Re: [squid-users] How to use request headers in external_acl_type

2021-06-30 Thread Yosi Greenfield
Amos, As always, thank you for your dedication answering all our questions. Ok, turns out, as you noted, the browser is sending the correct request headers. However, on https requests the external acl program is not getting the custom header we're sending. SSL Bump is set, and works for our redir

Re: [squid-users] Error negotiating SSL connection on FD 366 - cache.log

2021-06-30 Thread robert k Wild
thanks Alex seems like one client (it shows the ip) is trying to get to this site but i havnt added it to my white list, so thats why its getting blocked events.gfe.nvidia.com thanks a bunch alex, your awesome On Wed, 30 Jun 2021 at 17:09, Alex Rousskov < rouss...@measurement-factory.com>

Re: [squid-users] Error negotiating SSL connection on FD 366 - cache.log

2021-06-30 Thread Alex Rousskov
On 6/30/21 11:48 AM, robert k Wild wrote: > How do I enable all 9 debugging to find out what client ip it is thats > sending all these tls errors. 0. Start Squid if necessary. 1. Locate your Squid log file or equivalent. In this example, we will call it cache.log. 2. Run "tail -f cache.log > pa

Re: [squid-users] Error negotiating SSL connection on FD 366 - cache.log

2021-06-30 Thread robert k Wild
Cool, so I put this in squid.conf debug_options 9 And then restart squid and tail the cache.log On Wed, 30 Jun 2021, 16:48 robert k Wild, wrote: > Thanks Alex, > > How do I enable all 9 debugging to find out what client ip it is thats > sending all these tls errors. > > There's a lot of mac/p

Re: [squid-users] Error negotiating SSL connection on FD 366 - cache.log

2021-06-30 Thread robert k Wild
Thanks Alex, How do I enable all 9 debugging to find out what client ip it is thats sending all these tls errors. There's a lot of mac/pcs that are connected to this squid server and I have added the myca.der file to there machines as I'm doing ssl bumping. Thanks, Rob On Wed, 30 Jun 2021, 16

Re: [squid-users] Error negotiating SSL connection on FD 366 - cache.log

2021-06-30 Thread Alex Rousskov
On 6/30/21 6:41 AM, robert k Wild wrote: > never really noticed this as i rarely "tail -f" the cache log but im > noticing these lines like every second > 2021/06/30 11:39:13 kid1| Error negotiating SSL connection on FD 266: > error:0001:lib(0):func(0):reason(1) (1/-1) > 2021/06/30 11:39:13 k

Re: [squid-users] HTTP requests queue

2021-06-30 Thread Alex Rousskov
On 6/30/21 4:51 AM, Moti Berger wrote: > I'm using Squid with ICAPs and ECAPs. Some of them are faster than others. > Does squid hold one queue for each chain (REQMOD/RESPMOD) or per ICAP/ECAP? Squid maintains an adaptation chain dedicated to each HTTP message. At that level, Squid does not know

Re: [squid-users] TPROXY Error

2021-06-30 Thread Ben Goz
On 30/06/2021 15:25, Antony Stone wrote: On Wednesday 30 June 2021 at 14:16:09, Ben Goz wrote: I'm trying to configure squid as a transparent proxy using TPROXY. The machine I'm using has 2 NICs, one for input and the other one for output traffic. The TPROXY iptables rules are configured on th

Re: [squid-users] TPROXY Error

2021-06-30 Thread Antony Stone
On Wednesday 30 June 2021 at 14:16:09, Ben Goz wrote: > I'm trying to configure squid as a transparent proxy using TPROXY. > The machine I'm using has 2 NICs, one for input and the other one for > output traffic. > The TPROXY iptables rules are configured on the input NIC. 1. Which version of Squ

[squid-users] TPROXY Error

2021-06-30 Thread Ben Goz
By the help of God. Hi All, I'm trying to configure squid as a transparent proxy using TPROXY. The machine I'm using has 2 NICs, one for input and the other one for output traffic. The TPROXY iptables rules are configured on the input NIC. It looks like iptables TPROXY redirect works but squid pr

[squid-users] Error negotiating SSL connection on FD 366 - cache.log

2021-06-30 Thread robert k Wild
hi all, never really noticed this as i rarely "tail -f" the cache log but im noticing these lines like every second 2021/06/30 11:39:13 kid1| Error negotiating SSL connection on FD 266: error:0001:lib(0):func(0):reason(1) (1/-1) 2021/06/30 11:39:13 kid1| Error negotiating SSL connection on FD

[squid-users] HTTP requests queue

2021-06-30 Thread Moti Berger
Hi, I'm using Squid with ICAPs and ECAPs. Some of them are faster than others. Does squid hold one queue for each chain (REQMOD/RESPMOD) or per ICAP/ECAP? Meaning, if I have one ECAP and one ICAP in a chain where the faster ECAP is first. Will the ECAP keep getting new HTTP requests to adapt even