address ? can squid use outgoing address that not being attached to the interface ? No it cannot. But that is also why the config I suggested works where the one you attempted does

Re: [squid-users] want ignore if the ips added to the interface and force running it

2018-01-11 Thread --Ahmad--
must the ip be attached on os interface so that squid use it as outgoing address ? can squid use outgoing address that not being attached to the interface ? i tried to outgoing address that not attached but squid gave an error : 2018/01/11 04:42:36 kid1| commBind: Cannot bind socket FD 11622 to

Re: [squid-users] TCP out of memory

2018-01-11 Thread Vieri
Hi, I don't know how to cleanly seperate the 93,* from the 11,* log lines. I posted the following: https://drive.google.com/file/d/1PRJOc6czrA0QEDHkqn3MrmNh08K8JajR/view?usp=sharing It contains a cache.log generated by: debug_options rotate=1 ALL,0 93,6 11,6 I also ran :info and :filedescript