[squid-users] limit new req/sec on squid to X per sec

2019-11-26 Thread --Ahmad--
Hello Folks , im looking for limiting TCP req/sec on squid to X speed . say i have an instance running . i want to limit it to 100 req/sec for “new connections “ not just for concurrent connections . so if connection is old or “ established “ its out of the game . if the connection is new

[squid-users] Squid Send to Cache Peer based on Header Access if not matched .

2019-11-26 Thread --Ahmad--
Hello Floks , i have squid ACL/TCP Outgoing based on incoming header . as an example below : acl requestheader5000 req_header X-Proxy 1.2.3.4 acl requestheader5001 req_header X-Proxy 1.2.3.5 acl requestheader5002 req_header X-Proxy 1.2.3.6 acl requestheader5003 req_header X-Proxy 1.2.3.7

Re: [squid-users] What is the proper way to close an ICAP transaction?

2019-11-26 Thread Felipe Arturo Polanco
Hi, The flow is the following: ICAP transaction is sent to ICAP server with a PREVIEW header ICAP server sends ICAP header 100 Continue ICAP server sends ICAP header 200 OK to start data transfer ICAP server receives a chunk, checks if its the last chunk, if not then append to temp file and send

Re: [squid-users] What is the proper way to close an ICAP transaction?

2019-11-26 Thread Alex Rousskov
On 11/26/19 2:52 PM, Felipe Arturo Polanco wrote: > We are sending an encapsulated HTTP 307 redirect webpage header whenever > a Virus is found and stop sending any other data after that You must use ICAP status code 200 then. Make sure your encapsulated HTTP 307 body (if any) is properly sent to

Re: [squid-users] What is the proper way to close an ICAP transaction?

2019-11-26 Thread Felipe Arturo Polanco
Hi, We are sending an encapsulated HTTP 307 redirect webpage header whenever a Virus is found and stop sending any other data after that, but squid complains about ICAP failure when we do that: Adaptation::Icap::Xaction::noteCommRead threw exception: corrupted chunk size We are not sending an ICA

Re: [squid-users] What is the proper way to close an ICAP transaction?

2019-11-26 Thread Alex Rousskov
On 11/26/19 10:15 AM, Felipe Arturo Polanco wrote: > While we can successfully scan our files and do content adaptation, we > have been struggling to find a way to close the ICAP transaction before > passing the whole body back to squid and at the same time avoid squid > marking one icap failure.

Re: [squid-users] making proxy-int to talk to proxy-ext

2019-11-26 Thread Alex Rousskov
On 11/26/19 10:54 AM, robert k Wild wrote: > as i have configured both internal proxy (non internet facing) and > external proxy (internet facing) from source, Please show the essential parts of both internal and external Squid configurations for the broken setup (at least). It is difficult to

[squid-users] making proxy-int to talk to proxy-ext

2019-11-26 Thread robert k Wild
hi all, as i have configured both internal proxy (non internet facing) and external proxy (internet facing) from source, followed this guide - https://wiki.squid-cache.org/ConfigExamples/Intercept/SslBumpExplicit it works if i comment out the ssl lines - #SSL #http_port 3128 ssl-bump \ #cert=/e

[squid-users] What is the proper way to close an ICAP transaction?

2019-11-26 Thread Felipe Arturo Polanco
Hi, We have an ICAP server for Squid 4. While we can successfully scan our files and do content adaptation, we have been struggling to find a way to close the ICAP transaction before passing the whole body back to squid and at the same time avoid squid marking one icap failure. This is for an IC

Re: [squid-users] building squid 4 terminates with fatal error but doesnt say the error

2019-11-26 Thread robert k Wild
Amos, thanks so much for all your help! :) On Tue, 26 Nov 2019 at 11:58, Amos Jeffries wrote: > On 26/11/19 10:54 pm, robert k Wild wrote: > > nice one Amos, i did - > > > > touch /usr/local/squid/var/logs/access.log > > chmod 777 /usr/local/squid/var/logs/access.log > > > > > This will bre

Re: [squid-users] building squid 4 terminates with fatal error but doesnt say the error

2019-11-26 Thread Amos Jeffries
On 26/11/19 10:54 pm, robert k Wild wrote: > nice one Amos, i did - > > touch /usr/local/squid/var/logs/access.log > chmod 777 /usr/local/squid/var/logs/access.log > This will break again when the log rotation happens. The *directory* (folder path) is the important piece to get right. That is /

Re: [squid-users] After enabling IPv6 squid no longer responds

2019-11-26 Thread Amos Jeffries
On 26/11/19 11:52 am, Alex Rousskov wrote: > On 11/25/19 1:53 PM, James Moe wrote: > >> I have narrowed the problem space. The issue occurs only with https:, and not >> always. Most sites timeout, others (partially) load after a delay of 5 - 20 >> seconds. >> The delay never occurs for non-secure

[squid-users] Help with squid proxy parent directive

2019-11-26 Thread jmperrote
Hello we are trying to configure two squid reverse proxy, one frontend to internet and the other inside the network. Both on reverse proxy mode, and one dependening the other.     internet ---> squid reverse proxy one ---> squid reverse proxy two ---> inside web server Accessing to first re

Re: [squid-users] After enabling IPv6 squid no longer responds

2019-11-26 Thread Amos Jeffries
On 26/11/19 8:11 am, James Moe wrote: > On 2019-11-14 3:04 PM, Alex Rousskov wrote: > >> FYI: "utterly ignored" seems to contradict "error message from squid" >> above. >> > The command "ip a" produces the following rather intimidating output. > Should I > add some more IPv6 addresses to the co

Re: [squid-users] building squid 4 terminates with fatal error but doesnt say the error

2019-11-26 Thread robert k Wild
nice one Amos, i did - touch /usr/local/squid/var/logs/access.log chmod 777 /usr/local/squid/var/logs/access.log On Tue, 26 Nov 2019 at 06:11, Amos Jeffries wrote: > On 26/11/19 1:55 pm, robert k Wild wrote: > > hi all, > > > > im building squid 4 by following this guide - > > > > https://wiki.