Re: [squid-users] AWS NLB Proxy Protocol V2

2021-10-18 Thread Alex Rousskov
On 10/18/21 5:16 PM, Ty Martin wrote: > Ah, yep. Adding the following to my config got things working in AWS: > acl private src 172.0.0.0/8 > proxy_protocol_access allow private > http_port 3128 require-proxy-header > I was trying to test it locally without success by running the Docker > contai

Re: [squid-users] AWS NLB Proxy Protocol V2

2021-10-18 Thread Ty Martin
Ah, yep. Adding the following to my config got things working in AWS: ``` acl private src 172.0.0.0/8 proxy_protocol_access allow private http_port 3128 require-proxy-header ``` I was trying to test it locally without success by running the Docker container and hitting it with a curl along the li

Re: [squid-users] AWS NLB Proxy Protocol V2

2021-10-18 Thread Alex Rousskov
On 10/18/21 12:11 PM, Ty Martin wrote: > I am looking to run Squid as a forward proxy with basic auth in Docker > on AWS ECS behind a network load balancer. I seem to have things up and > running for the most part; however, I am having difficulty in getting > proxy protocol to work so that I get a

Re: [squid-users] tunnel.cc error: local=my_proxy-ip_address remote=client_ip_address FD flags=1: read/write failure: (104) Connection reset ny peer

2021-10-18 Thread Alex Rousskov
On 10/18/21 5:04 AM, Sándor Szabolcs [Budapest Környéki Törvényszék] wrote: > My squid cache log has a lot of error: > > tunnel.cc error: local=my_proxy-ip_address remote=client_ip_address FD > flags=1: read/write failure: (104) Connection reset ny peer > ... my squid working perfectly. Assumin

[squid-users] AWS NLB Proxy Protocol V2

2021-10-18 Thread Ty Martin
Good morning, I am looking to run Squid as a forward proxy with basic auth in Docker on AWS ECS behind a network load balancer. I seem to have things up and running for the most part; however, I am having difficulty in getting proxy protocol to work so that I get access to client IP addresses beyo

Re: [squid-users] [SPAM] Re: [SPAM] [ext] Squid 5.1 memory usage

2021-10-18 Thread Flashdown
Hi, you can use the rebased patch for Squid4 that I have attached to the bug 4526. It works also against 5.1 and 5.2 and I am currently running 5.2 with it and I have not seen any issues yet. Best Regards Enrico Heine Am 18. Oktober 2021 08:01:58 MESZ schrieb Ralf Hildebrandt : >* Steve Hill :

Re: [squid-users] Kerberos authentication with multiple squids

2021-10-18 Thread Grant Taylor
On 10/17/21 10:57 AM, Grant Taylor wrote: My understanding is that you can use Kerberos from clinet0 to proxy1 and that proxy1 can use the same mechanism to get a special ticket to communicate from proxy1 to proxy2 as the original user. I looked at my copy of Kerberos - The Definitive Guide by

[squid-users] tunnel.cc error: local=my_proxy-ip_address remote=client_ip_address FD flags=1: read/write failure: (104) Connection reset ny peer

2021-10-18 Thread Sándor Szabolcs [Budapest Környéki Törvényszék]
Hi! My squid cache log has a lot of error: tunnel.cc error: local=my_proxy-ip_address remote=client_ip_address FD flags=1: read/write failure: (104) Connection reset ny peer workers 4 cpu_affinity_map process_numbers=1,2,3,4 cores=3,4,5,6 acl localnet src 10.0.0.0/8 # RFC 1918 local