[squid-users] Can cache_peer be localhost?

2018-02-16 Thread Peng Yu
Hi, I have the following configuration. When I access port 3129 and it is localhost's turn in the round-robin, then the access will fail. Is there a way to make it work? $ grep -v '^#' squid.conf|grep -v '^$' acl localnet src 172.16.0.0/12# RFC1918 possible internal network acl SSL_ports port

Re: [squid-users] How to combine two proxies into one?

2018-02-16 Thread Peng Yu
On Thu, Feb 15, 2018 at 3:31 AM, Amos Jeffries wrote: > On 15/02/18 17:00, Peng Yu wrote: >> Hi, >> >> Here are the conf files for two proxies. The first is a reverse proxy >> (proxied on server1 and server2) and the second is a forward proxy. Is >> there a way to combine the two into one (support

[squid-users] squid -k rec , seems has problem with ram leakage ?

2018-02-16 Thread --Ahmad--
hey folks i have a Multi instances in squid and i run them and keep use(( -k rec))) option but it seems after some hours i see ram keep increasing . i see ram better if i kill squid then run it normally . but ram keep sucked by squid if i use -k rec option I’m using squid Squid Cache

Re: [squid-users] log external ip address in squid logs

2018-02-16 Thread --Ahmad--
oh man , not sure how didnt i see it . you correct , thank you ! > On Feb 12, 2018, at 6:34 PM, Antony Stone > wrote: > > On Monday 12 February 2018 at 16:36:58, --Ahmad-- wrote: > >> Hello folks >> >> i had a look on >> http://www.squid-cache.org/Doc/config/logformat/ >> but i cant see the e

Re: [squid-users] Creating New Log File

2018-02-16 Thread Kelly
Thanks for the reply Amos. Being a novice on the Squid, is there a Squid for Dummies version of creating a new log to view only the traffic to a particular website or url? I tried to navigate through the link you sent, and it mostly went over my head. If not, I may reach out to our vendor who may h

Re: [squid-users] kerberos authentication with kerberos groups

2018-02-16 Thread Amos Jeffries
On 17/02/18 02:02, Jeroen Ruijter wrote: > I'm trying to replace my basic ldap authentication by kerberos single > sign on. > NP: Despite what some claim, SSO is not unique to NTLM and Kerberos authentication. It is a behaviour of the tools used. As such it can be done with *any* authentication t

Re: [squid-users] Creating New Log File

2018-02-16 Thread Amos Jeffries
On 17/02/18 04:46, McCarty, Kelly wrote: > We are running a squid on a linux box. Webmin version 1.610. > >   > > I want to create a new log file within our Squid to trace traffic going > to a specific site or url and I am a novice when it comes to the squid. > Are there any easy directions to cr

[squid-users] Creating New Log File

2018-02-16 Thread McCarty, Kelly
We are running a squid on a linux box. Webmin version 1.610. I want to create a new log file within our Squid to trace traffic going to a specific site or url and I am a novice when it comes to the squid. Are there any easy directions to create this type of log? An outside vendor created one a

Re: [squid-users] All 32/32 ssl_crtd processes are busy / All 35/35 negotiateauthenticator processes are busy

2018-02-16 Thread Yuri
#  TAG: sslcrtd_children #    The maximum number of processes spawn to service ssl server. #    The maximum this may be safely set to is 32. #    #    The startup= and idle= options allow some measure of skew in your #    tuning. #    #        startup=N #    #    Sets the minimum number of processe

[squid-users] All 32/32 ssl_crtd processes are busy / All 35/35 negotiateauthenticator processes are busy

2018-02-16 Thread erdosain9
Hi. Im having this warning in cache.log 2018/02/14 15:56:55 kid1| WARNING: All 32/32 ssl_crtd processes are busy. 2018/02/14 15:56:55 kid1| WARNING: 32 pending requests queued 2018/02/14 15:56:55 kid1| WARNING: Consider increasing the number of ssl_crtd processes in your config file. 2018/02/14

[squid-users] kerberos authentication with kerberos groups

2018-02-16 Thread Jeroen Ruijter
I'm trying to replace my basic ldap authentication by kerberos single sign on. The user can succesfully login with single sign on, but I have restriction on groups and that is where it goes wrong. I would like to use -r to trim the domain name, but when I do so it seems to work even less. Someone

Re: [squid-users] squid4 with sslbump not logged server side cert_subject and cert_issuer

2018-02-16 Thread Peter Viskup
On Thu, Feb 15, 2018 at 7:41 PM, Alex Rousskov wrote: > On 02/15/2018 07:32 AM, Amos Jeffries wrote: >> On 16/02/18 01:44, Peter Viskup wrote: >>> Running squid version 4.0.23 with logformat including >>> >>> SSLBumpMode=%ssl::bump_mode SSLSNI="%ssl::>sni" >>> SSLClientProto="%ssl::>negotiated_ver