[squid-users] tcp_outgoing_address working on Windows machine but not on Ubuntu

2018-06-14 Thread davidjesse091
On my Windows machine I can successfully connect to interface 1 and have the connections go out from interface 2 using "tcp_outgoing_address", but this does not work on my Linux Ubuntu machine. Anyone else notice this and know the reason and solution for this? __

Re: [squid-users] Squid and systemd

2018-06-14 Thread James Lay
Thanks...still a newb at systemd and that was totally the fix. James On Wed, 2018-06-13 at 10:03 -0300, Marcus Kool wrote: > I have seen systemd killing daemons when it times out waiting for the > pid file to appear.I suggest to doublecheck that the pid filename in > the service file and in squid

Re: [squid-users] HTTPS cache for Java application - only getting TCP_MISS

2018-06-14 Thread Alex Rousskov
On 06/14/2018 01:32 PM, baretomas wrote: > On 14 June 2018 1:25 PM, Amos Jeffries wrote: >> 2. if you have enough control of the apps to get them connecting with >> TLS to the proxy and sending their requests there. Do that. You are not doing this if your Squid receives CONNECT requests. If

Re: [squid-users] HTTPS cache for Java application - only getting TCP_MISS

2018-06-14 Thread baretomas
Ok Im back. Still confused as ever. Look below for my story. On 14 June 2018 1:25 PM, Amos Jeffries wrote: > There are three ways to do this: > > 1. if you own the domain the apps are connecting to. Setup the proxy as > a normal TLS / HTTPS reverse-proxy. > 2. if you have enough control

Re: [squid-users] HTTPS cache for Java application - only getting TCP_MISS

2018-06-14 Thread Tomas Finnøy
‐‐‐ Original Message ‐‐‐ On June 14, 2018 1:25 PM, Amos Jeffries wrote: > On 14/06/18 07:28, baretomas wrote: > > > Hello, > > > > I'm setting up a Squid proxy as a cache for a number (as many as possible) > > > > of identical JAVA applications to run their web calls through. The call

Re: [squid-users] [ext] Re: cacheHttpAllSvcTime quite high

2018-06-14 Thread Ralf Hildebrandt
* Amos Jeffries : > On 14/06/18 23:04, Ralf Hildebrandt wrote: > > We're using squid 5.0.0-20180202-r51e09c0 and I recently realized that > > the values for "cacheHttpAllSvcTime" are quite high > > > > cacheHttpAllSvcTime.5 = 288 > > cacheHttpMissSvcTime.5 = 45 > > cacheHttpNmSvcTime.5 = 0 > > cac

Re: [squid-users] cacheHttpAllSvcTime quite high

2018-06-14 Thread Amos Jeffries
On 14/06/18 23:04, Ralf Hildebrandt wrote: > We're using squid 5.0.0-20180202-r51e09c0 and I recently realized that > the values for "cacheHttpAllSvcTime" are quite high > > cacheHttpAllSvcTime.5 = 288 > cacheHttpMissSvcTime.5 = 45 > cacheHttpNmSvcTime.5 = 0 > cacheHttpNhSvcTime.5 = 23 > cacheHttp

Re: [squid-users] HTTPS cache for Java application - only getting TCP_MISS

2018-06-14 Thread Amos Jeffries
On 14/06/18 07:44, Antony Stone wrote: > On Wednesday 13 June 2018 at 21:28:27, baretomas wrote: > >> The calls from the application is done using ssl / https by telling java to >> use Squid as a proxy (-Dhttps.proxyHost and -Dhttp.proxyHost). > > Okay, but... > >> http_port 3128 ssl-bump genera

Re: [squid-users] HTTPS cache for Java application - only getting TCP_MISS

2018-06-14 Thread Amos Jeffries
On 14/06/18 07:28, baretomas wrote: > Hello, > > I'm setting up a Squid proxy as a cache for a number (as many as possible) > of identical JAVA applications to run their web calls through. The calls are > ofc identical, and the response they get can safely be cached for 5-10 > seconds. > I do thi

[squid-users] cacheHttpAllSvcTime quite high

2018-06-14 Thread Ralf Hildebrandt
We're using squid 5.0.0-20180202-r51e09c0 and I recently realized that the values for "cacheHttpAllSvcTime" are quite high cacheHttpAllSvcTime.5 = 288 cacheHttpMissSvcTime.5 = 45 cacheHttpNmSvcTime.5 = 0 cacheHttpNhSvcTime.5 = 23 cacheHttpHitSvcTime.5 = 1 cacheIcpQuerySvcTime.5 = 0 cacheIcpReplySv

Re: [squid-users] SSL errors with Squid 3.5.27

2018-06-14 Thread Matus UHLAR - fantomas
On 13.06.18 18:20, Julian Perconti wrote: Does not shows any cert and establishes a connection with TLS 1.2... openssl s_client -connect 31.13.94.54:443 CONNECTED(0003) write:errno=104 --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 0 by

Re: [squid-users] SSL errors with Squid 3.5.27

2018-06-14 Thread Amos Jeffries
On 14/06/18 09:20, Julian Perconti wrote: > > # > Here a example: > # > > openssl s_client -connect 31.13.94.54:443 > CONNECTED(0003) > write:errno=104 > --- > no peer certificate available > --- > No client certificate CA names sent > --- > SSL handshake has read 0 bytes and written

Re: [squid-users] HTTPS cache for Java application - only getting TCP_MISS

2018-06-14 Thread Tomas Finnøy
On June 14, 2018 10:25 AM, Antony Stone wrote: > On Thursday 14 June 2018 at 09:09:05, Tomas Finnøy wrote: > > > > Surely all this peeking and bumping is only needed if you're running > > > > > > Squid in interception mode, whereas you've said that you've configured > > > > > > your Java app

Re: [squid-users] HTTPS cache for Java application - only getting TCP_MISS

2018-06-14 Thread Antony Stone
On Thursday 14 June 2018 at 09:09:05, Tomas Finnøy wrote: > > Surely all this peeking and bumping is only needed if you're running > > Squid in interception mode, whereas you've said that you've configured > > your Java application to explicitly use Squid as a proxy? > > I found some "how-to's" a

[squid-users] HTTPS cache for Java application - only getting TCP_MISS

2018-06-14 Thread Tomas Finnøy
> Surely all this peeking and bumping is only needed if you're running Squid in > interception mode, whereas you've said that you've configured your Java > application to explicitly use Squid as a proxy? I found some "how-to's" and posts that were explaining how to make a https cache proxy, and t