Re: [squid-users] SSLBump and squid process CPU usage

On 27/04/18 03:19, masterx81 wrote: > For now i've tried with the "workers 3" directive, i can see 3 squid process, > seem that they span quite evenly the load and the page loading seem better. > Hope that fix the bottlenek... > In any case, i not know if there is somtheing wrong in the config that

[squid-users] Dynamically updating iptables ipset to bypass squid.

I talked to a developer which uses dnsmasq and it seems to have an option to add resolved ip addresses into a linux ipset set. So it is possible to dynamically add IP addresses of domains out of the proxy interception. Ideally an ICAP service will be able to see the request and redirect the clien

Re: [squid-users] tlsv1 alert unknown ca (1/0)

Maybe i've spotted what was. Trendmicro Antivirus (cloud version). Was generating a lot of TCP_MISS with status code 200. Added the domain .trendmicro.com to the "not bumped" domains (with some microsoft domains used for the update processes) and the cache file is so much clean! -- Sent from

Re: [squid-users] SSLBump and squid process CPU usage

For now i've tried with the "workers 3" directive, i can see 3 squid process, seem that they span quite evenly the load and the page loading seem better. Hope that fix the bottlenek... In any case, i not know if there is somtheing wrong in the config that can hurt the performance -- Sent fro

Re: [squid-users] tlsv1 alert unknown ca (1/0)

How i can find what is the problematic CA? On the cache.log i have hundreds of this (aroung 10 per second), but in the access.log i have really few TCP_DENIED connections or in general other errors that can indicate what's causing that problem. Thanks!! -- Sent from: http://squid-web-proxy-cac

Re: [squid-users] Squid with squidguard

Thank you Amos for the feedback. I did see an example online using ACL and that tricked me. Removing the allow line, now squid is logging that squidguard is started (though no squidguard processes are listed, it could be due to that I have not tested yet with actual traffic) I will check also ufd

Re: [squid-users] When does Squid reset upstream connections?

On 27/04/18 00:20, jbhasin83 wrote: > Hello, > > I have a squid set up in transparent proxy. Squid sends a TCP RESET message > to the uperstream server but does not put an outgoing TCP outgoing mark. > Squid puts an outgoing TCP mark on every other packet going upstream. > Is this a bug ? Maybe,

Re: [squid-users] When does Squid reset upstream connections?

Hello, I have a squid set up in transparent proxy. Squid sends a TCP RESET message to the uperstream server but does not put an outgoing TCP outgoing mark. Squid puts an outgoing TCP mark on every other packet going upstream. Is this a bug ? Thanks, Jatin Bhasin -- Sent from: http://squid-web

Re: [squid-users] tlsv1 alert unknown ca (1/0)

On 26/04/18 20:40, masterx81 wrote: > > What i can try to do? You can try to find out what the CA is and work from there. Amos ___ squid-users mailing list squid-users@lists.squid-cache.org http://lists.squid-cache.org/listinfo/squid-users

[squid-users] tlsv1 alert unknown ca (1/0)

Hi! I've enabled the ssl-bump with following directives: acl no_ssl_interception dstdomain .somedomain.com ssl_bump none localhost ssl_bump none no_ssl_interception ssl_bump stare ssl_bump bump all http_port 8080 ssl-bump cert=/etc/squid/ca.pem generate-host-certificates=on dynamic_cert_mem_cach