Re: [squid-users] 3.5.20 run out of my memory.

2018-02-08 Thread Sticher, Jascha
> Von: squid-users [mailto:squid-users-boun...@lists.squid-cache.org] Im > Auftrag von Amos Jeffries > Gesendet: Freitag, 9. Februar 2018 08:37 > > On 09/02/18 20:30, Sticher, Jascha wrote: > > Hi, > > > >> KiB Mem: 4037016 total, 3729152 used, 307864 free, 120508 buffers > >> KiB Swap: 851

Re: [squid-users] 3.5.20 run out of my memory.

2018-02-08 Thread Amos Jeffries
On 09/02/18 20:30, Sticher, Jascha wrote: > Hi, > >> KiB Mem: 4037016 total, 3729152 used, 307864 free, 120508 buffers >> KiB Swap: 8511484 total,0 used, 8511484 free. 2213580 cached Mem > > this is normal behaviour in Linux - everything that's once read from disk is > cached i

Re: [squid-users] 3.5.20 run out of my memory.

2018-02-08 Thread Amos Jeffries
On 09/02/18 14:12, minh hưng đỗ hoàng wrote: > Thanks alot for your help, > > > https_port 3130 tproxy ssl-bump generate-host-certificates=on > > dynamic_cert_mem_cache_size=4MB > > cert=/etc/squid/ssl/e1f19c0494badc8dc14e8c4c56a8b97a.dyn > > Please add sslflags=NO_DEFAULT_CA to t

Re: [squid-users] 3.5.20 run out of my memory.

2018-02-08 Thread Sticher, Jascha
Hi, > KiB Mem: 4037016 total, 3729152 used, 307864 free, 120508 buffers > KiB Swap: 8511484 total,0 used, 8511484 free. 2213580 cached Mem this is normal behaviour in Linux - everything that's once read from disk is cached in RAM, as long as there is free memory. If the RAM is

Re: [squid-users] 3.5.20 run out of my memory.

2018-02-08 Thread minh hưng đỗ hoàng
Thanks alot for your help, > https_port 3130 tproxy ssl-bump generate-host-certificates=on > > dynamic_cert_mem_cache_size=4MB > > cert=/etc/squid/ssl/e1f19c0494badc8dc14e8c4c56a8b97a.dyn > > Please add sslflags=NO_DEFAULT_CA to the above config line. That should > reduce the memory usage a lot. >

Re: [squid-users] Macros

2018-02-08 Thread Alex Rousskov
On February 8, 2018 13:27:06 Alfredo Daniel Rezinovsky wrote: I know there is a macro ${service_name} I like to know if there are other See squid.conf.documented. Modern versions have a section devoted to macros, before all the directives are described. or there's a way to parse enviro

Re: [squid-users] Macros

2018-02-08 Thread Yuri
Indeed :) You can cover this by write good documentation and share it ;) This is OpenSource ;) Nothing exists - except you will create by yourself ;) 09.02.2018 01:34, Alfredo Daniel Rezinovsky пишет: > > I tried searching in the code and still couldn't find it. But > Challenge accepted. > >

Re: [squid-users] Macros

2018-02-08 Thread Alfredo Daniel Rezinovsky
I tried searching in the code and still couldn't find it. But Challenge accepted. On 08/02/18 16:28, Yuri wrote: This is OpenSource :) There is no documentation :) (As they say - read the code to get documentation ;)) 09.02.2018 01:26, Alfredo Daniel Rezinovsky пишет: I know there is a

Re: [squid-users] Macros

2018-02-08 Thread Yuri
This is OpenSource :) There is no documentation :) (As they say - read the code to get documentation ;)) 09.02.2018 01:26, Alfredo Daniel Rezinovsky пишет: > I know there is a macro ${service_name} > > I like to know if there are other or there's a way to parse > environment variables in squid.co

[squid-users] Macros

2018-02-08 Thread Alfredo Daniel Rezinovsky
I know there is a macro ${service_name} I like to know if there are other or there's a way to parse environment variables in squid.conf. I didn't find this in the on line documentation ___ squid-users mailing list squid-users@lists.squid-cache.org h

Re: [squid-users] Certificate Authority with SSLBump

2018-02-08 Thread Yuri
1. Using mozilla CA bundle instead of system (if exists) for squid. 2. Update mozilla CA bundle by script by cron on regular basis. 3. Have own manually maintained custom add_certs.pem list which combines with step 2 during updates. Thats all, folks. 08.02.2018 23:33, FredB пишет: > Hi All, >

[squid-users] Certificate Authority with SSLBump

2018-02-08 Thread FredB
Hi All, In practise how you maintain the CA files? I'm testing SSLBump with Debian Jessie the package ca-certificates provides many certificates but less than the latest Firefox Browser. How do you manage to keep all that in check? When a CA is missing you add the pem in you system config or ex

Re: [squid-users] Squid 3.x or 4.x acting as a transparent http proxy (NOT https)

2018-02-08 Thread Amos Jeffries
On 08/02/18 10:11, setuid wrote: > I'll start with the pointedly easy stuff: Squid > 2.6 (tested 3.4, 3.5, > 4.0 on Ubuntu Xenial, Debian Jessie, FreeSBD 11.1 using iptables, pf, > ipf, ipfilter) does not work at all, when configured as a transparent > proxy. Full stop. > > I went through hundred